last executing test programs:

37m6.485346017s ago: executing program 3 (id=4):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
fcntl$notify(r1, 0x402, 0x8000000b)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20)
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000005c0)=&(0x7f0000000580))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/78, 0x0})
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0xa4000021)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x124)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x1404, 0x6000, 0x0, 0x6, 0x0, @remote, @local, {[@noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
close(r2)
openat$rtc(0xffffff9c, &(0x7f0000000040), 0x24000, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

37m6.250148075s ago: executing program 3 (id=5):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0xf2f, 0x2, 0x2, 0x100000, 0x9, {0x77359400}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc03"}, 0x1, 0x1, {}, 0x1})
sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000400, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100), 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000008206004018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200080085000000050000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c000000090601080000000000007f000700000009000e0073797a00050001000b000240fe8000f7ffe23dc30400eb00000000000000000000bb060004400e1f"], 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

36m50.497538491s ago: executing program 32 (id=5):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0xf2f, 0x2, 0x2, 0x100000, 0x9, {0x77359400}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc03"}, 0x1, 0x1, {}, 0x1})
sendmsg$NFT_BATCH(r0, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000400, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000100), 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000008206004018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200080085000000050000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c000000090601080000000000007f000700000009000e0073797a00050001000b000240fe8000f7ffe23dc30400eb00000000000000000000bb060004400e1f"], 0x4c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

36m14.705654998s ago: executing program 4 (id=178):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (fail_nth: 2)

36m14.48745937s ago: executing program 4 (id=181):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x8000)

36m14.204317843s ago: executing program 4 (id=183):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001"], 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet_icmp(0x2, 0x2, 0x1)
openat$nullb(0xffffff9c, &(0x7f0000000040), 0x187c80, 0x0)
r4 = fcntl$dupfd(r0, 0x406, r3)
setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
sendmsg$nl_route(r1, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r10=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

36m12.419513157s ago: executing program 4 (id=191):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001d980200000031ef0b64000000000000", @ANYRES32=r2, @ANYBLOB="200094dd0a000200aaaaaaaaaa1c"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
mount(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r4, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x60091)
connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x100, 0x30, 0xb, 0x5, 0x0, {}, [{0xb8, 0x1, [@m_ct={0xb4, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4d, 0x6, "3fd51359812c6454b1636f0ddf8e135a9f5a6300609cac34cac073e2cddf504c6ea8a0ca7847e8157031cf4aa65b54fad471abcd95eb066d3d615bcfc0a74012d12026faaafa71fcfb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x34, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x45e922a75a594233}, 0x40)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

36m8.905722614s ago: executing program 4 (id=204):
r0 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(r1, r1, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$CDROMPLAYBLK(r0, 0x5317, 0x0)

36m8.707580765s ago: executing program 4 (id=205):
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e503000000000000000000002c9f38000004"], 0x78)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003240)=ANY=[@ANYBLOB="347441f953d439cd5e80aba529e3bc0572bf1ab6aaaeb734af895ff7b9138406920cfa63f0da5969d6e8e4aff1c3acb4d8a607510571be2372abab5abe2c36d5b989ae7a11a6a9d42a84ecc69419dc580ad2507ddcffeec1303640693bddfc33a76f645ea70122fdd0e048e06d3f8c00d1a1307db974094e1fccb2c5357ed167729c649c9e90b1560be4c973632cbe91d6", @ANYRESDEC, @ANYBLOB="a0ce58e1a10c3092709977498d73bbc70380cfe551d25f2c39713a17dce9e8a375c62de150adfa28d1e07d8f58833be5eba2086346adcb2f63f20e184c3e87aa7c5ce75b45", @ANYRES64], 0x7c}}, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'})
io_uring_setup(0x57f0, &(0x7f0000000500)={0x0, 0xb72b, 0x1, 0x2, 0x6d})
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000008c0)="99", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000580)="4d2041e8324b407c4e701a603ac31fd007c857597d75311451d8cd343eff987e2cd7f2ce3391c2fe10d30cb0e47c1e44b0de47246bb0cf48cddb7eb947330e29d73599a3c27dca2db1304c52809d906f1626fa463b1b0cd0a51887ea214d312470980c7b78691c86437d44a9d2af7a2e338384bb7f46da2f8e0187ca638a1456edf9c4e83b2368812b9f0d3165851b2bf5ab2695a2e532e3d1b58fe5f718938844cdeea57139063f679cc841f355ca4dd05600219fed5a57d0ed664a9b3e2fa8c6044e0f", 0xc4}, {&(0x7f0000000680)="c6808833e0a6af0777d9a29609f876dca088d49a9053834423dc0d64c03cd1f38daefc10377017f82db6f335c62c713ea2a51f3b9c6c6a77a7cf80258ecaa49b536fcf826ff2d41c82184413aff354426631a35e22265d82b968f6f72a09e6279c401d726ac9a45a5c35dc5c3a6560f100221c2f215ced9dbaa8d52c9a314b9eeb56801dceb29d89cf5bacbc93ef28dac6a4", 0x92}, {&(0x7f0000000740)="363c2c1b39781dd9970f87a7c370d6c89efa8ad287f60a668bf9702007cf1455e5672293996a3c1eee85a9292be382afdbd39172f7e26b6d924d0a49505dd6245abe5501fbc5e1a2f56ff1dc13a917be4cdca0fe61947cec9566c8a5c49ecd825ea447f16568c78aae96ff534009ced92b10340addef16ac2b450c00c1e827f58772fa68b52b4f694d39dc61a2f8ced1e6d2dc26d4155807065f1d02a24309798a8b872f21b182debf37991fd3c64b8d21f152f9d9f1154f61267ea4d6e29edf14f53f9bd43041a8ce9b0dee3d48400a20cde58f", 0xd4}, {&(0x7f0000000880)="db23fb59e3138a0162dd5ae6526da8663e502bee6d7ac271e9fe5e6699bee19bebaefa3074e4b42dee83b561d6ef9d94efdf2fa42836bf1d2697560d33", 0x3d}, {&(0x7f00000009c0)="9a4fc823d87f91a514c73778b7a979c43df74ef781f41380f8d204abd271e08fa7cebdce7704a99dcae2eafc69a890852deb5d7bbb7a9cb056c2ea2e6c27f50c1dbd013f97f59a94380c7d0011966e10f456b1ec0c2208479f31d9d27b74e92446d088c68d55c7d432633f672204a1d751cf93c638a0cf198c7aa29def14dbc1f14e801dad1732dec5ea795a20f4c3bbc9410d9e859f6a85fdce54d8588621d221cc1a8f6a0d3a11e7cc509a19fd2801fdb5f3ecff2d0ac3458f1c6c193e6b3a391faa3c96c3d7d8938e65f1c19decde7aad", 0xd2}, {&(0x7f0000000ac0)="df23c27179d5", 0x6}], 0x6, &(0x7f0000000b40)}}], 0x3, 0x48000)
syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x10000, 0x0)
ioctl$COMEDI_POLL(r4, 0x640f)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

36m8.426971015s ago: executing program 33 (id=205):
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e503000000000000000000002c9f38000004"], 0x78)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003240)=ANY=[@ANYBLOB="347441f953d439cd5e80aba529e3bc0572bf1ab6aaaeb734af895ff7b9138406920cfa63f0da5969d6e8e4aff1c3acb4d8a607510571be2372abab5abe2c36d5b989ae7a11a6a9d42a84ecc69419dc580ad2507ddcffeec1303640693bddfc33a76f645ea70122fdd0e048e06d3f8c00d1a1307db974094e1fccb2c5357ed167729c649c9e90b1560be4c973632cbe91d6", @ANYRESDEC, @ANYBLOB="a0ce58e1a10c3092709977498d73bbc70380cfe551d25f2c39713a17dce9e8a375c62de150adfa28d1e07d8f58833be5eba2086346adcb2f63f20e184c3e87aa7c5ce75b45", @ANYRES64], 0x7c}}, 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00'})
io_uring_setup(0x57f0, &(0x7f0000000500)={0x0, 0xb72b, 0x1, 0x2, 0x6d})
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000b80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f00000008c0)="99", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000580)="4d2041e8324b407c4e701a603ac31fd007c857597d75311451d8cd343eff987e2cd7f2ce3391c2fe10d30cb0e47c1e44b0de47246bb0cf48cddb7eb947330e29d73599a3c27dca2db1304c52809d906f1626fa463b1b0cd0a51887ea214d312470980c7b78691c86437d44a9d2af7a2e338384bb7f46da2f8e0187ca638a1456edf9c4e83b2368812b9f0d3165851b2bf5ab2695a2e532e3d1b58fe5f718938844cdeea57139063f679cc841f355ca4dd05600219fed5a57d0ed664a9b3e2fa8c6044e0f", 0xc4}, {&(0x7f0000000680)="c6808833e0a6af0777d9a29609f876dca088d49a9053834423dc0d64c03cd1f38daefc10377017f82db6f335c62c713ea2a51f3b9c6c6a77a7cf80258ecaa49b536fcf826ff2d41c82184413aff354426631a35e22265d82b968f6f72a09e6279c401d726ac9a45a5c35dc5c3a6560f100221c2f215ced9dbaa8d52c9a314b9eeb56801dceb29d89cf5bacbc93ef28dac6a4", 0x92}, {&(0x7f0000000740)="363c2c1b39781dd9970f87a7c370d6c89efa8ad287f60a668bf9702007cf1455e5672293996a3c1eee85a9292be382afdbd39172f7e26b6d924d0a49505dd6245abe5501fbc5e1a2f56ff1dc13a917be4cdca0fe61947cec9566c8a5c49ecd825ea447f16568c78aae96ff534009ced92b10340addef16ac2b450c00c1e827f58772fa68b52b4f694d39dc61a2f8ced1e6d2dc26d4155807065f1d02a24309798a8b872f21b182debf37991fd3c64b8d21f152f9d9f1154f61267ea4d6e29edf14f53f9bd43041a8ce9b0dee3d48400a20cde58f", 0xd4}, {&(0x7f0000000880)="db23fb59e3138a0162dd5ae6526da8663e502bee6d7ac271e9fe5e6699bee19bebaefa3074e4b42dee83b561d6ef9d94efdf2fa42836bf1d2697560d33", 0x3d}, {&(0x7f00000009c0)="9a4fc823d87f91a514c73778b7a979c43df74ef781f41380f8d204abd271e08fa7cebdce7704a99dcae2eafc69a890852deb5d7bbb7a9cb056c2ea2e6c27f50c1dbd013f97f59a94380c7d0011966e10f456b1ec0c2208479f31d9d27b74e92446d088c68d55c7d432633f672204a1d751cf93c638a0cf198c7aa29def14dbc1f14e801dad1732dec5ea795a20f4c3bbc9410d9e859f6a85fdce54d8588621d221cc1a8f6a0d3a11e7cc509a19fd2801fdb5f3ecff2d0ac3458f1c6c193e6b3a391faa3c96c3d7d8938e65f1c19decde7aad", 0xd2}, {&(0x7f0000000ac0)="df23c27179d5", 0x6}], 0x6, &(0x7f0000000b40)}}], 0x3, 0x48000)
syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x40000)
r4 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x10000, 0x0)
ioctl$COMEDI_POLL(r4, 0x640f)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')
mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0)

22m16.115683019s ago: executing program 5 (id=4024):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000240)="1f31b23ce04048a5442a6bf5b7d23b113c7ac7406e8345d7b32d0de2826036a739b7349de441bc7503fd90647e1e2d3e9b3fa2245c4f07a7a44dae8f92dc6acb11cb41667b87bdf673df3c06855b13bd9457cfc257c3e7333bba9c84252c5c6798bc081aba576709b8ca019a86e4f58ffd412de0b81ed72643174d31ad48809751736dbed47d8522b4d0fb9cbb47eb4c2c491fa72acb42aa272f891984706491c6c395bec43948881d9c3f3d2401ac4a6018ab701cf58462b3a25cc3265dd9889f6780abab9dbcaa2dfcbd6fe42d566cf578ae99a5f3ff64adde9ecfd6350bf6d396c118482e3ef4ba60707488109232e542a1f2a2c6726fafccdd9faef6a301866886ffa494ff19f9e0381663ac3842c8a91c5981237e9fa847cbdb18ac73ec09cd8164105b6d28c50fd19963230b04efdaee80542e93cc3db078ad0eaaa6d050e59b77fa5e9d5f8c50998820727d838506f125cb38fd49762e870f7afbd92c116d32ffdebcf02305857f7be8f419d5418e6e398f6d328a74149e02adddd015b0d45d75f332f4e7d62a534f09bbba29081946787c5b5ff4cf0d3153cf47182bbb1991592d7549653548302cf781f9163c4c869910dbc505db0c9c7b813a2798a85b898fa3384654e452546dafd40fe12466b9703fc77714eb5dc278820eef984f71b81ff27b0ee726dc298b1aed81fa29cb5e3bbc0aa82e5f82a69bfa024c94e78e9bb99064acca658de0d6d878f729ea352b166b986101213dd4e1baa0cb10a7855f7eef0d491f5f84d0f0a64a7b05c99b1cfcfc5ee301bcdff0ad511f72062f531d940a74794506759fff6dae6867cfe5db10a06c855dfaeddda32c14559db43843d16613dd4174e1243fe1b50c16a7d8aea0832493a451136702dc1e9b538d762b527a4be3358704791c21da1c6c5453f9b9c4fada993585bae52c7387ccf44980c2003a51d3d30c14b7afe205ac838adce91d14a98520d2cd565953e991d2446640f078e57ecfdca6225f76ca24d9d53b42ae7a5f8a6b318302b52f6b615591248deec4ea2ce4e7f97ec06e5b1ce26e18e3ea35253516b0f5adfc7e7e47bebe8a22750593c5cb9fbfca9da64cacac92ffb8ae15c6606dc2500633b20196906be0d6b427438ffedfadb80e100cc189561e0571ee71f7fdfe53a625b1404e9b8bb4642a3a529d622c5378bde4515748d046bf5a7de32911e3154ef611b0eed055e57fa49f857f3d3304415065571d46d191c4f4e5b3868940bc3cec55a216e3293dbefcf14c58b322adca26e7238b2e7bf780800e1820e600b287c7c8ab6c51f0cbf317615a66e9cf0dda57aaf70dd2e66f4cfafd83c8015b1b8fb2890f161ab58abaa50d38af0a9f4eb54b73282b20407df6ae220259936ddf53002f8c7a", 0x3e0}, {0x0}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="0c000000014b000001000000140000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x20, 0xc010}, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r4)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20020804)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
dup(r0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e33110495bfd1b6ebf27cbf5d5b8dc4c47aaaaaaaaaa4c73dfb900f50000283aff00000000000000000000000000010000fe8000000000000000001c00000000aa890090780000000020010000000000000000000000000000fab2085aeceb6c5483b0d8a255fc0100"], 0x0)

22m15.058785718s ago: executing program 5 (id=4029):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000340))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_ethernet(0xc06, &(0x7f0000000600)={@broadcast, @multicast, @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7}, {0xfff, 0x0, 0x1}, {0xbe7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xed, 0x0, 0x1}], @ipv4=@igmp={{0x6, 0x4, 0x1, 0x1, 0xbdc, 0x65, 0x0, 0xfd, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end]}}, {0x1e, 0x4, 0x0, @loopback, "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"}}}}}}, &(0x7f0000000400)={0x0, 0x1, [0xee7, 0xbda, 0xf87, 0x184]})
execve(&(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000005c0))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004)

22m13.349026881s ago: executing program 5 (id=4031):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000240)="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", 0x3e0}, {0x0}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="0c000000014b000001000000140000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x20, 0xc010}, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
write$cgroup_type(r4, &(0x7f0000000080), 0x11ffffce1)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20020804)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e33110495bfd1b6ebf27cbf5d5b8dc4c47aaaaaaaaaa4c73dfb900f50000283aff00000000000000000000000000010000fe8000000000000000001c00000000aa890090780000000020010000000000000000000000000000fab2085aeceb6c5483b0d8a255fc0100"], 0x0)

22m8.336832252s ago: executing program 5 (id=4036):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x6000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44)
sendmmsg$sock(r3, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)

22m7.015453739s ago: executing program 5 (id=4041):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
io_setup(0x7, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='\xd0to\xfduota')
chdir(&(0x7f00000000c0)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
mkdirat(r3, &(0x7f0000000200)='./file1\x00', 0x89)

22m6.864715977s ago: executing program 5 (id=4042):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r1 = socket(0x10, 0x80002, 0x0)
r2 = memfd_create(&(0x7f0000000640)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@&q\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$SNAPSHOT_S2RAM(r2, 0x330b)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000440))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2cc00, 0x1a8)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0x0, 0x7fc00100}]})
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="e7e1c2246700a6f17e902e291f7b78000000", 0x12)
syz_open_dev$sndctrl(&(0x7f0000000200), 0xffff, 0x82400)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0xf, 0x8a, 0x101, 0x0, 0x2000000, 0x4, 0x0, 0xb063}})
accept4(r0, 0x0, 0x0, 0x800)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
fchmodat(0xffffffffffffffff, 0x0, 0x20)
openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)

21m51.614533327s ago: executing program 34 (id=4042):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r1 = socket(0x10, 0x80002, 0x0)
r2 = memfd_create(&(0x7f0000000640)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@&q\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$SNAPSHOT_S2RAM(r2, 0x330b)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x1000, 0x80, &(0x7f0000000440))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2cc00, 0x1a8)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x2d, 0x0, 0x0, 0x7fc00100}]})
ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="e7e1c2246700a6f17e902e291f7b78000000", 0x12)
syz_open_dev$sndctrl(&(0x7f0000000200), 0xffff, 0x82400)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0xf, 0x8a, 0x101, 0x0, 0x2000000, 0x4, 0x0, 0xb063}})
accept4(r0, 0x0, 0x0, 0x800)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
fchmodat(0xffffffffffffffff, 0x0, 0x20)
openat$cdrom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)

11m27.484928988s ago: executing program 0 (id=6017):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000680)=[{0x9, 0x0, [0x4, 0x3, 0x400, 0xe4, 0x7, 0xffffff0d, 0x1, 0x3, 0x9, 0x3, 0x28d, 0x10000, 0x5e492d7e, 0x1, 0x5, 0x6]}, {0xb, 0x0, [0x401, 0x1, 0x0, 0xfffffffd, 0x3, 0x4, 0x0, 0x10, 0x4, 0x2, 0x2, 0x1, 0x3, 0x5145, 0x0, 0xdc5]}, {0x8, 0x0, [0x1d, 0x20, 0x2, 0xb8, 0x81, 0x4, 0xf4, 0x7, 0x7, 0x5, 0x1, 0x3, 0x4, 0xfffff001, 0xf7c, 0x4]}, {0x20, 0x0, [0x7ff, 0x7, 0x2, 0xfffffff9, 0xe, 0xa, 0x4, 0x9, 0x3344b65b, 0x94db, 0x8, 0x875, 0x2, 0x2, 0x3, 0x2]}, {0x20, 0x0, [0x1, 0x9, 0x3, 0x5, 0x7, 0x1, 0x7f, 0xfae, 0x2, 0x8, 0x80000001, 0x5, 0x0, 0xfff, 0x9, 0x9]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

11m24.433785464s ago: executing program 0 (id=6029):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f00000002c0)=0x20f)
r1 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pread64(r1, &(0x7f00000001c0)=""/142, 0x8e, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x10080)
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "aee3937c2aab6c8e4753e55c8b38d994"})
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12)

11m20.810077758s ago: executing program 0 (id=6043):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x25dfdbfe, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) (fail_nth: 6)

11m20.170478329s ago: executing program 0 (id=6045):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}})
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount_setattr(r4, &(0x7f00000000c0)='./file0/../file0\x00', 0x8000, &(0x7f0000000180)={0x1, 0xa, 0x80000, {r4}}, 0x20)
syz_open_dev$MSR(&(0x7f00000002c0), 0x2, 0x0)
setuid(0xee01)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94)

11m20.071219502s ago: executing program 0 (id=6047):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x85)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x41)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$unix(r0, &(0x7f0000000480)="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", 0x1000, 0x20000000, &(0x7f0000001480)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18)
r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x105f03, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000440)=ANY=[])

11m19.812506371s ago: executing program 0 (id=6049):
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@key_params]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

11m19.331921076s ago: executing program 35 (id=6049):
syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@key_params]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m53.395844678s ago: executing program 2 (id=8453):
r0 = socket(0x28, 0x5, 0x0)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b48, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r4 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="635f4065726640ec31f19faa1fd9c0062f0d75b7f1d51040e6f73c9563e554cd30405b"], 0xff2e)
read(r5, &(0x7f0000000140)=""/5, 0x81)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000080))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000070601030080000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}}}}, 0x0)

1m51.895448625s ago: executing program 2 (id=8455):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'vxcan1\x00'})
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xc0105b08, &(0x7f0000000040))
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x5}, {}, @time=@time={0x7, 0x80000000}}, {0x0, 0x0, 0x2, 0x0, @tick, {}, {}, @control={0x4, 0x7ff, 0x200}}, {0x10, 0xfd, 0x94, 0x2, @tick=0x3, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @tick=0x58, {}, {0x0, 0x6}, @time}], 0x70)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000004c0)={'ip6gre0\x00', @random="da8c4c622d23"})
openat$ipvs(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0xe0, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xf2f}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x3, 0x5}, {0x6, 0x24, 0x1a, 0x1000, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x2, 0xf}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x5, 0xda, 0x5}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x6, 0x0, 0xff, 0x82}, 0xb8, &(0x7f0000000140)={0x5, 0xf, 0xb8, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9, 0x0, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x32, "acff9e9a3744539e716ebcf6d4e60800"}, @generic={0x88, 0x10, 0x2, "9216f749464c72a5e91e64c80cdf1247b570034b95b50c75ebdff62f8afda5a46592c365152749c9190f3368e01458909d6e6ac4a25ad4aa8a2c36ab5295ab687db3cde402ac01eac6a62d775d5ff9c1f06f99dc5e89b263d516c04dad65c61dafeebb71262ffeddd113cac69144003b33884d5561bb788c69da63faa2f89e4008c67462c2"}, @ptm_cap={0x3}]}, 0x5, [{0xfc, &(0x7f0000000200)=@string={0xfc, 0x3, "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"}}, {0x93, &(0x7f0000000300)=@string={0x93, 0x3, "b6dffa0dceda4be85be772e466a1f5f3652bdf79ee804fb7c8795a2d84eac62e9720e2a898c580d67aa8f3c624fd4f31276735637a570beeb35e46c7cea55897e8b7f393b12dcb8fba17efe4ecae58bf47d225983840df1daeae5b313c51754a411a3c7e92fa14d4c5f7cf7401835b29086f3dd1f7220524cefb383e0e168f2787a5330f9ec5ea29c29d4cf4aeef5c81fe"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x2c12}}]})

1m49.728831799s ago: executing program 2 (id=8460):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1)
init_module(&(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x278, 0x10, 0x4, 0x38, 0x0, 0xe9, 0x8, 0xc}, [], "8202bd47810302ba369efbfbd14c2b009cbe6507059a772551"}, 0x59, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)='\x00\x00', 0x2}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300000000000000f5000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000c026bd9f51bb42f4aebef068c91131faa475622409955bf5b991e838d90c8020b4e1befdf4ff02e0984869ca613a50a306cb490e15a2dd48b4ac561044683a752821619e3c30ec6138974901acde666e9989a2a3f5ddaa624168f8f5be2d061aaf1149f7a9b5b5234dd6a91f63f71dcf776463e02f935ce323"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="14000000100001000000000000e2a0f5b6d9616bcc000000090a010400000000000000000a0000040900010073697a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e00010063096e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000500)={0x0, ""/256, <r5=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{r5, 0x78000000000, 0x1, 0x1f01d81b, 0x40, 0x2, 0x1b5, 0x7, 0x7, 0x80c, 0x11, 0x8003, 0x36, 0x81}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r5, 0x2e3f})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'})
r6 = openat$vimc2(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000180)={0x7, 0x0, 0x3016, 0x1, 0x1ff, 0x8, 0x5})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wg2\x00', <r8=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3a, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="18000000000000003197b9e24f72d90300ebea02ffffffffff12000000000000ba077e802ae898f82929c5d871eb8400000000ca456d9664a3fbe7"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x4, 0x0, 0x2}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x68}}, 0x4c840)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85)

1m49.329304226s ago: executing program 2 (id=8462):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x800})
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080))
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0))
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ecb403236035", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)

1m49.209682706s ago: executing program 2 (id=8464):
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000500)=ANY=[@ANYBLOB="80000000ffffffffffffffffffb5f202f4"], 0x3d9)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0xffffffa6, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

1m48.383863438s ago: executing program 2 (id=8467):
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, 0x0, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x50, 0x10021)
munmap$IORING_OFF_CQ_RING(0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000004a40), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1})

1m31.556793957s ago: executing program 36 (id=8467):
syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, 0x0, 0x0, 0x0)
syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x50, 0x10021)
munmap$IORING_OFF_CQ_RING(0x0, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000004a40), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0])
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1})

14.242075007s ago: executing program 7 (id=8624):
epoll_pwait(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x10000, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x9, 0x1e0, 0x81})
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000009000000070000007f0000000200000020be1b3ea01178a52ce0272d40ab662dd085acd7ec99f0806865c08de79d5482ff7fcaeefe8122b094d069b5d3b882a6"], &(0x7f00000002c0), 0x400)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SET_SECUREBITS(0x1c, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

12.030863767s ago: executing program 1 (id=8627):
epoll_pwait(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x10000, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
socket$nl_generic(0x10, 0x3, 0x10)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$packet(0x11, 0x2, 0x300)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x1})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x201, 0xdd35, 0x9, 0x1e0, 0x81})
ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x0)
ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="100000000200000009000000070000007f0000000200000020be1b3ea01178a52ce0272d40ab662dd085acd7ec99f0806865c08de79d5482ff7fcaeefe8122b094d069b5d3b882a6"], &(0x7f00000002c0), 0x400)
prctl$PR_SET_SECUREBITS(0x1c, 0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SET_SECUREBITS(0x1c, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

11.251484666s ago: executing program 8 (id=8628):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x13)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000003d, 0x0, 0x2000000, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r4, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)
r5 = dup3(r2, r3, 0x0)
write$P9_RGETLOCK(r5, &(0x7f00000002c0)={0x21, 0x37, 0x1, {0x2, 0x8001, 0x8000000000000, 0x0, 0x3, '}):'}}, 0x21)
socket$nl_netfilter(0x10, 0x3, 0xc)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x100000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES32=r3, @ANYRES16=r5], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0x4c020)
lseek(r4, 0x0, 0x4)

10.840667705s ago: executing program 7 (id=8629):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x543041)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0x1, 0x2}, 0x2}, 0x18)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x3, 0xff}, 0xff}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$key(0xf, 0x3, 0x2)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="696e6f646533322c61707072616973655f747970653d696d617369672c6673757569643d65333232626362642d658330342d336635622d326238382d61006100386236622c00"])
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=ANY=[@ANYBLOB="48000000110001002bbd7000fedbdf257f000001140000000000000000000000000004d402003200060000005b0735000900000014000e00ac1e0101000000000000000000"], 0x48}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x149842, 0x0)
write$dsp(r6, &(0x7f0000000100)="e6ba", 0x2)

10.76923927s ago: executing program 6 (id=8630):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/73, 0x49}], 0x2)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

7.446925919s ago: executing program 8 (id=8631):
r0 = socket(0x28, 0x5, 0x0)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x400, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x719b, 0x0, 0x0, 0x0, 0x8000000000000001}}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in6=@private2, 0x0, 0x3, 0x0, 0xfd, 0x204}]}]}, 0x13c}}, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b48, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r4 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="635f4065726640ec31f19faa1fd9c0062f0d75b7f1d51040e6f73c9563e554cd30405b"], 0xff2e)
read(r5, &(0x7f0000000140)=""/5, 0x81)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000080))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000070601030080000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}}}}, 0x0)

7.398949677s ago: executing program 6 (id=8632):
pipe2$9p(0x0, 0x84880)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x100000}]}}, 0x0, 0x26}, 0x28)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r4 = syz_open_pts(r3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = dup3(r4, r3, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17)
openat$zero(0xffffffffffffff9c, 0x0, 0x8202, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000080)=0x1)

6.67236916s ago: executing program 1 (id=8633):
r0 = openat$vicodec0(0xffffff9c, &(0x7f0000002fc0), 0x2, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000003000)=0x1ff)
r1 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2)
close(r1)

6.593498582s ago: executing program 8 (id=8634):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x400000008, 0x0, 0x9}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000)
r3 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10)

6.306303032s ago: executing program 7 (id=8635):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000840))
r1 = openat$nmem0(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_ADAP_G_CONNECTOR_INFO(r1, 0x8044610a, &(0x7f00000003c0))
syz_usb_control_io(r0, 0x0, 0x0)
pread64(r1, &(0x7f0000000a00)=""/121, 0x79, 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io(r0, &(0x7f0000000500)={0x18, &(0x7f00000002c0)={0x20, 0x22, 0x7d, {0x7d, 0x3, "54a8cb2569c5872ac0a133c8717cb0c5d4ae05edf41fcdb92f433a99e06a22fa9e241f3264340fa8792f8f8aa888c7cddfad290c1ea624eb5aa25cdbb95b93a63d57f37fe6a361964e6af8462b99df8c45789b9dfa58a8255e0bc5394fbddac7cc1f4b2badb9231d4081f707b89e74d8a1097acc76894cbf5a7c54"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000440)={0x0, 0xf, 0x35, {0x5, 0xf, 0x35, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0x8, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x3, 0xd, 0x3, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "04b31447aadaa5f2a234a4c546b196d6"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xf, 0x3}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x7, 0x2, "1c6bd1c1", "c66faccd"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xff, 0x2, 0xca, 0x592, 0x5}}}, &(0x7f0000000980)={0x44, &(0x7f0000000540)={0x40, 0x17, 0x2a, "e8e6da4695670f5d19f3e54388952b27791fb3f73e9b839d42e0e1defde01c98460be9c3ea3605b77d2c"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x120, 0x8, [0xf]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0xb, 0x2, "d054"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "b528"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

6.305279095s ago: executing program 1 (id=8636):
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000000410000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="000000000000a3ab4a7900001c0012800b0001006d616373256300000c00028005000f0002000000756f686f7cb6ba4b71e5c30436153006525abde7da96f1035e1f8df239585b75f68447b7c826fa5c064cdeadbe7ca396a11a213044d380caa302b992fad0d1ea8aca7745cf07b28bbcb69a44a1c524e422e4e855f937355845bfdde067412f56fcb2fb57d635cc4b150300abb1133bc756a821bdbaf579459be1669b3a9bd0416a0bb633f072fdd68a7dce1a036c9f7c82cccdfa8af06d780512533d692e8be4fc14142fb5727ad3f3e4d095a4a1b784c3b84a2096df5f36f2e9d0d5d14de0f5d0b03a766c98378e9ab5f0e30e947027a4c3fa2c"], 0x3c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp(0xffffffffffffff9c, 0x0, 0x600200, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x50004844)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
r6 = openat$ttynull(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x3)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$snapshot(r7, 0x0, 0xd)
ioctl$SNAPSHOT_FREE(r7, 0x3305)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa961bffff2, 0x50, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000)
mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil)
recvfrom(r0, 0x0, 0x4f, 0x40002021, 0x0, 0x0)

5.274789567s ago: executing program 8 (id=8637):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRESDEC=r0, @ANYRES32, @ANYRES16=r0, @ANYRES16=r0], 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffc7bbff0000000afe1b6912a7c71519260000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x2, r1)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x5b)
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_LOCK(r4, 0xb)
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xe)
shmctl$SHM_UNLOCK(r4, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$qrtr(r1, &(0x7f0000000040), 0xc)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)

4.999171871s ago: executing program 6 (id=8638):
r0 = syz_io_uring_complete(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}, @release, @dead_binder_done], 0xe6, 0x0, &(0x7f0000000040)="6d4097d34d9a9f56b760871a543380b3e49109d96ed204c93e84acd60bdee11d51ea636b2b899107db44eaadec403d0f4b38d0ba0d22fa176d4c6902559c886f9f318a508ca7919f02ac42e2492217aa7f090ffeb91dd299b32adbc6bd1ca7165cfcd459450b80f40377cfaa73cbfbd81aed01a5018a116ae181d6074919375f61ed34c975f343f73841aa347ec0755240c28b6c8e78376826b2dc96b3e536909de38f4378f6c3465b2ae34d8841842175a5b516c5b164f020ab6aa5c55fdafdc7d05de30f856816c7858d8a174d9a910e2a6072636e01ff4a06b201b3cd3099b61740527cc0"})
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@initdev, <r1=>0x0}, &(0x7f00000001c0)=0x14)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x7, 0x7, 0x2000, 0x1, 0x4, '\x00', r1, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0x4}, 0x50)
getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r3, 0x29, 0x2d, 0x5, 0xfffffff8, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, @mcast1, 0x7800, 0x7800, 0x3f1d1b1f, 0x5}})
r4 = socket(0x15, 0x80000, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=<r5=>0x0)
syz_clone3(&(0x7f0000000600)={0x200022000, &(0x7f0000000400), &(0x7f0000000440)=<r6=>0x0, &(0x7f0000000480), {0x36}, &(0x7f00000004c0)=""/69, 0x45, &(0x7f0000000540)=""/71, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58)
setpgid(r5, r6)
read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_ext={0x1c, 0x10, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002740)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000002780)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000027c0)={0x2, 0x6, 0x706, 0xb}, 0x10, 0x162aa, r0, 0x0, &(0x7f0000002800)=[0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0], 0x0, 0x10, 0x180000}, 0x94)
fcntl$setpipe(r7, 0x407, 0x6)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x24, r8, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000840}, 0x80)
r9 = openat$binderfs(0xffffff9c, &(0x7f0000002a40)='./binderfs2/custom1\x00', 0x804, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r9, 0x40046210, &(0x7f0000002a80))
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002ac0)="1a94a0082713908a1dffb43d5d64ce007c33638325f949945021734b5deb6bc9b6030fe192c7739ef59587ab427585aa22f82da52e47085507", 0x39)
read$char_usb(r0, &(0x7f0000002b00)=""/5, 0x5)
openat$sequencer(0xffffff9c, &(0x7f0000002b40), 0x400, 0x0)
r10 = add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$user(&(0x7f0000002b80), &(0x7f0000002bc0)={'syz', 0x3}, &(0x7f0000002c00)="a1771e12ae44c75baddce51dabb68f61ce08384a8c916685c71b5c2a59ecb9ea94fcce015e262b44a2e0bc2583912443a0f06491d873091700ce1c320f32d9220f5a63c3eb6aa7957af67a780334038f490626d445ea870bf004cfa0ae6efefdf57785946366faad503e6f0f723486779a2179ef65d55227882af0aaa708c6e0635a8c7fe681a7434bfd5f8b2d844c7565abfdad4d64117cb6154a878cd236ee71419eb5c70740056a", 0xa9, r10)
syz_pidfd_open(r6, 0x0)
ioctl$DVB_DVR_DMX_DQBUF(r0, 0xc0186f40, &(0x7f0000002d40)={0x8, 0x4, 0x0, 0x0, 0x10, 0x5})
r11 = openat$iommufd(0xffffff9c, &(0x7f0000002d80), 0x2a4200, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x3ba0, &(0x7f0000002dc0)={0x48, 0x7, r0, 0x0, 0x0, 0x0, 0x6, 0x25213f, 0x29875})
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000002e40)={<r12=>0x0, 0x7ff, 0x7e9}, &(0x7f0000002e80)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002f00)={r12, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000002f40)=0xc)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7)

4.926691021s ago: executing program 1 (id=8639):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x5, 0x7, 0x6}}}}]}, 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002fc0)={0x64, 0x18, 0x1, 0x70bd25, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x30, 0x0, 0x1, [@nested={0x48, 0x7d, 0x0, 0x1, [@typed={0xc, 0x110, 0x0, 0x0, @u64=0x800100000000}, @nested={0x10, 0x10f, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xe3}]}, @nested={0x24, 0xc1, 0x0, 0x1, [@typed={0x5, 0xe4, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xd6, 0x0, 0x0, @fd}, @nested={0x4, 0x25}]}, @typed={0x4, 0xa4}]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r6 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000080))
fsmount(r6, 0x0, 0xf)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x5, r3, 0x1})
r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}})
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

4.72193899s ago: executing program 6 (id=8640):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffd87f000000000000000400000000020000000000000802000000000061"], 0x0, 0x44}, 0x28)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680))
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket(0x1e, 0x1, 0x0)
connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a)
splice(r6, 0x0, r5, 0x0, 0x4ff9c, 0x0)
setns(r1, 0x24020000)
syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0)
setreuid(0x0, 0x0)
setrlimit(0x3, &(0x7f0000000000)={0x4, 0xc0})

3.279189817s ago: executing program 1 (id=8641):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
socket$inet6(0xa, 0x1, 0xffd)
ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x122)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000800000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
sendfile(r5, r5, 0x0, 0x8f)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000340)={0x6, @sliced={0x2, [0x3, 0x1, 0xa, 0xffff, 0x9, 0x0, 0x0, 0x3, 0x4, 0x8001, 0x8, 0x4a9e, 0x9, 0x9, 0x0, 0x100, 0x1, 0x7d, 0x401, 0x5, 0xfff, 0xe, 0x8, 0x3, 0x6, 0xc, 0x7f, 0x0, 0x7f, 0xfffc, 0x5, 0x1, 0x4, 0x5, 0x4, 0x2, 0x96, 0x7, 0x2, 0xa, 0xff5f, 0xfffa, 0x80, 0x688e, 0x79, 0x400, 0xe, 0xc], 0x6}})
close(r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"})
socket$nl_netfilter(0x10, 0x3, 0xc)

3.035228866s ago: executing program 6 (id=8642):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='<group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x8, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3}}, 0x50)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8})
clock_adjtime(0x0, &(0x7f0000000440)={0x6, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x0, 0x8000000040000000, 0xc, 0x4, 0x3, 0xb, 0x8, 0x5, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x3, 0x6})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000040000d3fa3bd8002a00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r5, 0x0)
shutdown(r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a80140007"], 0x94}}, 0x20008841)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r6, 0x0, 0x8201, 0x4)
openat$dir(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0, 0xa9)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00'})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001800010026bd7092fedbdf251d0106002c647f6bb63deee35c2153bac302a924bca60275e7024d15fd4df9ec29d5db2e86dd06b146796c6a301fd418b9b83a296dd6746741a0e120e926c5f7"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.949668299s ago: executing program 7 (id=8643):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
close(r1)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {r1}}, './file0\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'pim6reg\x00', @multicast})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x9, 0x812, r1, 0x852a9000)

1.88353932s ago: executing program 7 (id=8644):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x543041)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0x1, 0x2}, 0x2}, 0x18)
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x3, 0xff}, 0xff}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
socket$key(0xf, 0x3, 0x2)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="696e6f646533322c61707072616973655f747970653d696d617369672c6673757569643d65333232626362642d658330342d336635622d326238382d61006100386236622c00"])
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=ANY=[@ANYBLOB="48000000110001002bbd7000fedbdf257f000001140000000000000000000000000004d402003200060000005b0735000900000014000e00ac1e0101000000000000000000"], 0x48}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x149842, 0x0)
write$dsp(r6, &(0x7f0000000100)="e6ba", 0x2)

1.200228115s ago: executing program 1 (id=8645):
r0 = socket(0x2, 0x5, 0x0)
openat$proc_mixer(0xffffff9c, &(0x7f0000000240)='/proc/asound/card1/oss_mixer\x00', 0x82040, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r4 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000007899c8ceec3de4a5c7f7d80a022ba5c54616dff0dc16487d94219c1300f5c145930494fbff4c11cfbc36286c7ef8bc9bba547272016c647080e15e3644c735a94e69266437985f8ecca18818def8d09d9d735347e7424762b1f17320327da0410868465002c273d129decce8ffc8c8171e47c4ff483c", @ANYRES16=r3, @ANYBLOB="000129bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r6, 0x4b48, &(0x7f0000000080))
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x4003}, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2)
pread64(r8, &(0x7f0000000700)=""/115, 0x73, 0x5)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
close(r8)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_GETVERSION(r9, 0x80047601, &(0x7f0000000040))
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc)
syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYRES8], 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00004000000000000000c21c95902325c5450000442eb9740fc40a71", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r4, 0x8, 0x0, @val=@tcx}, 0x1c)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r10, r5, 0x4, r5}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
prlimit64(0x0, 0xe, 0x0, 0x0)

558.00739ms ago: executing program 6 (id=8646):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x4, 0x2, 0x8000006f, 0x8, 0x5, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x2000008, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x7, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x0, 0x4, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
readv(r3, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000300)=""/73, 0x49}], 0x2)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

358.646756ms ago: executing program 8 (id=8647):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x1f, 0x4e23, @local}, 0x10)

184.134177ms ago: executing program 8 (id=8648):
r0 = socket(0x28, 0x5, 0x0)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x400, 0x25dfdbfe, {{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x719b, 0x0, 0x0, 0x0, 0x8000000000000001}}, [@tmpl={0x84, 0x5, [{{@in=@multicast1, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in6=@private2, 0x0, 0x3, 0x0, 0xfd, 0x204}]}]}, 0x13c}}, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000))
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b48, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r4 = syz_open_dev$dri(&(0x7f0000001480), 0xb, 0x200)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="635f4065726640ec31f19faa1fd9c0062f0d75b7f1d51040e6f73c9563e554cd30405b"], 0xff2e)
read(r5, &(0x7f0000000140)=""/5, 0x81)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000080))
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000070601030080000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x20000000)
syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}}}}, 0x0)

0s ago: executing program 7 (id=8649):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0xff97, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{0x0}], 0x1)

kernel console output (not intermixed with test programs):

 2094.722419][ T3215]  ? __pfx_smc_setsockopt+0x10/0x10
[ 2094.722442][ T3215]  ? aa_sock_opt_perm+0xfe/0x1b0
[ 2094.722472][ T3215]  ? __pfx_smc_setsockopt+0x10/0x10
[ 2094.722494][ T3215]  do_sock_setsockopt+0xf3/0x1d0
[ 2094.722521][ T3215]  __sys_setsockopt+0x119/0x190
[ 2094.722545][ T3215]  __ia32_sys_setsockopt+0xbc/0x160
[ 2094.722563][ T3215]  ? __do_fast_syscall_32+0x98/0x970
[ 2094.722592][ T3215]  ? lockdep_hardirqs_on+0x78/0x100
[ 2094.722618][ T3215]  __do_fast_syscall_32+0xe7/0x970
[ 2094.722649][ T3215]  do_fast_syscall_32+0x32/0x70
[ 2094.722677][ T3215]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2094.722700][ T3215] RIP: 0023:0xf7fd5f7c
[ 2094.722714][ T3215] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 2094.722732][ T3215] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000016e
[ 2094.722752][ T3215] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[ 2094.722763][ T3215] RDX: 0000000000000080 RSI: 0000000080000100 RDI: 0000000000000108
[ 2094.722775][ T3215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2094.722785][ T3215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 2094.722796][ T3215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2094.722821][ T3215]  </TASK>
[ 2094.722829][ T3215] Mem-Info:
[ 2094.862018][ T3215] active_anon:3975 inactive_anon:1572 isolated_anon:0
[ 2094.862018][ T3215]  active_file:7426 inactive_file:10983 isolated_file:0
[ 2094.862018][ T3215]  unevictable:1768 dirty:441 writeback:0
[ 2094.862018][ T3215]  slab_reclaimable:6697 slab_unreclaimable:68028
[ 2094.862018][ T3215]  mapped:26456 shmem:4663 pagetables:1744
[ 2094.862018][ T3215]  sec_pagetables:397 bounce:0
[ 2094.862018][ T3215]  kernel_misc_reclaimable:0
[ 2094.862018][ T3215]  free:40662 free_pcp:951 free_cma:0
[ 2094.879792][ T3215] Node 0 active_anon:324kB inactive_anon:24kB active_file:60kB inactive_file:7156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7808kB pagetables:1380kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2094.893226][ T3215] Node 1 active_anon:15576kB inactive_anon:6264kB active_file:29644kB inactive_file:36776kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105796kB dirty:1760kB writeback:0kB shmem:15116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8088kB pagetables:5596kB sec_pagetables:432kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2094.907216][ T3215] Node 0 DMA free:2024kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:16kB active_file:0kB inactive_file:1024kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2094.931260][ T3215] lowmem_reserve[]: 0 285 285 285 285
[ 2094.944364][ T3215] Node 0 DMA32 free:29564kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:316kB inactive_anon:8kB active_file:60kB inactive_file:6132kB unevictable:3536kB writepending:4kB zspages:928kB present:1032196kB managed:292772kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2094.977240][ T3215] lowmem_reserve[]: 0 0 0 0 0
[ 2094.982159][ T3215] Node 1 DMA32 free:131060kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15576kB inactive_anon:6264kB active_file:29644kB inactive_file:36776kB unevictable:3536kB writepending:1760kB zspages:6028kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:3716kB local_pcp:772kB free_cma:0kB
[ 2094.995356][ T3215] lowmem_reserve[]: 0 0 0 0 0
[ 2094.997441][ T3215] Node 0 DMA: 74*4kB (UM) 36*8kB (UM) 24*16kB (UM) 17*32kB (U) 6*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2024kB
[ 2095.003847][ T3215] Node 0 DMA32: 1051*4kB (UME) 486*8kB (UME) 172*16kB (UME) 215*32kB (UME) 63*64kB (UME) 29*128kB (UME) 8*256kB (UME) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 29564kB
[ 2095.011352][ T3215] Node 1 DMA32: 3157*4kB (UME) 3693*8kB (UME) 4170*16kB (UME) 55*32kB (UME) 34*64kB (UME) 113*128kB (UM) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130876kB
[ 2095.018451][ T3215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2095.022412][ T3215] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2095.026271][ T3215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2095.030382][ T3215] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2095.034322][ T3215] 24638 total pagecache pages
[ 2095.036438][ T3215] 1568 pages in swap cache
[ 2095.038435][ T3215] Free swap  = 87584kB
[ 2095.040312][ T3215] Total swap = 124996kB
[ 2095.042264][ T3215] 524155 pages RAM
[ 2095.044002][ T3215] 0 pages HighMem/MovableOnly
[ 2095.046048][ T3215] 210069 pages reserved
[ 2095.048032][ T3215] 0 pages cma reserved
[ 2095.973063][ T3226] netlink: 'syz.6.8200': attribute type 10 has an invalid length.
[ 2095.981152][ T3226] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 2096.011666][ T3226] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[ 2096.033934][ T3226] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2096.210027][T28007] usb 6-1: reset high-speed USB device number 5 using dummy_hcd
[ 2096.656403][ T5822] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2096.661865][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2096.679989][ T5822] usb 7-1: config 0 descriptor??
[ 2096.685364][ T5822] usb 7-1: can't set config #0, error -71
[ 2096.698329][ T5822] usb 7-1: USB disconnect, device number 5
[ 2096.886907][ T3243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8207'.
[ 2097.174583][T23420] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[ 2097.203064][ T3255] input: syz1 as /devices/virtual/input/input154
[ 2097.339693][T23420] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2097.344687][T23420] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2097.353119][T23420] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2097.365379][T23420] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.564927][ T5845] usb 12-1: new high-speed USB device number 29 using dummy_hcd
[ 2097.615989][T23420] usb 7-1: usb_control_msg returned -32
[ 2097.619525][T23420] usbtmc 7-1:16.0: can't read capabilities
[ 2097.663153][ T2636] usb 6-1: USB disconnect, device number 5
[ 2097.730267][ T5845] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2097.734525][ T5845] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2097.738066][ T5845] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2097.742446][ T5845] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2097.745750][ T5845] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.749873][ T5845] usb 12-1: config 0 descriptor??
[ 2097.752358][ T3262] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 2097.835683][ T2636] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[ 2097.839983][ T6410] usb 7-1: USB disconnect, device number 6
[ 2098.000225][ T2636] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2098.003630][ T2636] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 2098.006854][ T2636] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2098.013990][ T2636] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2098.018434][ T2636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2098.022492][ T2636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2098.026480][ T2636] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2098.208713][ T5845] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[ 2098.441701][ T3265] fuse: Bad value for 'user_id'
[ 2098.443840][ T3265] fuse: Bad value for 'user_id'
[ 2098.568733][ T3267] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8213'.
[ 2098.573387][ T3267] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8213'.
[ 2098.607137][ T5991] net_ratelimit: 34 callbacks suppressed
[ 2098.607154][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2098.716041][ T3272] FAULT_INJECTION: forcing a failure.
[ 2098.716041][ T3272] name failslab, interval 1, probability 0, space 0, times 0
[ 2098.723332][ T3272] CPU: 1 UID: 0 PID: 3272 Comm: syz.6.8215 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2098.723361][ T3272] Tainted: [L]=SOFTLOCKUP
[ 2098.723368][ T3272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2098.723379][ T3272] Call Trace:
[ 2098.723387][ T3272]  <TASK>
[ 2098.723396][ T3272]  dump_stack_lvl+0x100/0x190
[ 2098.723436][ T3272]  should_fail_ex.cold+0x5/0xa
[ 2098.723461][ T3272]  should_failslab+0xc2/0x120
[ 2098.723486][ T3272]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[ 2098.723517][ T3272]  ? __alloc_skb+0x140/0x710
[ 2098.723542][ T3272]  __alloc_skb+0x140/0x710
[ 2098.723560][ T3272]  ? __alloc_skb+0x5b7/0x710
[ 2098.723579][ T3272]  ? __pfx___alloc_skb+0x10/0x10
[ 2098.723596][ T3272]  ? do_raw_spin_lock+0x128/0x260
[ 2098.723619][ T3272]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2098.723644][ T3272]  tcp_send_active_reset+0x8b/0xa50
[ 2098.723675][ T3272]  mptcp_do_fastclose+0x2ee/0x450
[ 2098.723702][ T3272]  __mptcp_close+0x1ec/0xc70
[ 2098.723728][ T3272]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2098.723752][ T3272]  ? __pfx___mptcp_close+0x10/0x10
[ 2098.723779][ T3272]  ? __local_bh_enable_ip+0x9e/0x120
[ 2098.723808][ T3272]  mptcp_close+0x28/0xe0
[ 2098.723835][ T3272]  inet_release+0xed/0x200
[ 2098.723864][ T3272]  __sock_release+0xb3/0x260
[ 2098.723886][ T3272]  ? __pfx_sock_close+0x10/0x10
[ 2098.723907][ T3272]  sock_close+0x1c/0x30
[ 2098.723924][ T3272]  __fput+0x3ff/0xb50
[ 2098.723959][ T3272]  fput_close_sync+0x118/0x250
[ 2098.723988][ T3272]  ? __pfx_fput_close_sync+0x10/0x10
[ 2098.724022][ T3272]  __ia32_sys_close+0x8b/0x120
[ 2098.724042][ T3272]  __do_fast_syscall_32+0xe7/0x970
[ 2098.724070][ T3272]  ? lockdep_hardirqs_on+0x78/0x100
[ 2098.724100][ T3272]  do_fast_syscall_32+0x32/0x70
[ 2098.724128][ T3272]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2098.724153][ T3272] RIP: 0023:0xf702ef7c
[ 2098.724170][ T3272] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 2098.724188][ T3272] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000006
[ 2098.724207][ T3272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2098.724235][ T3272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2098.724251][ T3272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2098.724263][ T3272] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 2098.724272][ T3272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2098.724295][ T3272]  </TASK>
[ 2098.727850][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2098.942669][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.060375][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.179592][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.298953][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.405130][ T3280] netlink: 'syz.6.8218': attribute type 16 has an invalid length.
[ 2099.407845][ T3280] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8218'.
[ 2099.417954][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.537180][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.656410][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2099.754005][ T5845] usb 12-1: reset high-speed USB device number 29 using dummy_hcd
[ 2099.775672][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2100.513273][ T3293] loop5: detected capacity change from 0 to 7
[ 2100.526145][ T3293] Dev loop5: unable to read RDB block 7
[ 2100.528935][ T3293]  loop5: unable to read partition table
[ 2100.531945][ T3293] loop5: partition table beyond EOD, truncated
[ 2100.534788][ T3293] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 2100.552340][ T3293] binder: 3291:3293 ioctl c0285840 0 returned -22
[ 2100.913695][ T2636] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2100.916837][ T2636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2100.928248][ T2636] usb 6-1: config 0 descriptor??
[ 2100.930296][ T2636] usb 6-1: can't set config #0, error -71
[ 2100.933035][ T2636] usb 6-1: USB disconnect, device number 6
[ 2101.234148][ T3300] netlink: 'syz.2.8224': attribute type 16 has an invalid length.
[ 2101.239550][ T3300] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8224'.
[ 2101.506632][ T3307] fuse: Bad value for 'user_id'
[ 2101.508170][ T3307] fuse: Bad value for 'user_id'
[ 2101.626317][ T3313] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8227'.
[ 2101.633475][ T3313] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8227'.
[ 2102.360278][ T6410] usb 12-1: USB disconnect, device number 29
[ 2102.940274][T28624] usb 11-1: new low-speed USB device number 50 using dummy_hcd
[ 2103.137564][T28624] usb 11-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2103.142413][T28624] usb 11-1: config 0 has an invalid interface number: 0 but max is -1
[ 2103.145087][T28624] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2103.150614][T28624] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2103.158416][T28624] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2103.161588][T28624] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2103.176837][T28624] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2103.996708][ T3332] syzkaller0: entered promiscuous mode
[ 2103.999063][ T3332] syzkaller0: entered allmulticast mode
[ 2104.007803][ T3332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2104.011646][ T3331] tipc: Resetting bearer <eth:syzkaller0>
[ 2104.033957][ T3331] tipc: Disabling bearer <eth:syzkaller0>
[ 2104.057293][   T55] net_ratelimit: 34 callbacks suppressed
[ 2104.057310][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.175844][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.231984][ T3340] netlink: 'syz.7.8238': attribute type 3 has an invalid length.
[ 2104.299228][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.414275][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.576738][T16032] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 2104.699527][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.710483][ T3353] fuse: Bad value for 'user_id'
[ 2104.712581][ T3353] fuse: Bad value for 'user_id'
[ 2104.740765][T16032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2104.744625][T16032] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2104.748046][T16032] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2104.751977][T16032] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2104.755115][T16032] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2104.759638][T16032] usb 7-1: config 0 descriptor??
[ 2104.762670][ T3343] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2104.817275][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2104.837757][ T3355] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8240'.
[ 2104.840542][ T3355] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8240'.
[ 2104.937876][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2105.054604][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2105.172936][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2105.220407][T16032] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2105.247864][ T3358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8241'.
[ 2105.251502][ T3358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8241'.
[ 2105.303344][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2105.346801][ T3358] virtio-fs: tag </dev/md0> not found
[ 2105.697357][ T3361] input: syz0 as /devices/virtual/input/input155
[ 2105.828052][ T3370] FAULT_INJECTION: forcing a failure.
[ 2105.828052][ T3370] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.833368][ T3370] CPU: 1 UID: 0 PID: 3370 Comm: syz.7.8245 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2105.833397][ T3370] Tainted: [L]=SOFTLOCKUP
[ 2105.833401][ T3370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2105.833408][ T3370] Call Trace:
[ 2105.833412][ T3370]  <TASK>
[ 2105.833417][ T3370]  dump_stack_lvl+0x100/0x190
[ 2105.833440][ T3370]  should_fail_ex.cold+0x5/0xa
[ 2105.833454][ T3370]  should_failslab+0xc2/0x120
[ 2105.833468][ T3370]  __kmalloc_cache_noprof+0x7a/0x6f0
[ 2105.833485][ T3370]  ? binder_get_thread+0x201/0x850
[ 2105.833500][ T3370]  binder_get_thread+0x201/0x850
[ 2105.833514][ T3370]  ? __pfx_binder_ioctl+0x10/0x10
[ 2105.833528][ T3370]  binder_ioctl+0x26c/0x7550
[ 2105.833542][ T3370]  ? lockdep_hardirqs_on+0x78/0x100
[ 2105.833560][ T3370]  ? find_held_lock+0x2b/0x80
[ 2105.833575][ T3370]  ? tomoyo_path_number_perm+0x28f/0x580
[ 2105.833589][ T3370]  ? tomoyo_path_number_perm+0x28f/0x580
[ 2105.833621][ T3370]  ? tomoyo_path_number_perm+0x188/0x580
[ 2105.833637][ T3370]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2105.833652][ T3370]  ? __pfx_binder_ioctl+0x10/0x10
[ 2105.833669][ T3370]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2105.833686][ T3370]  ? do_vfs_ioctl+0x226/0x13e0
[ 2105.833698][ T3370]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2105.833713][ T3370]  ? find_held_lock+0x2b/0x80
[ 2105.833727][ T3370]  ? __fget_files+0x215/0x3d0
[ 2105.833739][ T3370]  ? hook_file_ioctl_common+0x149/0x410
[ 2105.833757][ T3370]  ? __fget_files+0x21f/0x3d0
[ 2105.833771][ T3370]  ? __pfx_binder_ioctl+0x10/0x10
[ 2105.833784][ T3370]  compat_ptr_ioctl+0x6e/0xa0
[ 2105.833795][ T3370]  ? __pfx_compat_ptr_ioctl+0x10/0x10
[ 2105.833806][ T3370]  __ia32_compat_sys_ioctl+0x2cf/0x360
[ 2105.833819][ T3370]  __do_fast_syscall_32+0xe7/0x970
[ 2105.833836][ T3370]  ? lockdep_hardirqs_on+0x78/0x100
[ 2105.833852][ T3370]  do_fast_syscall_32+0x32/0x70
[ 2105.833869][ T3370]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2105.833884][ T3370] RIP: 0023:0xf7fd5f7c
[ 2105.833894][ T3370] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 2105.833905][ T3370] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[ 2105.833916][ T3370] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 2105.833923][ T3370] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000
[ 2105.833930][ T3370] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2105.833936][ T3370] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 2105.833943][ T3370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2105.833957][ T3370]  </TASK>
[ 2105.938319][ T3370] binder: 3369:3370 ioctl c0306201 80000480 returned -12
[ 2105.940586][T28624] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2105.944097][T28624] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2105.950862][T28624] usb 11-1: config 0 descriptor??
[ 2105.952930][T28624] usb 11-1: can't set config #0, error -71
[ 2105.968803][T28624] usb 11-1: USB disconnect, device number 50
[ 2106.248192][ T3389] x_tables: duplicate underflow at hook 1
[ 2106.256852][ T3389] hub 8-0:1.0: USB hub found
[ 2106.260525][ T3389] hub 8-0:1.0: 1 port detected
[ 2106.765993][T16032] usb 7-1: reset high-speed USB device number 7 using dummy_hcd
[ 2106.774952][ T3392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8250'.
[ 2106.778279][ T3392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8250'.
[ 2106.857132][ T3393] virtio-fs: tag </dev/md0> not found
[ 2107.048124][ T3395] fuse: Bad value for 'user_id'
[ 2107.050243][ T3395] fuse: Bad value for 'user_id'
[ 2107.115714][ T3396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 2107.182825][ T3397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 2107.187752][ T3397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 2107.407280][ T3402] overlay: Unknown parameter 'audit'
[ 2107.711291][ T3409] loop5: detected capacity change from 0 to 7
[ 2107.716898][ T3409] Dev loop5: unable to read RDB block 7
[ 2107.718833][ T3409]  loop5: unable to read partition table
[ 2107.721605][ T3409] loop5: partition table beyond EOD, truncated
[ 2107.723688][ T3409] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 2107.734294][ T3409] binder: 3407:3409 ioctl c0285840 0 returned -22
[ 2107.763295][T28624] usb 12-1: new low-speed USB device number 30 using dummy_hcd
[ 2108.374410][ T5822] usb 7-1: USB disconnect, device number 7
[ 2108.597174][T28624] usb 12-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2108.607584][T28624] usb 12-1: config 0 has an invalid interface number: 0 but max is -1
[ 2108.610453][T28624] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2108.613195][T28624] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2108.616680][T28624] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2108.620419][T28624] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2108.623730][T28624] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2108.863173][ T3425] input: syz1 as /devices/virtual/input/input156
[ 2109.150379][ T5845] usb 11-1: new high-speed USB device number 51 using dummy_hcd
[ 2109.323694][ T5845] usb 11-1: Using ep0 maxpacket: 32
[ 2109.328448][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2109.332906][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.337030][ T5845] usb 11-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 2109.340429][ T5845] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2109.347009][ T5845] usb 11-1: config 0 descriptor??
[ 2109.575029][T24131] net_ratelimit: 34 callbacks suppressed
[ 2109.575049][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2109.692473][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2109.824207][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2109.839969][ T5845] savu 0003:1E7D:2D5A.003D: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[ 2109.941880][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.016343][ T3434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8262'.
[ 2110.150071][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.202149][ T5845] usb 11-1: USB disconnect, device number 51
[ 2110.268323][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.386236][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.506060][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.635355][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.763061][T28624] usb 12-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2110.765482][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2110.775897][T28624] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2110.786343][T28624] usb 12-1: config 0 descriptor??
[ 2110.791477][T28624] usb 12-1: can't set config #0, error -71
[ 2110.796439][T28624] usb 12-1: USB disconnect, device number 30
[ 2111.209416][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 2111.238209][ T3462] fuse: Bad value for 'user_id'
[ 2111.239843][ T3462] fuse: Bad value for 'user_id'
[ 2111.310946][ T3464] __nla_validate_parse: 1 callbacks suppressed
[ 2111.310959][ T3464] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8267'.
[ 2111.373802][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2111.378380][ T5822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2111.379535][ T3466] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8267'.
[ 2111.382411][ T5822] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2111.387864][ T3466] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8267'.
[ 2111.391805][ T5822] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2111.408881][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2111.414843][ T5822] usb 6-1: config 0 descriptor??
[ 2111.972822][ T5822] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2112.269368][ T3480] netlink: 'syz.2.8271': attribute type 16 has an invalid length.
[ 2112.272120][ T3480] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8271'.
[ 2112.856878][ T5845] usb 11-1: new low-speed USB device number 52 using dummy_hcd
[ 2113.021101][ T5845] usb 11-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2113.025702][ T5845] usb 11-1: config 0 has an invalid interface number: 0 but max is -1
[ 2113.032871][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2113.051060][ T5845] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2113.072958][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2113.076868][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2113.080357][ T5845] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2113.517739][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8279'.
[ 2113.521437][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8279'.
[ 2113.526450][ T3497] virtio-fs: tag </dev/md0> not found
[ 2113.529686][   T34] usb 6-1: reset high-speed USB device number 7 using dummy_hcd
[ 2113.937632][ T3502] fuse: Bad value for 'user_id'
[ 2113.939287][ T3502] fuse: Bad value for 'user_id'
[ 2114.001917][ T3503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8281'.
[ 2114.063997][ T3506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8281'.
[ 2114.066815][ T3506] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8281'.
[ 2114.247208][ T3516] FAULT_INJECTION: forcing a failure.
[ 2114.247208][ T3516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2114.252461][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: syz.7.8284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2114.252488][ T3516] Tainted: [L]=SOFTLOCKUP
[ 2114.252495][ T3516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2114.252505][ T3516] Call Trace:
[ 2114.252512][ T3516]  <TASK>
[ 2114.252520][ T3516]  dump_stack_lvl+0x100/0x190
[ 2114.252555][ T3516]  should_fail_ex.cold+0x5/0xa
[ 2114.252579][ T3516]  _copy_to_user+0x32/0xd0
[ 2114.252607][ T3516]  simple_read_from_buffer+0xcb/0x170
[ 2114.252633][ T3516]  proc_fail_nth_read+0x1af/0x230
[ 2114.252663][ T3516]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2114.252692][ T3516]  ? rw_verify_area+0xce/0x6d0
[ 2114.252710][ T3516]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2114.252739][ T3516]  vfs_read+0x1e4/0xb30
[ 2114.252763][ T3516]  ? __pfx_vfs_read+0x10/0x10
[ 2114.252781][ T3516]  ? find_held_lock+0x2b/0x80
[ 2114.252804][ T3516]  ? __fget_files+0x215/0x3d0
[ 2114.252829][ T3516]  ? __fget_files+0x21f/0x3d0
[ 2114.252857][ T3516]  ksys_read+0x12a/0x250
[ 2114.252877][ T3516]  ? __pfx_ksys_read+0x10/0x10
[ 2114.252897][ T3516]  ? rcu_is_watching+0x12/0xc0
[ 2114.252918][ T3516]  ? rcu_is_watching+0x12/0xc0
[ 2114.252941][ T3516]  do_int80_emulation+0x14b/0x720
[ 2114.252978][ T3516]  asm_int80_emulation+0x1a/0x20
[ 2114.252996][ T3516] RIP: 0023:0xf71d61ab
[ 2114.253011][ T3516] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[ 2114.253027][ T3516] RSP: 002b:00000000f54754bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2114.253045][ T3516] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54755d0
[ 2114.253056][ T3516] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[ 2114.253066][ T3516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2114.253076][ T3516] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 2114.253086][ T3516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2114.253111][ T3516]  </TASK>
[ 2114.886046][ T2636] usb 6-1: USB disconnect, device number 7
[ 2115.112581][T12311] net_ratelimit: 34 callbacks suppressed
[ 2115.112595][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.230625][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.350472][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.431116][ T3523] ADFS-fs (loop7): error: unable to read block 3, try 0
[ 2115.473605][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.598792][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.631249][ T2636] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2115.729004][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.846885][ T2636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2115.859331][ T2636] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2115.859443][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2115.873323][ T2636] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2115.888031][ T2636] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2115.894972][ T5845] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2115.897900][ T5845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.904925][ T2636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2115.910614][ T5845] usb 11-1: config 0 descriptor??
[ 2115.913176][ T5845] usb 11-1: can't set config #0, error -71
[ 2115.916905][ T5845] usb 11-1: USB disconnect, device number 52
[ 2115.932714][ T2636] usb 6-1: config 0 descriptor??
[ 2115.989349][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2116.109130][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2116.227423][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2116.433238][ T2636] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2116.491213][ T3555] input: syz1 as /devices/virtual/input/input157
[ 2117.327493][ T3563] input: syz1 as /devices/virtual/input/input158
[ 2117.444988][ T3565] FAULT_INJECTION: forcing a failure.
[ 2117.444988][ T3565] name failslab, interval 1, probability 0, space 0, times 0
[ 2117.451961][ T3565] CPU: 1 UID: 0 PID: 3565 Comm: syz.2.8299 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2117.451981][ T3565] Tainted: [L]=SOFTLOCKUP
[ 2117.451985][ T3565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2117.451992][ T3565] Call Trace:
[ 2117.451996][ T3565]  <TASK>
[ 2117.452001][ T3565]  dump_stack_lvl+0x100/0x190
[ 2117.452036][ T3565]  should_fail_ex.cold+0x5/0xa
[ 2117.452053][ T3565]  should_failslab+0xc2/0x120
[ 2117.452067][ T3565]  kmem_cache_alloc_noprof+0x7b/0x6e0
[ 2117.452086][ T3565]  ? vm_area_alloc+0x1f/0x160
[ 2117.452103][ T3565]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2117.452122][ T3565]  vm_area_alloc+0x1f/0x160
[ 2117.452138][ T3565]  __mmap_region+0x104d/0x2dd0
[ 2117.452158][ T3565]  ? __pfx___mmap_region+0x10/0x10
[ 2117.452184][ T3565]  ? process_measurement+0x1f4/0x2350
[ 2117.452199][ T3565]  ? tomoyo_check_open_permission+0x1db/0x3c0
[ 2117.452221][ T3565]  ? __lock_acquire+0x4a5/0x2630
[ 2117.452246][ T3565]  ? find_held_lock+0x2b/0x80
[ 2117.452259][ T3565]  ? is_bpf_text_address+0x8a/0x1a0
[ 2117.452275][ T3565]  ? is_bpf_text_address+0x8a/0x1a0
[ 2117.452313][ T3565]  mmap_region+0x35d/0x620
[ 2117.452325][ T3565]  ? __pfx_mmap_region+0x10/0x10
[ 2117.452337][ T3565]  ? mm_get_unmapped_area_vmflags+0xd7/0x130
[ 2117.452352][ T3565]  ? cap_mmap_addr+0x4b/0x120
[ 2117.452363][ T3565]  ? bpf_lsm_mmap_addr+0x9/0x30
[ 2117.452374][ T3565]  ? security_mmap_addr+0x71/0x1e0
[ 2117.452389][ T3565]  ? __get_unmapped_area+0x255/0x3e0
[ 2117.452405][ T3565]  do_mmap+0xc63/0x12f0
[ 2117.452426][ T3565]  ? __pfx_do_mmap+0x10/0x10
[ 2117.452440][ T3565]  ? __pfx_down_write_killable+0x10/0x10
[ 2117.452455][ T3565]  vm_mmap_pgoff+0x29e/0x470
[ 2117.452473][ T3565]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2117.452486][ T3565]  ? __fget_files+0x215/0x3d0
[ 2117.452502][ T3565]  ? __fget_files+0x21f/0x3d0
[ 2117.452518][ T3565]  ksys_mmap_pgoff+0x3cb/0x610
[ 2117.452532][ T3565]  ? fput+0x79/0x100
[ 2117.452548][ T3565]  ? __pfx_ksys_mmap_pgoff+0x10/0x10
[ 2117.452561][ T3565]  ? ksys_write+0x1ac/0x250
[ 2117.452574][ T3565]  ? rcu_is_watching+0x12/0xc0
[ 2117.452590][ T3565]  __do_fast_syscall_32+0xe7/0x970
[ 2117.452607][ T3565]  ? lockdep_hardirqs_on+0x78/0x100
[ 2117.452624][ T3565]  do_fast_syscall_32+0x32/0x70
[ 2117.452641][ T3565]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2117.452656][ T3565] RIP: 0023:0xf7f74f7c
[ 2117.452666][ T3565] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[ 2117.452677][ T3565] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000000c0
[ 2117.452688][ T3565] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000c00000
[ 2117.452696][ T3565] RDX: 0000000001000003 RSI: 0000000000000012 RDI: 0000000000000003
[ 2117.452702][ T3565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2117.452709][ T3565] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[ 2117.452715][ T3565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2117.452730][ T3565]  </TASK>
[ 2118.134839][ T5845] usb 11-1: new low-speed USB device number 53 using dummy_hcd
[ 2118.299444][ T5845] usb 11-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2118.303054][ T5845] usb 11-1: config 0 has an invalid interface number: 0 but max is -1
[ 2118.306485][ T5845] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2118.312473][ T5845] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2118.315997][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2118.319409][ T5845] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2118.322674][ T5845] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2118.677719][T28711] usb 6-1: reset high-speed USB device number 8 using dummy_hcd
[ 2118.981073][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8304'.
[ 2118.984411][ T3579] macvlan0: entered promiscuous mode
[ 2118.988034][ T3579] netlink: 'syz.1.8304': attribute type 1 has an invalid length.
[ 2118.990803][ T3579] netlink: 'syz.1.8304': attribute type 2 has an invalid length.
[ 2119.622968][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8307'.
[ 2119.624046][ T6410] usb 6-1: USB disconnect, device number 8
[ 2119.633823][ T3590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8307'.
[ 2120.543443][ T3592] policy can only be matched on NF_INET_PRE_ROUTING
[ 2120.543455][ T3592] unable to load match
[ 2120.596381][T24131] net_ratelimit: 28 callbacks suppressed
[ 2120.596398][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2120.654436][ T3594] fuse: Bad value for 'user_id'
[ 2120.655971][ T3594] fuse: Bad value for 'user_id'
[ 2120.735860][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2120.749982][ T3595] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8309'.
[ 2120.816354][ T3596] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8309'.
[ 2120.820025][ T3596] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8309'.
[ 2120.855141][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2120.974282][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.104357][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.146475][ T5845] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2121.155790][ T5845] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2121.211599][ T5845] usb 11-1: config 0 descriptor??
[ 2121.214683][ T5845] usb 11-1: can't set config #0, error -71
[ 2121.218009][ T5845] usb 11-1: USB disconnect, device number 53
[ 2121.236245][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.353774][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.505552][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.635798][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2121.765782][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2122.886400][ T3619] bridge_slave_1: entered promiscuous mode
[ 2125.602248][T28624] usb 12-1: new high-speed USB device number 31 using dummy_hcd
[ 2125.656143][   T34] usb 11-1: new low-speed USB device number 54 using dummy_hcd
[ 2125.775585][T28624] usb 12-1: Using ep0 maxpacket: 8
[ 2125.779842][T28624] usb 12-1: config index 0 descriptor too short (expected 301, got 45)
[ 2125.783360][T28624] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2125.787615][T28624] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2125.791751][T28624] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2125.795550][T28624] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2125.801159][T28624] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2125.805430][T28624] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2125.822324][   T34] usb 11-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2125.824932][   T34] usb 11-1: config 0 has an invalid interface number: 0 but max is -1
[ 2125.827375][   T34] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2125.830372][   T34] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2125.833568][   T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2125.836463][   T34] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2125.839428][   T34] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2125.845965][   T34] usb 11-1: string descriptor 0 read error: -22
[ 2125.847928][   T34] usb 11-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2125.850606][   T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2125.854586][   T34] usb 11-1: config 0 descriptor??
[ 2125.857761][   T34] hub 11-1:0.0: bad descriptor, ignoring hub
[ 2125.859747][   T34] hub 11-1:0.0: probe with driver hub failed with error -5
[ 2125.863814][   T34] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input159
[ 2126.057303][  T196] net_ratelimit: 34 callbacks suppressed
[ 2126.057402][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.075773][T22629] usb 11-1: USB disconnect, device number 54
[ 2126.176432][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.295654][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.414968][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.461931][ T3633] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8322'.
[ 2126.465558][ T3633] netlink: 'syz.1.8322': attribute type 9 has an invalid length.
[ 2126.468638][ T3633] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8322'.
[ 2126.472202][ T3633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8322'.
[ 2126.534171][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.636798][ T3636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2126.639651][ T3636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2126.653389][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.785181][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2126.833921][ T3646] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8326'.
[ 2126.841799][ T3647] input: syz1 as /devices/virtual/input/input161
[ 2126.869577][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2126.913415][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2127.042947][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2127.176180][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2129.103065][ T6410] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[ 2129.123679][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8333'.
[ 2129.158122][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8333'.
[ 2129.266484][ T6410] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2129.270777][ T6410] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 2129.275658][ T6410] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2129.282628][ T6410] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2129.289736][ T6410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2129.295595][ T6410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2129.298624][ T6410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2129.304872][ T6410] usb 6-1: string descriptor 0 read error: -22
[ 2129.306942][ T6410] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2129.309896][ T6410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2129.314345][ T6410] usb 6-1: config 0 descriptor??
[ 2129.318098][ T6410] hub 6-1:0.0: bad descriptor, ignoring hub
[ 2129.320371][ T6410] hub 6-1:0.0: probe with driver hub failed with error -5
[ 2129.324336][ T6410] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input162
[ 2129.537127][   T34] usb 6-1: USB disconnect, device number 9
[ 2129.555146][ T3670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8334'.
[ 2129.558106][ T3670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8334'.
[ 2129.622129][ T3670] virtio-fs: tag </dev/md0> not found
[ 2130.334995][ T3675] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8336'.
[ 2130.425407][ T3680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8337'.
[ 2130.494240][ T3680] virtio-fs: tag </dev/md0> not found
[ 2130.937861][ T3685] input: syz1 as /devices/virtual/input/input163
[ 2131.598375][T12311] net_ratelimit: 32 callbacks suppressed
[ 2131.598395][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2131.733588][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2131.867576][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.007211][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.132231][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.267374][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.399745][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.421497][ T3636] usbtmc 12-1:16.0: simple usb_control_msg failed -110
[ 2132.445138][ T2636] usb 12-1: USB disconnect, device number 31
[ 2132.527560][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.646729][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.693307][ T3700] netlink: 'syz.7.8342': attribute type 16 has an invalid length.
[ 2132.695865][ T3700] __nla_validate_parse: 1 callbacks suppressed
[ 2132.695876][ T3700] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8342'.
[ 2132.766156][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2132.811373][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[ 2133.220209][ T3703] fuse: Bad value for 'user_id'
[ 2133.221991][ T3703] fuse: Bad value for 'user_id'
[ 2133.282836][ T3704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8343'.
[ 2133.304331][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8344'.
[ 2133.307142][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8344'.
[ 2133.350522][ T3706] virtio-fs: tag </dev/md0> not found
[ 2133.352545][ T3707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8343'.
[ 2133.356695][ T3707] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8343'.
[ 2133.495917][ T3712] fuse: Bad value for 'user_id'
[ 2133.497380][ T3712] fuse: Bad value for 'user_id'
[ 2133.570912][ T3713] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8346'.
[ 2133.638586][ T3714] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8346'.
[ 2133.641185][ T3714] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8346'.
[ 2134.024491][ T3721] netlink: 'syz.2.8348': attribute type 16 has an invalid length.
[ 2134.034151][ T3721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8348'.
[ 2134.850927][ T3728] input: syz1 as /devices/virtual/input/input164
[ 2136.200839][ T3732] fuse: Bad value for 'user_id'
[ 2136.206353][ T3732] fuse: Bad value for 'user_id'
[ 2136.678265][T22629] usb 11-1: new low-speed USB device number 55 using dummy_hcd
[ 2136.844868][T22629] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[ 2136.852535][T22629] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2136.861015][T22629] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt
[ 2136.866250][T22629] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2136.871707][T22629] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2136.875610][T22629] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2136.887095][T22629] usbtmc 11-1:16.0: bulk endpoints not found
[ 2136.903878][ T3749] virtio-fs: tag </dev/md0> not found
[ 2137.111810][  T117] net_ratelimit: 35 callbacks suppressed
[ 2137.111830][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.241832][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.361036][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.414652][ T3753] ieee802154 phy0 wpan0: encryption failed: -22
[ 2137.491693][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.632164][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.762211][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2137.892056][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2138.011286][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2138.165589][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2138.308699][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2139.041845][ T3771] netlink: 'syz.7.8360': attribute type 16 has an invalid length.
[ 2139.044919][ T3771] __nla_validate_parse: 5 callbacks suppressed
[ 2139.045012][ T3771] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8360'.
[ 2139.686534][ T3777] input: syz1 as /devices/virtual/input/input165
[ 2140.186865][T28624] usb 11-1: USB disconnect, device number 55
[ 2141.211997][ T3788] IPv6: Can't replace route, no match found
[ 2142.915845][ T3809] netlink: 'syz.2.8370': attribute type 16 has an invalid length.
[ 2142.918522][ T3809] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8370'.
[ 2143.990068][T24131] net_ratelimit: 31 callbacks suppressed
[ 2143.990082][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2144.349131][ T3811] fuse: Bad value for 'user_id'
[ 2144.351264][ T3811] fuse: Bad value for 'user_id'
[ 2144.384262][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2144.454778][ T3813] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8371'.
[ 2144.514311][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2144.552132][ T3820] netlink: 'syz.2.8373': attribute type 16 has an invalid length.
[ 2144.555507][ T3820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8373'.
[ 2144.661591][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2144.668352][ T3824] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8371'.
[ 2144.672942][ T3824] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8371'.
[ 2144.785428][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2144.904104][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2145.023558][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2145.144263][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2145.262633][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2145.393870][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2145.729893][ T3835] input: syz1 as /devices/virtual/input/input166
[ 2145.947035][ T3840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8379'.
[ 2146.005784][ T3840] bridge1: entered promiscuous mode
[ 2146.022246][ T3840] bridge1: entered allmulticast mode
[ 2146.716666][ T3847] netlink: 'syz.6.8380': attribute type 16 has an invalid length.
[ 2146.719223][ T3847] netlink: 156 bytes leftover after parsing attributes in process `syz.6.8380'.
[ 2149.435399][  T196] net_ratelimit: 32 callbacks suppressed
[ 2149.436177][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2149.575239][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2149.694535][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2149.813560][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2149.943911][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2150.063063][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2150.182265][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2150.301302][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2150.420485][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2150.551264][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2151.009730][ T3864] fuse: Bad value for 'user_id'
[ 2151.013702][ T3864] fuse: Bad value for 'user_id'
[ 2151.205707][ T3865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8386'.
[ 2151.435455][ T3865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8386'.
[ 2151.445942][ T3865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8386'.
[ 2151.596407][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8388'.
[ 2151.600008][ T3872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8388'.
[ 2151.659002][ T3872] virtio-fs: tag </dev/md0> not found
[ 2152.818157][ T3878] fuse: Bad value for 'user_id'
[ 2152.826120][ T3878] fuse: Bad value for 'user_id'
[ 2153.009683][ T3881] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8390'.
[ 2153.220138][ T3885] 9p: Bad value for 'wfdno'
[ 2153.688254][ T3886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8390'.
[ 2153.691649][ T3886] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8390'.
[ 2154.192015][ T5822] libceph: connect (1)[c::]:6789 error -101
[ 2154.194019][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[ 2154.252336][ T3903] netlink: 'syz.2.8396': attribute type 16 has an invalid length.
[ 2154.254899][ T3903] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8396'.
[ 2154.318595][ T3905] netlink: 164 bytes leftover after parsing attributes in process `syz.6.8397'.
[ 2154.346178][ T3906] 
: renamed from bond_slave_0
[ 2154.474055][ T5822] libceph: connect (1)[c::]:6789 error -101
[ 2154.476340][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[ 2154.657955][T28624] usb 11-1: new high-speed USB device number 56 using dummy_hcd
[ 2154.809578][T28624] usb 11-1: device descriptor read/64, error -71
[ 2154.939795][  T196] net_ratelimit: 32 callbacks suppressed
[ 2154.940013][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.026623][ T5822] libceph: connect (1)[c::]:6789 error -101
[ 2155.029210][ T5822] libceph: mon0 (1)[c::]:6789 connect error
[ 2155.066529][ T3900] ceph: No mds server is up or the cluster is laggy
[ 2155.069786][T28624] usb 11-1: new high-speed USB device number 57 using dummy_hcd
[ 2155.072326][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.181304][ T3909] virtio-fs: tag </dev/md0> not found
[ 2155.189017][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.240456][T28624] usb 11-1: device descriptor read/64, error -71
[ 2155.308203][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.356143][T28624] usb usb11-port1: attempt power cycle
[ 2155.427700][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.568417][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.687589][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.774321][T28624] usb 11-1: new high-speed USB device number 58 using dummy_hcd
[ 2155.797953][T28624] usb 11-1: device descriptor read/8, error -71
[ 2155.807405][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2155.947946][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2156.067332][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2156.218677][T28624] usb 11-1: new high-speed USB device number 59 using dummy_hcd
[ 2156.244696][T28624] usb 11-1: device descriptor read/8, error -71
[ 2156.363465][T28624] usb usb11-port1: unable to enumerate USB device
[ 2156.900000][ T3933] input: syz1 as /devices/virtual/input/input168
[ 2157.005852][ T3935] __nla_validate_parse: 2 callbacks suppressed
[ 2157.005869][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8406'.
[ 2157.019901][ T3935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2157.055436][ T3935] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2157.070800][ T3937] input: syz0 as /devices/virtual/input/input167
[ 2158.688029][ T3961] fuse: Bad value for 'user_id'
[ 2158.690226][ T3961] fuse: Bad value for 'user_id'
[ 2158.754228][ T3962] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8415'.
[ 2158.778116][ T3963] netlink: 'syz.2.8414': attribute type 16 has an invalid length.
[ 2158.780553][ T3963] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8414'.
[ 2158.873343][ T3962] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8415'.
[ 2158.883410][ T3962] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8415'.
[ 2160.120255][T22629] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2160.309552][T22629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2160.321071][T22629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2160.340094][T22629] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2160.347473][T22629] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2160.360121][T22629] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2160.382768][T23866] net_ratelimit: 35 callbacks suppressed
[ 2160.382785][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2160.400081][T22629] usb 6-1: config 0 descriptor??
[ 2160.436283][ T3993] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2160.450395][ T3998] /dev/sr0: Can't open blockdev
[ 2160.510278][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2160.636358][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2160.758164][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2160.896188][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2161.030698][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2161.150667][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2161.277026][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2161.307073][T22629] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 2161.402702][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2161.529820][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2162.894970][T28624] usb 6-1: reset high-speed USB device number 10 using dummy_hcd
[ 2164.415734][ T4028] input: syz1 as /devices/virtual/input/input169
[ 2165.100738][  T196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2165.705364][T23420] usb 6-1: USB disconnect, device number 10
[ 2165.999220][   T55] net_ratelimit: 32 callbacks suppressed
[ 2165.999241][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.249413][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.400951][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.551389][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.671148][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.678092][ T5753] block nbd1: Receive control failed (result -32)
[ 2166.681138][T27476] block nbd1: Receive control failed (result -32)
[ 2166.700048][ T5753] block nbd1: Receive control failed (result -32)
[ 2166.788271][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2166.980721][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2167.157742][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2167.273699][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2167.427813][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2167.525899][ T4055] program syz.2.8441 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2168.995976][ T4065] input: syz1 as /devices/virtual/input/input170
[ 2170.631991][ T4090] netlink: 'syz.2.8453': attribute type 16 has an invalid length.
[ 2170.636183][ T4090] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8453'.
[ 2170.705206][ T4091] 8021q: VLANs not supported on ip_vti0
[ 2171.471520][  T196] net_ratelimit: 28 callbacks suppressed
[ 2171.471542][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2171.586856][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2171.729344][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2171.858119][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2171.976881][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.107599][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.227558][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.376895][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.509368][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.584908][ T6410] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 2172.626056][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2172.747108][ T6410] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2172.750296][ T6410] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2172.754716][ T6410] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2172.758451][ T6410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2173.012114][ T6410] usb 7-1: usb_control_msg returned -32
[ 2173.014722][ T6410] usbtmc 7-1:16.0: can't read capabilities
[ 2173.245019][ T4105] fuse: Bad value for 'user_id'
[ 2173.247764][ T4105] fuse: Bad value for 'user_id'
[ 2173.371980][ T4106] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8458'.
[ 2173.393507][ T4098] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -32
[ 2173.403116][ T4096] dlm: no local IP address has been set
[ 2173.421593][ T4096] dlm: cannot start dlm midcomms -107
[ 2173.434531][ T6410] usb 7-1: USB disconnect, device number 8
[ 2173.472825][ T4107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8458'.
[ 2173.480045][ T4107] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8458'.
[ 2174.148167][ T4112] Invalid ELF header type: 3 != 1
[ 2174.192180][ T4112] netlink: 'syz.2.8460': attribute type 2 has an invalid length.
[ 2174.751208][ T4120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2175.640071][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8466'.
[ 2175.655831][ T4128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8466'.
[ 2176.025178][ T4133] virtio-fs: tag </dev/md0> not found
[ 2176.931121][T12311] net_ratelimit: 31 callbacks suppressed
[ 2176.931143][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.119685][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.244232][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.393440][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.509769][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.635241][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.766219][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2177.904621][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2178.050703][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2178.164903][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2178.846022][ T4146] fuse: Bad value for 'user_id'
[ 2178.848212][ T4146] fuse: Bad value for 'user_id'
[ 2179.002607][ T4149] fuse: Bad value for 'user_id'
[ 2179.004511][ T4149] fuse: Bad value for 'user_id'
[ 2179.051047][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8470'.
[ 2179.203639][ T4151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8471'.
[ 2179.352499][ T4150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8470'.
[ 2179.362833][ T4150] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8470'.
[ 2179.380467][ T4152] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8471'.
[ 2179.395005][ T4152] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8471'.
[ 2180.253557][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8473'.
[ 2180.340885][ T4163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8473'.
[ 2180.456524][ T4167] virtio-fs: tag </dev/md0> not found
[ 2182.430779][ T3850] net_ratelimit: 31 callbacks suppressed
[ 2182.430801][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2182.570033][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2182.686396][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2182.807145][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2182.992295][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2183.228924][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2183.363092][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2183.505229][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2183.773797][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2183.918792][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2185.218289][ T4187] fuse: Bad value for 'user_id'
[ 2185.221185][ T4187] fuse: Bad value for 'user_id'
[ 2185.330929][ T4189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8481'.
[ 2185.345953][ T4190] netlink: 'syz.7.8480': attribute type 16 has an invalid length.
[ 2185.351406][ T4190] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8480'.
[ 2185.519735][ T4189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8481'.
[ 2185.528270][ T4189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8481'.
[ 2187.138346][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8485'.
[ 2187.142380][ T4209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8485'.
[ 2187.220901][ T4210] virtio-fs: tag </dev/md0> not found
[ 2187.336504][ T4212] netlink: 'syz.1.8486': attribute type 9 has an invalid length.
[ 2187.339741][ T4212] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8486'.
[ 2187.489535][ T4215] fuse: Bad value for 'user_id'
[ 2187.492074][ T4215] fuse: Bad value for 'user_id'
[ 2187.876874][ T4221] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8487'.
[ 2187.952637][ T5991] net_ratelimit: 27 callbacks suppressed
[ 2187.952658][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2187.974428][ T4223] netlink: 'syz.1.8488': attribute type 10 has an invalid length.
[ 2187.978632][ T4223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8488'.
[ 2188.112052][ T4223] dummy0: entered promiscuous mode
[ 2188.158384][ T4223] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 2188.186809][ T4221] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8487'.
[ 2188.206737][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2188.426862][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2188.613366][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2188.743164][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2188.863128][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2189.012882][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2189.127339][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2189.329160][ T4239] virtio-fs: tag </dev/md0> not found
[ 2190.282095][ T4246] tun0: tun_chr_ioctl cmd 1074025676
[ 2190.301713][ T4246] tun0: owner set to 0
[ 2190.393551][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2193.415692][ T4047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2193.425848][ T3850] net_ratelimit: 9 callbacks suppressed
[ 2193.425870][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2193.456251][ T4047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2193.528669][ T4047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2193.544669][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2193.553010][ T4047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2193.796887][ T4047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2193.908955][T27476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2193.962265][T27476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2193.977466][T27476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2193.998559][T27476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2194.139548][T27476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2194.312991][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2194.432890][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2194.558353][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2194.655681][ T4276] __nla_validate_parse: 3 callbacks suppressed
[ 2194.655699][ T4276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8502'.
[ 2194.713432][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2194.857259][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2195.017545][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2195.139423][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2195.266868][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2195.469256][ T4285] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8503'.
[ 2195.902408][ T4295] Cannot find add_set index 2 as target
[ 2195.928843][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2195.938827][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2195.945972][ T4268] bridge_slave_0: entered allmulticast mode
[ 2195.961972][ T4268] bridge_slave_0: entered promiscuous mode
[ 2195.985502][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2195.988580][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2195.991976][ T4268] bridge_slave_1: entered allmulticast mode
[ 2195.997015][ T4268] bridge_slave_1: entered promiscuous mode
[ 2196.057291][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2196.077068][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2196.127868][ T4268] team0: Port device team_slave_0 added
[ 2196.137514][ T4268] team0: Port device team_slave_1 added
[ 2196.165182][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2196.168623][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2196.181084][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2196.189285][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2196.193785][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2196.218483][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2196.358584][ T4297] syzkaller0: entered promiscuous mode
[ 2196.360954][ T4297] syzkaller0: entered allmulticast mode
[ 2196.381364][ T4268] hsr_slave_0: entered promiscuous mode
[ 2196.384865][ T4268] hsr_slave_1: entered promiscuous mode
[ 2196.387853][ T4268] debugfs: 'hsr0' already exists in 'hsr'
[ 2196.390329][ T4268] Cannot create hsr debugfs directory
[ 2196.650886][T27476] Bluetooth: hci4: command tx timeout
[ 2198.167517][ T4268] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2198.424150][ T4268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2198.434271][ T4268] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2198.505824][ T4268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2198.605056][ T4268] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2198.782680][ T4268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2198.789810][ T4268] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2198.847223][ T4268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2198.880717][T27476] Bluetooth: hci4: command tx timeout
[ 2199.071406][T24131] net_ratelimit: 8 callbacks suppressed
[ 2199.071426][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2199.260870][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2199.421578][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[ 2199.577454][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2199.628803][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2199.698770][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[ 2199.947691][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2200.627175][T23866] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2200.645975][T23866] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2200.687032][T23866] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2200.689581][T23866] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2200.739837][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2200.760536][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2200.783225][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2200.892628][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2201.012467][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2201.140331][T27476] Bluetooth: hci4: command tx timeout
[ 2201.145128][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2201.259740][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2201.392576][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2203.460758][T27476] Bluetooth: hci4: command tx timeout
[ 2204.527798][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2204.619199][   T55] net_ratelimit: 15 callbacks suppressed
[ 2204.619220][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2204.769601][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2204.892769][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2205.030592][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2205.084069][ T4268] veth0_vlan: entered promiscuous mode
[ 2205.111365][ T4268] veth1_vlan: entered promiscuous mode
[ 2205.293145][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2205.339662][ T4268] veth0_macvtap: entered promiscuous mode
[ 2205.347563][ T4268] veth1_macvtap: entered promiscuous mode
[ 2205.380905][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2205.455064][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2205.506857][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2205.534300][   T55] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.558940][   T55] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.563748][   T55] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.588545][   T55] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2205.594612][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2205.649063][ T4378] [U] ?:���������T�^�W�'���@s9㥔6�{����Lo����z�aT9v$|�<i���P���b��HYA��y���ph�S
[ 2205.729016][ T4377] [U] MX��Ϋu��բ��l�s9Ru�9�0��;`��ڙ1�Y9MMjo4�m�1Sw��GO4�
����@*/I9�ߗk�'�cU�@�0�$�W��]��	��v5V�
[ 2206.048087][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2206.108452][T23866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.112166][T23866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.175600][T12311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.192212][T12311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.266978][ T4387] netlink: 'syz.7.8522': attribute type 1 has an invalid length.
[ 2206.326688][ T4387] input: syz1 as /devices/virtual/input/input171
[ 2206.733619][T28007] usb 12-1: new high-speed USB device number 32 using dummy_hcd
[ 2206.952646][T28007] usb 12-1: Using ep0 maxpacket: 16
[ 2206.980923][T28007] usb 12-1: unable to get BOS descriptor or descriptor too short
[ 2207.021985][T28007] usb 12-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 2207.026858][T28007] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2207.030468][T28007] usb 12-1: Product: syz
[ 2207.032134][T28007] usb 12-1: Manufacturer: syz
[ 2207.033892][T28007] usb 12-1: SerialNumber: syz
[ 2207.285417][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2207.434339][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2208.157948][ T4398] input: syz1 as /devices/virtual/input/input172
[ 2208.629228][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8498'.
[ 2208.635278][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8498'.
[ 2208.732690][ T4404] virtio-fs: tag </dev/md0> not found
[ 2209.184339][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2209.221698][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2209.294841][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2209.322460][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2209.437346][ T5753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2209.459032][T28007] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[ 2209.785806][T28007] usb 12-1: USB disconnect, device number 32
[ 2210.782404][ T4418] netlink: 'syz.1.8527': attribute type 16 has an invalid length.
[ 2210.796350][ T4418] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8527'.
[ 2211.604522][T23866] net_ratelimit: 8 callbacks suppressed
[ 2211.604541][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2211.645476][T31317] udevd[31317]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2212.249289][T29371] bond0: (slave syz_tun): Releasing backup interface
[ 2212.335599][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2212.457836][ T5753] Bluetooth: hci1: command tx timeout
[ 2212.476632][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2212.600982][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2212.766535][T28007] usb 13-1: new high-speed USB device number 2 using dummy_hcd
[ 2213.043066][  T196] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2213.171315][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8534'.
[ 2213.174677][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8534'.
[ 2213.194148][ T4444] virtio-fs: tag </dev/md0> not found
[ 2213.664116][T28007] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2213.668896][T28007] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2213.680352][T28007] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2213.682583][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2213.712875][T28007] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2213.717946][T28007] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2213.732455][T28007] usb 13-1: config 0 descriptor??
[ 2213.741626][ T4431] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 2213.868766][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2213.936772][  T196] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2213.956025][ T4455] netlink: 'syz.1.8537': attribute type 16 has an invalid length.
[ 2213.958823][ T4455] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8537'.
[ 2214.173768][  T196] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2214.436998][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2214.441950][T28007] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 2214.580340][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2214.689954][ T5753] Bluetooth: hci1: command tx timeout
[ 2214.850532][  T196] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2215.105864][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2215.179521][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2215.190467][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2215.195653][ T4405] bridge_slave_0: entered allmulticast mode
[ 2215.202899][ T4405] bridge_slave_0: entered promiscuous mode
[ 2215.208002][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2215.211068][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2215.215436][ T4405] bridge_slave_1: entered allmulticast mode
[ 2215.220271][ T4405] bridge_slave_1: entered promiscuous mode
[ 2215.309703][ T4405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2215.343901][ T4405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2215.818804][ T4405] team0: Port device team_slave_0 added
[ 2215.985313][ T5845] usb 13-1: reset high-speed USB device number 2 using dummy_hcd
[ 2216.070877][ T4405] team0: Port device team_slave_1 added
[ 2216.162114][ T4405] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2216.165031][ T4405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2216.214680][ T4405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2216.415219][ T4405] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2216.418193][ T4405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2216.433148][ T4405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2216.620985][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2216.717665][ T4405] hsr_slave_0: entered promiscuous mode
[ 2216.721402][ T4405] hsr_slave_1: entered promiscuous mode
[ 2216.726219][ T4405] debugfs: 'hsr0' already exists in 'hsr'
[ 2216.728841][ T4405] Cannot create hsr debugfs directory
[ 2216.913270][ T5753] Bluetooth: hci1: command tx timeout
[ 2217.128976][T12311] net_ratelimit: 2 callbacks suppressed
[ 2217.128995][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2217.268404][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2217.473846][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2217.603056][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2217.740696][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2218.322169][   T39] usb 13-1: USB disconnect, device number 2
[ 2218.991726][   T39] usb 13-1: new high-speed USB device number 3 using dummy_hcd
[ 2219.190013][ T5753] Bluetooth: hci1: command tx timeout
[ 2219.293865][   T39] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2219.318904][   T39] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2219.323249][   T39] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2219.329615][   T39] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2219.373235][   T39] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2219.384815][   T39] usb 13-1: config 0 descriptor??
[ 2219.401483][ T4488] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 2221.256078][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2221.562108][  T196] team0: left allmulticast mode
[ 2221.564327][  T196] team_slave_0: left allmulticast mode
[ 2221.569068][  T196] team_slave_1: left allmulticast mode
[ 2221.581932][  T196] team0: left promiscuous mode
[ 2221.585459][  T196] team_slave_0: left promiscuous mode
[ 2221.588213][  T196] team_slave_1: left promiscuous mode
[ 2221.595034][  T196] bridge0: port 4(team0) entered disabled state
[ 2221.613668][  T196] erspan0: left allmulticast mode
[ 2221.624783][  T196] bridge0: port 3(erspan0) entered disabled state
[ 2221.681716][  T196] bridge_slave_1: left allmulticast mode
[ 2221.722208][  T196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2221.727985][  T196] bridge_slave_0: left allmulticast mode
[ 2221.730995][  T196] bridge_slave_0: left promiscuous mode
[ 2221.734411][  T196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2221.748613][   T39] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 2223.189725][  T196] pimreg: left allmulticast mode
[ 2223.292818][ T5822] usb 13-1: reset high-speed USB device number 3 using dummy_hcd
[ 2224.865545][T22629] usb 13-1: USB disconnect, device number 3
[ 2225.100221][  T196] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 2225.111837][  T196] bridge1 (unregistering): left promiscuous mode
[ 2225.396833][  T196] bond4 (unregistering): (slave bridge2): Releasing backup interface
[ 2225.471942][  T196] bridge2 (unregistering): left promiscuous mode
[ 2225.581083][  T196] team0: Port device bridge3 removed
[ 2225.802918][  T196] bond5 (unregistering): (slave bridge4): Releasing backup interface
[ 2225.817183][  T196] bridge4 (unregistering): left promiscuous mode
[ 2226.118763][  T196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2226.157745][  T196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2226.214835][  T196] bond0 (unregistering): Released all slaves
[ 2226.222845][  T196] bond1 (unregistering): Released all slaves
[ 2226.265679][  T196] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 2226.277674][  T196] bond2 (unregistering): Released all slaves
[ 2226.295709][  T196] bond3 (unregistering): (slave veth3): Releasing active interface
[ 2226.346139][  T196] bond3 (unregistering): Released all slaves
[ 2226.361666][  T196] bond4 (unregistering): Released all slaves
[ 2226.418130][  T196] bond5 (unregistering): Released all slaves
[ 2226.431182][  T196] bond6 (unregistering): Released all slaves
[ 2226.848434][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2226.878446][ T4498] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2226.897241][ T4498] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 2226.920228][ T5458] 8021q: adding VLAN 0 to HW filter on device eth18
[ 2226.978052][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2227.096889][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2227.196538][  T196] tipc: Left network mode
[ 2227.254860][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2227.308063][ T4500] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2227.312297][ T4500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2227.372665][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2227.512579][ T4500] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2227.621590][T12311] bond12: (slave dummy0): failed to get link speed/duplex
[ 2227.960166][ T5458] 8021q: adding VLAN 0 to HW filter on device eth19
[ 2227.994508][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2228.181370][ T4498] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2228.185804][ T4498] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2229.649488][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2229.839559][T11250] bond12: (slave dummy0): failed to get link speed/duplex
[ 2229.960112][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2231.161829][T27072] usb 13-1: new high-speed USB device number 4 using dummy_hcd
[ 2231.180389][    C0] raw-gadget.0 gadget.8: ignoring, device is not running
[ 2231.367069][T27072] usb 13-1: device descriptor read/64, error -32
[ 2231.590253][  T196] hsr_slave_0: left promiscuous mode
[ 2231.628237][T27072] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[ 2231.764283][  T196] hsr_slave_1: left promiscuous mode
[ 2231.779601][  T196] veth1_macvtap: left promiscuous mode
[ 2231.789174][  T196] veth0_macvtap: left promiscuous mode
[ 2231.797651][  T196] veth1_vlan: left promiscuous mode
[ 2231.800482][  T196] veth0_vlan: left promiscuous mode
[ 2231.847344][T27072] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[ 2231.852971][T27072] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42605, setting to 1024
[ 2231.868267][T27072] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2231.874953][T27072] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2231.879111][T27072] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2231.903717][T27072] usb 13-1: config 0 descriptor??
[ 2232.437198][T27072] usb 13-1: can't set config #0, error -71
[ 2232.473244][T27072] usb 13-1: USB disconnect, device number 5
[ 2232.783251][   T55] smbdirect: ib_dev[syz0] removed
[ 2233.709898][ T4561] netlink: 'syz.7.8553': attribute type 16 has an invalid length.
[ 2233.714349][ T4561] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8553'.
[ 2234.358166][  T196] team0 (unregistering): Port device team_slave_1 removed
[ 2234.571400][  T196] team0 (unregistering): Port device team_slave_0 removed
[ 2235.046325][T12150] net_ratelimit: 2 callbacks suppressed
[ 2235.046345][T12150] bond12: (slave dummy0): failed to get link speed/duplex
[ 2235.130631][ T4569] erspan0: entered promiscuous mode
[ 2235.135693][ T4569] erspan0: entered allmulticast mode
[ 2235.164734][T22629] infiniband syz0: ib_query_port failed (-19)
[ 2235.333268][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2235.466232][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2235.604903][ T4405] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2236.311586][ T4405] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2236.318179][ T4405] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2236.479966][ T4405] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2236.527175][ T4405] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2236.661271][ T4405] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2236.722317][ T4405] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2236.963451][ T4405] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2237.036260][T12150] bond12: (slave dummy0): failed to get link speed/duplex
[ 2237.212348][T12150] bond12: (slave dummy0): failed to get link speed/duplex
[ 2237.310395][ T4405] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2237.481634][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2237.518929][ T4405] 8021q: adding VLAN 0 to HW filter on device team0
[ 2237.618546][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2237.671342][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2237.805352][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2237.839564][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2237.849819][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2237.932003][ T4405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2237.960199][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2238.082179][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2238.216732][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2238.704385][   T50] usb 13-1: new high-speed USB device number 6 using dummy_hcd
[ 2238.898517][ T4405] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2238.903403][   T50] usb 13-1: Using ep0 maxpacket: 32
[ 2238.916794][   T50] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 2238.950014][   T50] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2238.976060][   T50] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2238.982331][   T50] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 2238.997502][   T50] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 2239.002715][   T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2239.007348][   T50] usb 13-1: Product: syz
[ 2239.008962][   T50] usb 13-1: Manufacturer: syz
[ 2239.010756][   T50] usb 13-1: SerialNumber: syz
[ 2239.038502][    C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 2239.052778][   T50] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input173
[ 2239.321619][   T50] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 2239.328444][   T50]  (id 0x00)
[ 2239.538403][   T50] rc_core: IR keymap rc-imon-pad not found
[ 2239.541677][   T50] Registered IR keymap rc-empty
[ 2239.544519][   T50] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 2239.557486][   T50] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 2239.604713][   T50] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0
[ 2239.630215][   T50] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input174
[ 2239.645662][   T50] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:6> initialized
[ 2239.792030][ T4405] veth0_vlan: entered promiscuous mode
[ 2239.802115][ T4405] veth1_vlan: entered promiscuous mode
[ 2239.948657][ T4405] veth0_macvtap: entered promiscuous mode
[ 2239.993930][ T4405] veth1_macvtap: entered promiscuous mode
[ 2240.046508][ T4405] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2240.061902][ T4405] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2240.071318][ T3850] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.076105][ T3850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.080768][ T3850] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.085632][   T55] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2240.372411][  T117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2240.386158][  T117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2240.417415][  T117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2240.424568][  T117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2240.535446][  T117] net_ratelimit: 15 callbacks suppressed
[ 2240.535599][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2240.678488][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2240.826952][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2240.917815][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8526'.
[ 2240.921785][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8526'.
[ 2240.958187][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.008157][ T4649] virtio-fs: tag </dev/md0> not found
[ 2241.107200][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.244546][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.360629][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.608210][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.688197][ T4612] imon:send_packet: task interrupted
[ 2241.699989][ T4612] imon:send_packet: packet tx failed (-512)
[ 2241.727594][T12150] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.870215][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2241.897147][ T4612] imon:vfd_write: send packet #0 failed
[ 2242.283414][   T50] usb 13-1: USB disconnect, device number 6
[ 2243.017523][T27476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2243.228978][T27476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2243.254880][T27476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2243.261602][T27476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2243.298090][T27476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2244.548108][ T4679] input: syz1 as /devices/virtual/input/input175
[ 2245.623794][ T5753] Bluetooth: hci0: command tx timeout
[ 2246.104919][ T4688] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8576'.
[ 2246.248011][T27863] bond2: (slave syz_tun): Removing an active aggregator
[ 2246.287733][T27863] bond2: (slave syz_tun): Releasing backup interface
[ 2246.420637][  T117] net_ratelimit: 26 callbacks suppressed
[ 2246.420658][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2246.436983][ T4688] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8576'.
[ 2246.443636][ T4688] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8576'.
[ 2246.692413][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2246.905310][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2246.923224][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2246.930807][ T4656] bridge_slave_0: entered allmulticast mode
[ 2246.945441][ T4656] bridge_slave_0: entered promiscuous mode
[ 2246.950587][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2246.953778][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2246.980873][ T4656] bridge_slave_1: entered allmulticast mode
[ 2246.985480][ T4656] bridge_slave_1: entered promiscuous mode
[ 2247.028021][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8580'.
[ 2247.050816][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8580'.
[ 2247.065149][ T4714] Bluetooth: MGMT ver 1.23
[ 2247.118415][ T4656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2247.136852][ T4720] virtio-fs: tag </dev/md0> not found
[ 2247.147114][ T4656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2247.513234][ T4656] team0: Port device team_slave_0 added
[ 2247.520529][ T4656] team0: Port device team_slave_1 added
[ 2247.795314][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8583'.
[ 2247.800004][ T4727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8583'.
[ 2247.870214][ T4729] virtio-fs: tag </dev/md0> not found
[ 2247.883456][ T5753] Bluetooth: hci0: command tx timeout
[ 2249.680424][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2249.684491][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2249.733894][ T4656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2249.744490][ T4656] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2249.747762][ T4656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2249.809026][ T4656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2250.053207][ T4656] hsr_slave_0: entered promiscuous mode
[ 2250.075344][ T4656] hsr_slave_1: entered promiscuous mode
[ 2250.126995][ T5753] Bluetooth: hci0: command tx timeout
[ 2250.184011][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2250.500749][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2250.724225][ T4656] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40701 - 0
[ 2251.166852][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2251.324021][ T4656] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40701 - 0
[ 2251.362957][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2251.458704][ T4750] netlink: 'syz.8.8589': attribute type 16 has an invalid length.
[ 2251.465346][ T4750] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8589'.
[ 2251.554844][ T4656] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40701 - 0
[ 2251.580879][ T3850] bond12: (slave dummy0): failed to get link speed/duplex
[ 2251.738205][ T4656] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40701 - 0
[ 2251.795993][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2252.144629][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2252.223208][ T4656] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2252.372843][ T4656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2252.381776][ T4656] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 2252.385050][ T5753] Bluetooth: hci0: command tx timeout
[ 2252.445918][ T4656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2252.475901][ T4656] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 2252.563209][ T4656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2252.578183][ T4656] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 2252.615153][ T4656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2252.637539][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8592'.
[ 2252.646162][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8592'.
[ 2252.765821][ T4769] virtio-fs: tag </dev/md0> not found
[ 2252.993694][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2253.140139][ T4772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[ 2253.148651][ T4772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 2253.230839][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2253.304863][ T4772] vhci_hcd vhci_hcd.0: Device attached
[ 2253.377597][ T4656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2253.414767][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2253.433368][ T4656] 8021q: adding VLAN 0 to HW filter on device team0
[ 2253.569968][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2253.575652][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2253.638971][T27072] usb 40-1: SetAddress Request (99) to port 0
[ 2253.639024][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2253.641552][T27072] usb 40-1: new SuperSpeed USB device number 99 using vhci_hcd
[ 2253.675033][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2253.680363][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2253.881364][ T4656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2253.961500][ T4773] vhci_hcd: connection reset by peer
[ 2253.972063][ T4656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2253.981058][T24131] vhci_hcd vhci_hcd.1: stop threads
[ 2253.984297][T24131] vhci_hcd vhci_hcd.1: release socket
[ 2253.988241][T24131] vhci_hcd vhci_hcd.1: disconnect device
[ 2254.006941][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2254.137449][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2254.251686][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8595'.
[ 2254.256758][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8595'.
[ 2254.273401][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2254.341087][ T4782] virtio-fs: tag </dev/md0> not found
[ 2254.465634][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2254.593165][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2254.607578][ T4785] xt_TCPMSS: Only works on TCP SYN packets
[ 2254.611161][ T4785] netlink: 160 bytes leftover after parsing attributes in process `syz.6.8596'.
[ 2255.948471][ T4656] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2256.490056][ T4656] veth0_vlan: entered promiscuous mode
[ 2256.501091][ T4656] veth1_vlan: entered promiscuous mode
[ 2256.529493][ T4656] veth0_macvtap: entered promiscuous mode
[ 2256.561636][ T4656] veth1_macvtap: entered promiscuous mode
[ 2256.648608][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2256.660955][ T4656] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2256.700223][ T3850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.704674][ T3850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.709196][ T3850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2256.715326][ T3850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2257.009888][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2257.026578][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2257.114871][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2257.119938][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2257.772134][T24131] net_ratelimit: 21 callbacks suppressed
[ 2257.772154][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2257.907508][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.032479][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.213325][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.272556][ T4829] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[ 2258.352865][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.406617][ T4830] bond1: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms
[ 2258.586563][ T4830] bond1 (unregistering): Released all slaves
[ 2258.681711][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.814973][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2258.956562][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2259.160429][T27072] usb 40-1: device descriptor read/8, error -110
[ 2259.171703][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2259.474158][ T4838] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8605'.
[ 2259.645173][T27072] usb usb40-port1: attempt power cycle
[ 2259.880419][ T4841] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8605'.
[ 2259.944992][ T4841] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8605'.
[ 2260.096051][ T4842] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2260.098510][ T4842] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2260.105528][ T4842] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2260.135971][ T4840] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2260.140290][ T4840] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 2260.253200][T27072] usb usb40-port1: unable to enumerate USB device
[ 2264.047273][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8616'.
[ 2264.064764][ T4877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8616'.
[ 2264.690655][ T4877] virtio-fs: tag </dev/md0> not found
[ 2264.787212][  T117] net_ratelimit: 14 callbacks suppressed
[ 2264.787233][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2264.971536][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.100793][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.216070][ T4884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8618'.
[ 2265.219764][ T4884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8618'.
[ 2265.267622][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.345451][ T4884] virtio-fs: tag </dev/md0> not found
[ 2265.456158][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.570690][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.694616][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.810370][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2265.951925][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2266.020425][ T1434] ieee802154 phy0 wpan0: encryption failed: -22
[ 2266.075026][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2267.545329][ T4889] netlink: 'syz.1.8620': attribute type 16 has an invalid length.
[ 2267.551265][ T4889] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8620'.
[ 2267.586581][T28711] usb 13-1: new high-speed USB device number 7 using dummy_hcd
[ 2267.760388][T28711] usb 13-1: Using ep0 maxpacket: 8
[ 2267.771516][T28711] usb 13-1: config index 0 descriptor too short (expected 301, got 45)
[ 2267.779657][T28711] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2267.790363][T28711] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2267.798906][T28711] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2267.823196][T28711] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2267.834060][T28711] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2267.843598][T28711] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.127163][ T4888] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 2268.131546][ T4888] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[ 2268.143469][ T4888] overlayfs: missing 'lowerdir'
[ 2268.256665][T28711] usb 13-1: GET_CAPABILITIES returned 0
[ 2268.259021][T28711] usbtmc 13-1:16.0: can't read capabilities
[ 2268.898422][ T4901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2270.230099][T24131] net_ratelimit: 29 callbacks suppressed
[ 2270.230120][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.372192][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.526667][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.618449][ T4911] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9)
[ 2270.618478][ T4911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 2270.618547][ T4911] vhci_hcd vhci_hcd.0: Device attached
[ 2270.658280][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.788592][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.956109][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2270.989281][ T4821] usb 50-1: SetAddress Request (18) to port 0
[ 2270.989752][ T4821] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd
[ 2271.071758][ T5991] bond12: (slave dummy0): failed to get link speed/duplex
[ 2271.192667][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2271.340364][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2271.513227][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2271.768336][ T4913] vhci_hcd: connection reset by peer
[ 2271.796619][  T196] vhci_hcd vhci_hcd.6: stop threads
[ 2271.796648][  T196] vhci_hcd vhci_hcd.6: release socket
[ 2271.796695][  T196] vhci_hcd vhci_hcd.6: disconnect device
[ 2272.370326][T11383] usb 13-1: USB disconnect, device number 7
[ 2273.589310][ T4935] input: syz1 as /devices/virtual/input/input176
[ 2275.923125][  T117] net_ratelimit: 15 callbacks suppressed
[ 2275.923154][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.084374][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.258645][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.276732][ T4941] netlink: 'syz.8.8631': attribute type 16 has an invalid length.
[ 2276.291440][ T4941] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8631'.
[ 2276.292739][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8629'.
[ 2276.377164][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.424008][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8629'.
[ 2276.506314][ T4821] usb 50-1: device descriptor read/8, error -110
[ 2276.518180][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.663522][  T196] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.669059][ T4934] virtio-fs: tag </dev/md0> not found
[ 2276.829392][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.955266][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2276.966094][ T4821] usb usb50-port1: attempt power cycle
[ 2277.081792][T24131] bond12: (slave dummy0): failed to get link speed/duplex
[ 2277.221574][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2277.569178][ T4821] usb usb50-port1: unable to enumerate USB device
[ 2277.898873][ T4821] usb 12-1: new high-speed USB device number 33 using dummy_hcd
[ 2277.919881][ T4961] random: crng reseeded on system resumption
[ 2277.985482][ T4961] Restarting kernel threads ...
[ 2278.030869][ T4961] Done restarting kernel threads.
[ 2278.154270][ T4821] usb 12-1: Using ep0 maxpacket: 16
[ 2278.160054][ T4821] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2278.192216][ T4821] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2278.197706][ T4821] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2278.229351][ T4821] usb 12-1: Product: syz
[ 2278.239095][ T4821] usb 12-1: Manufacturer: syz
[ 2278.315515][ T4821] usb 12-1: SerialNumber: syz
[ 2278.338433][ T4821] usb 12-1: config 0 descriptor??
[ 2278.368874][ T4821] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2278.396750][ T4821] em28xx 12-1:0.0: DVB interface 0 found: bulk
[ 2279.069364][ T4821] em28xx 12-1:0.0: unknown em28xx chip ID (0)
[ 2279.073266][   T40] kauditd_printk_skb: 20 callbacks suppressed
[ 2279.073284][   T40] audit: type=1800 audit(2000000018.149:567): pid=4969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8637" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 2280.577565][ T4821] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2280.583664][ T4821] em28xx 12-1:0.0: board has no eeprom
[ 2280.656910][ T4957] em28xx 12-1:0.0: write to i2c device at 0xe failed with unknown error (status=1)
[ 2280.850105][ T4985] fuse: Bad value for 'fd'
[ 2280.916934][ T4821] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2280.929354][ T4821] em28xx 12-1:0.0: dvb set to bulk mode.
[ 2280.941437][T32742] em28xx 12-1:0.0: Binding DVB extension
[ 2280.964829][ T4821] usb 12-1: USB disconnect, device number 33
[ 2280.991761][ T4985] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8642'.
[ 2281.105381][ T4821] em28xx 12-1:0.0: Disconnecting em28xx
[ 2281.225016][T32742] kworker/0:1: page allocation failure: order:4, mode:0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2281.439680][ T4988] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8642'.
[ 2281.445685][ T4988] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8642'.
[ 2281.454981][T32742] CPU: 0 UID: 0 PID: 32742 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2281.455011][T32742] Tainted: [L]=SOFTLOCKUP
[ 2281.455017][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2281.455048][T32742] Workqueue: events request_module_async
[ 2281.455076][T32742] Call Trace:
[ 2281.455082][T32742]  <TASK>
[ 2281.455090][T32742]  dump_stack_lvl+0x100/0x190
[ 2281.455157][T32742]  warn_alloc.cold+0x95/0x1c1
[ 2281.455175][T32742]  ? __pfx_warn_alloc+0x10/0x10
[ 2281.455199][T32742]  ? find_held_lock+0x2b/0x80
[ 2281.455220][T32742]  ? psi_memstall_leave+0x19c/0x360
[ 2281.455252][T32742]  ? psi_memstall_leave+0x1eb/0x360
[ 2281.455275][T32742]  ? lockdep_hardirqs_on+0x78/0x100
[ 2281.455303][T32742]  __alloc_frozen_pages_noprof+0xf25/0x2bc0
[ 2281.455339][T32742]  ? stack_trace_save+0x8e/0xc0
[ 2281.455362][T32742]  ? em28xx_read_reg_req_len+0x216/0x2b0
[ 2281.455389][T32742]  ? stack_depot_save_flags+0x27/0x9d0
[ 2281.455418][T32742]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2281.455445][T32742]  ? usb_alloc_urb+0x66/0xa0
[ 2281.455467][T32742]  ? kasan_save_stack+0x30/0x50
[ 2281.455485][T32742]  ? __kasan_kmalloc+0xaa/0xb0
[ 2281.455501][T32742]  ? usb_alloc_urb+0x66/0xa0
[ 2281.455524][T32742]  ? em28xx_alloc_urbs+0x5fa/0xf60
[ 2281.455540][T32742]  ? em28xx_dvb_init.cold+0x1f2/0x7391
[ 2281.455567][T32742]  ? request_module_async+0x61/0x80
[ 2281.455585][T32742]  ? process_one_work+0xa0e/0x1980
[ 2281.455601][T32742]  ? worker_thread+0x5ef/0xe50
[ 2281.455627][T32742]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2281.455655][T32742]  ? policy_nodemask+0xed/0x4f0
[ 2281.455686][T32742]  alloc_pages_mpol+0x1fb/0x540
[ 2281.455709][T32742]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 2281.455737][T32742]  ? em28xx_alloc_urbs+0x655/0xf60
[ 2281.455754][T32742]  ___kmalloc_large_node+0xe5/0x120
[ 2281.455777][T32742]  __kmalloc_large_node_noprof+0x1c/0x70
[ 2281.455801][T32742]  __kmalloc_noprof+0x5be/0x850
[ 2281.455816][T32742]  ? __asan_memset+0x23/0x50
[ 2281.455846][T32742]  em28xx_alloc_urbs+0x655/0xf60
[ 2281.455872][T32742]  ? kasan_save_track+0x14/0x30
[ 2281.455891][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2281.455916][T32742]  em28xx_dvb_init.cold+0x1f2/0x7391
[ 2281.455947][T32742]  ? lock_acquire+0x1b1/0x370
[ 2281.455973][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2281.455999][T32742]  ? rcu_is_watching+0x12/0xc0
[ 2281.456019][T32742]  ? trace_contention_end+0x122/0x170
[ 2281.456038][T32742]  ? __mutex_lock+0x26d/0x1b10
[ 2281.456063][T32742]  ? em28xx_init_extension+0x2f/0x200
[ 2281.456080][T32742]  ? register_lock_class+0x40/0x560
[ 2281.456106][T32742]  ? do_raw_spin_lock+0x128/0x260
[ 2281.456125][T32742]  ? em28xx_audio_init+0x132/0x1a0
[ 2281.456149][T32742]  ? __pfx___mutex_lock+0x10/0x10
[ 2281.456176][T32742]  ? em28xx_v4l2_init+0x89/0xb0
[ 2281.456200][T32742]  ? __pfx_em28xx_audio_init+0x10/0x10
[ 2281.456234][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2281.456258][T32742]  em28xx_init_extension+0x13a/0x200
[ 2281.456281][T32742]  request_module_async+0x61/0x80
[ 2281.456301][T32742]  process_one_work+0xa0e/0x1980
[ 2281.456330][T32742]  ? __pfx_process_one_work+0x10/0x10
[ 2281.456356][T32742]  ? __pfx_request_module_async+0x10/0x10
[ 2281.456379][T32742]  worker_thread+0x5ef/0xe50
[ 2281.456407][T32742]  ? kthread+0x13a/0x450
[ 2281.456431][T32742]  ? __pfx_worker_thread+0x10/0x10
[ 2281.456446][T32742]  kthread+0x370/0x450
[ 2281.456471][T32742]  ? __pfx_kthread+0x10/0x10
[ 2281.456498][T32742]  ret_from_fork+0x72b/0xd50
[ 2281.456518][T32742]  ? __pfx_ret_from_fork+0x10/0x10
[ 2281.456536][T32742]  ? native_load_gs_index+0x1e/0xc0
[ 2281.456558][T32742]  ? __switch_to+0x800/0x1100
[ 2281.456580][T32742]  ? __pfx_kthread+0x10/0x10
[ 2281.456606][T32742]  ret_from_fork_asm+0x1a/0x30
[ 2281.456640][T32742]  </TASK>
[ 2281.461863][T32742] Mem-Info:
[ 2281.664771][  T117] net_ratelimit: 28 callbacks suppressed
[ 2281.664789][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2281.842736][T32742] active_anon:17611 inactive_anon:3518 isolated_anon:0
[ 2281.842736][T32742]  active_file:8890 inactive_file:12170 isolated_file:0
[ 2281.842736][T32742]  unevictable:1768 dirty:545 writeback:0
[ 2281.842736][T32742]  slab_reclaimable:6851 slab_unreclaimable:72916
[ 2281.842736][T32742]  mapped:27636 shmem:20300 pagetables:1677
[ 2281.842736][T32742]  sec_pagetables:397 bounce:0
[ 2281.842736][T32742]  kernel_misc_reclaimable:0
[ 2281.842736][T32742]  free:36858 free_pcp:610 free_cma:0
[ 2281.925824][T32742] Node 0 active_anon:12036kB inactive_anon:5660kB active_file:132kB inactive_file:1016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:4kB writeback:0kB shmem:21016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7744kB pagetables:1380kB sec_pagetables:1156kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2281.966242][ T5988] bond12: (slave dummy0): failed to get link speed/duplex
[ 2281.979487][T32742] Node 1 active_anon:58408kB inactive_anon:8412kB active_file:35428kB inactive_file:47464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110364kB dirty:2276kB writeback:0kB shmem:60184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8724kB pagetables:5328kB sec_pagetables:432kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 2282.088393][T32742] Node 0 DMA free:2564kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:16kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:16kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2282.092008][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.121182][T32742] lowmem_reserve[]: 0 285 285 285 285
[ 2282.123811][T32742] Node 0 DMA32 free:16392kB boost:29460kB min:42556kB low:45828kB high:49100kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12036kB inactive_anon:5644kB active_file:132kB inactive_file:1016kB unevictable:3536kB writepending:4kB zspages:908kB present:1032196kB managed:292772kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 2282.167185][T32742] lowmem_reserve[]: 0 0 0 0 0
[ 2282.169687][T32742] Node 1 DMA32 free:136860kB boost:32768kB min:79908kB low:91692kB high:103476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56588kB inactive_anon:8312kB active_file:35604kB inactive_file:41980kB unevictable:3536kB writepending:2276kB zspages:5708kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2608kB local_pcp:784kB free_cma:0kB
[ 2282.305453][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8644'.
[ 2282.313494][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8644'.
[ 2282.325902][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.496876][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.497597][ T4996] virtio-fs: tag </dev/md0> not found
[ 2282.620820][  T117] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.752386][T23866] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.820273][ T4998] nbd: must specify a size in bytes for the device
[ 2282.894403][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2282.999494][   T55] bond12: (slave dummy0): failed to get link speed/duplex
[ 2283.117175][   T69] bond12: (slave dummy0): failed to get link speed/duplex
[ 2283.670579][T32742] lowmem_reserve[]: 0 0 0 0 0
[ 2283.673568][T32742] Node 0 DMA: 77*4kB (UM) 40*8kB (UM) 27*16kB (UM) 7*32kB (UM) 8*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2564kB
[ 2283.688280][T32742] Node 0 DMA32: 219*4kB (UM) 173*8kB (UM) 2*16kB (UM) 150*32kB (U) 68*64kB (UE) 23*128kB (UE) 6*256kB (UE) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 16436kB
[ 2283.697478][T32742] Node 1 DMA32: 2*4kB (UE) 2044*8kB (UM) 3274*16kB (UME) 155*32kB (UME) 57*64kB (UM) 22*128kB (UME) 93*256kB (UM) 40*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 124456kB
[ 2283.717854][T32742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2283.721473][T32742] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2283.743347][T32742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2283.753933][T32742] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 2283.770392][T32742] 43474 total pagecache pages
[ 2283.773761][T32742] 1752 pages in swap cache
[ 2283.776338][T32742] Free swap  = 89052kB
[ 2283.789189][T32742] Total swap = 124996kB
[ 2283.803481][T32742] 524155 pages RAM
[ 2283.805025][T32742] 0 pages HighMem/MovableOnly
[ 2283.807220][T32742] 210069 pages reserved
[ 2283.808931][T32742] 0 pages cma reserved
[ 2283.812225][T32742] ------------[ cut here ]------------
[ 2283.814494][T32742] !PageLargeKmalloc(page)
[ 2283.814506][T32742] WARNING: mm/slub.c:6476 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:1/32742
[ 2283.825221][T32742] Modules linked in:
[ 2283.827863][T32742] CPU: 0 UID: 0 PID: 32742 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2283.862349][T32742] Tainted: [L]=SOFTLOCKUP
[ 2283.864229][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2283.868666][T32742] Workqueue: events request_module_async
[ 2283.891222][T32742] RIP: 0010:free_large_kmalloc+0xbf/0x100
[ 2283.911134][T32742] Code: 28 90 0f 0b 90 80 3d 1a f5 56 0e 00 0f 84 17 91 bb fe 48 8b 74 24 28 48 89 ef e8 ac fe 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 6a 59 f0 8d 5b 5d 41 5c 41
[ 2283.929466][T32742] RSP: 0018:ffffc90003277810 EFLAGS: 00010293
[ 2283.933234][T32742] RAX: 00000000000000f0 RBX: ffffea0001aefc00 RCX: 000000000000002e
[ 2283.937131][T32742] RDX: 0000000000000000 RSI: ffff88806bbf0000 RDI: ffffea0001aefc00
[ 2283.941008][T32742] RBP: ffff88806bbf0000 R08: 0000000000000005 R09: 0000000000000000
[ 2283.946611][T32742] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805d8fde98
[ 2283.952072][T32742] R13: ffff88805500da00 R14: dffffc0000000000 R15: ffffed100bb1fbd5
[ 2283.957062][T32742] FS:  0000000000000000(0000) GS:ffff88809718b000(0000) knlGS:0000000000000000
[ 2283.962966][T32742] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2283.967529][T32742] CR2: 0000000080006000 CR3: 000000000e596000 CR4: 0000000000352ef0
[ 2283.975199][T32742] Call Trace:
[ 2283.977726][T32742]  <TASK>
[ 2283.980031][T32742]  usb_free_urb.part.0+0xf8/0x110
[ 2283.985682][T32742]  usb_free_urb+0x1f/0x30
[ 2284.009622][T32742]  em28xx_uninit_usb_xfer+0xf3/0x360
[ 2284.012385][T32742]  em28xx_alloc_urbs+0xb43/0xf60
[ 2284.028858][T32742]  ? kasan_save_track+0x14/0x30
[ 2284.030870][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.032886][T32742]  em28xx_dvb_init.cold+0x1f2/0x7391
[ 2284.034882][T32742]  ? lock_acquire+0x1b1/0x370
[ 2284.036692][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.038570][T32742]  ? rcu_is_watching+0x12/0xc0
[ 2284.047436][T32742]  ? trace_contention_end+0x122/0x170
[ 2284.049465][T32742]  ? __mutex_lock+0x26d/0x1b10
[ 2284.061301][T32742]  ? em28xx_init_extension+0x2f/0x200
[ 2284.063177][T32742]  ? register_lock_class+0x40/0x560
[ 2284.064937][T32742]  ? do_raw_spin_lock+0x128/0x260
[ 2284.066627][T32742]  ? em28xx_audio_init+0x132/0x1a0
[ 2284.068380][T32742]  ? __pfx___mutex_lock+0x10/0x10
[ 2284.070125][T32742]  ? em28xx_v4l2_init+0x89/0xb0
[ 2284.078093][T32742]  ? __pfx_em28xx_audio_init+0x10/0x10
[ 2284.082242][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.087307][T32742]  em28xx_init_extension+0x13a/0x200
[ 2284.095172][T32742]  request_module_async+0x61/0x80
[ 2284.097606][T32742]  process_one_work+0xa0e/0x1980
[ 2284.100801][T32742]  ? __pfx_process_one_work+0x10/0x10
[ 2284.120754][T32742]  ? __pfx_request_module_async+0x10/0x10
[ 2284.130741][T32742]  worker_thread+0x5ef/0xe50
[ 2284.132575][T32742]  ? kthread+0x13a/0x450
[ 2284.139407][T32742]  ? __pfx_worker_thread+0x10/0x10
[ 2284.148000][T32742]  kthread+0x370/0x450
[ 2284.154316][T32742]  ? __pfx_kthread+0x10/0x10
[ 2284.156209][T32742]  ret_from_fork+0x72b/0xd50
[ 2284.163351][T32742]  ? __pfx_ret_from_fork+0x10/0x10
[ 2284.166747][T32742]  ? native_load_gs_index+0x1e/0xc0
[ 2284.169005][T32742]  ? __switch_to+0x800/0x1100
[ 2284.178394][T32742]  ? __pfx_kthread+0x10/0x10
[ 2284.180629][T32742]  ret_from_fork_asm+0x1a/0x30
[ 2284.182756][T32742]  </TASK>
[ 2284.184125][T32742] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2284.187310][T32742] CPU: 0 UID: 0 PID: 32742 Comm: kworker/0:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2284.193336][T32742] Tainted: [L]=SOFTLOCKUP
[ 2284.195755][T32742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 2284.202137][T32742] Workqueue: events request_module_async
[ 2284.204959][T32742] Call Trace:
[ 2284.206146][T32742]  <TASK>
[ 2284.207136][T32742]  dump_stack_lvl+0x100/0x190
[ 2284.208690][T32742]  vpanic+0x552/0x970
[ 2284.218680][T32742]  ? __pfx_vpanic+0x10/0x10
[ 2284.220545][T32742]  panic+0xd1/0xe0
[ 2284.222125][T32742]  ? __pfx_panic+0x10/0x10
[ 2284.223993][T32742]  ? check_panic_on_warn+0x1f/0x90
[ 2284.226913][T32742]  check_panic_on_warn.cold+0x19/0x34
[ 2284.229436][T32742]  ? free_large_kmalloc+0xbf/0x100
[ 2284.232111][T32742]  __warn.cold+0x191/0x328
[ 2284.234388][T32742]  __report_bug+0x296/0x3d0
[ 2284.236649][T32742]  ? free_large_kmalloc+0xbf/0x100
[ 2284.239277][T32742]  ? __pfx___report_bug+0x10/0x10
[ 2284.241795][T32742]  ? lock_acquire+0x1b1/0x370
[ 2284.244201][T32742]  ? find_held_lock+0x2b/0x80
[ 2284.246825][T32742]  ? __free_one_page+0x109/0x1090
[ 2284.249579][T32742]  ? __free_one_page+0x109/0x1090
[ 2284.251996][T32742]  ? free_large_kmalloc+0xbf/0x100
[ 2284.254227][T32742]  report_bug+0xb2/0x220
[ 2284.255992][T32742]  ? free_large_kmalloc+0xbf/0x100
[ 2284.258148][T32742]  handle_bug+0x16a/0x2a0
[ 2284.259959][T32742]  exc_invalid_op+0x17/0x50
[ 2284.262044][T32742]  asm_exc_invalid_op+0x1a/0x20
[ 2284.263892][T32742] RIP: 0010:free_large_kmalloc+0xbf/0x100
[ 2284.266265][T32742] Code: 28 90 0f 0b 90 80 3d 1a f5 56 0e 00 0f 84 17 91 bb fe 48 8b 74 24 28 48 89 ef e8 ac fe 0b 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 6a 59 f0 8d 5b 5d 41 5c 41
[ 2284.273265][T32742] RSP: 0018:ffffc90003277810 EFLAGS: 00010293
[ 2284.275729][T32742] RAX: 00000000000000f0 RBX: ffffea0001aefc00 RCX: 000000000000002e
[ 2284.280013][T32742] RDX: 0000000000000000 RSI: ffff88806bbf0000 RDI: ffffea0001aefc00
[ 2284.283664][T32742] RBP: ffff88806bbf0000 R08: 0000000000000005 R09: 0000000000000000
[ 2284.286920][T32742] R10: ffffffffffffffff R11: dffffc0000000000 R12: ffff88805d8fde98
[ 2284.290910][T32742] R13: ffff88805500da00 R14: dffffc0000000000 R15: ffffed100bb1fbd5
[ 2284.295791][T32742]  usb_free_urb.part.0+0xf8/0x110
[ 2284.299125][T32742]  usb_free_urb+0x1f/0x30
[ 2284.301825][T32742]  em28xx_uninit_usb_xfer+0xf3/0x360
[ 2284.304239][T32742]  em28xx_alloc_urbs+0xb43/0xf60
[ 2284.306575][T32742]  ? kasan_save_track+0x14/0x30
[ 2284.309047][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.311227][T32742]  em28xx_dvb_init.cold+0x1f2/0x7391
[ 2284.313717][T32742]  ? lock_acquire+0x1b1/0x370
[ 2284.316284][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.318885][T32742]  ? rcu_is_watching+0x12/0xc0
[ 2284.325254][T32742]  ? trace_contention_end+0x122/0x170
[ 2284.327900][T32742]  ? __mutex_lock+0x26d/0x1b10
[ 2284.330298][T32742]  ? em28xx_init_extension+0x2f/0x200
[ 2284.332730][T32742]  ? register_lock_class+0x40/0x560
[ 2284.335694][T32742]  ? do_raw_spin_lock+0x128/0x260
[ 2284.338673][T32742]  ? em28xx_audio_init+0x132/0x1a0
[ 2284.341044][T32742]  ? __pfx___mutex_lock+0x10/0x10
[ 2284.343602][T32742]  ? em28xx_v4l2_init+0x89/0xb0
[ 2284.345994][T32742]  ? __pfx_em28xx_audio_init+0x10/0x10
[ 2284.348715][T32742]  ? __pfx_em28xx_dvb_init+0x10/0x10
[ 2284.351023][T32742]  em28xx_init_extension+0x13a/0x200
[ 2284.352985][T32742]  request_module_async+0x61/0x80
[ 2284.354731][T32742]  process_one_work+0xa0e/0x1980
[ 2284.356368][T32742]  ? __pfx_process_one_work+0x10/0x10
[ 2284.358057][T32742]  ? __pfx_request_module_async+0x10/0x10
[ 2284.359846][T32742]  worker_thread+0x5ef/0xe50
[ 2284.361363][T32742]  ? kthread+0x13a/0x450
[ 2284.362723][T32742]  ? __pfx_worker_thread+0x10/0x10
[ 2284.364566][T32742]  kthread+0x370/0x450
[ 2284.366002][T32742]  ? __pfx_kthread+0x10/0x10
[ 2284.367622][T32742]  ret_from_fork+0x72b/0xd50
[ 2284.369187][T32742]  ? __pfx_ret_from_fork+0x10/0x10
[ 2284.370862][T32742]  ? native_load_gs_index+0x1e/0xc0
[ 2284.373433][T32742]  ? __switch_to+0x800/0x1100
[ 2284.375689][T32742]  ? __pfx_kthread+0x10/0x10
[ 2284.377684][T32742]  ret_from_fork_asm+0x1a/0x30
[ 2284.379500][T32742]  </TASK>
[ 2284.384535][T32742] Kernel Offset: disabled
[ 2284.387016][T32742] Rebooting in 86400 seconds..