last executing test programs:

1m17.197346417s ago: executing program 0 (id=163):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xfe}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r5 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r5, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000340))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x80000)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r4)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
clock_adjtime(0x5, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b00010000000009040000", @ANYBLOB], 0x0)
r10 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r10, &(0x7f0000000240)=""/112, 0x349b7f55)

1m15.209516827s ago: executing program 0 (id=178):
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="a2adf67ad85ee4b33cff20916328efbab88fbeee9b1f2cda424e74598d60d73c17e8db07124d35ec83436992fe98ea9d4c8f61ebfaf5e19f7865f17c4cc4a8371f6ded8c57a8b8084cabac62e5db0d523f4f332b4f84c2bb78863855e869dfddae9b2245d7d5c989c4df95ed9a4656d041d597624d"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x40)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x48000)
writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000440)="3bfc8a23fbbb4ab73e8c2a8e6b5a52c3e7b8d8c21d796db8b481f1e70e77fe512360317666a35cc0f09af47919165d420c19b7d749f7c9b60017c88bc0e447914793ab6e7d6818", 0x47}, {0x0}, {&(0x7f0000000900)="e128461b64b2c8d491657e4292d938c5f682108e8dd8822d1223b2c448e2207528c7ef66bec78b6ef9231ec524435b80934b2857bb451059b6d8f16cbb4ed3b928d76aa3fa8c1a54772480033edec08d3ce921e9875e43427f4ad8df908e41141aa3d8be6b075426e765b141382cefa3aca50f5083686f5688eff72dc2d32dd7f1b3594e14531016282d6598226369cf2b4b024de238a3600867ebf651fb438781aa69cd59ab2f7a381d20b70d35975ff03c9cc7235e3fadeba8a1da1f5d4e9231bea3f4ef16a213e966c9f4063d43afbf574a3735e0f94f3a9ac60982ff36ef1188fd5ce69bd2c7ac90071e81", 0xed}], 0x3)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000005c0)={0x2, 0x0, [{0x0, 0x1, 0x1, 0x0, @msi={0x5, 0x1, 0x2, 0x3}}, {0x3, 0x5, 0x0, 0x0, @sint={0x1, 0x81}}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]})
r2 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1004, 0x200000a, 0x50, 0xffffffffffffffff, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x1, 0x0)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)

1m14.988523348s ago: executing program 0 (id=181):
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1ff, @private1, 0x3812}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
kexec_load(0x8, 0x0, 0x0, 0x0) (async)
kexec_load(0x8, 0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x8, 0x0, 0x0}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000001e01030000000000000000050000020600024000060000050003002100000004000480"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = epoll_create(0x8001)
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r2, &(0x7f0000000040)={0x30000006})

1m14.450193363s ago: executing program 0 (id=185):
syz_open_dev$media(0x0, 0x3, 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
syz_io_uring_setup(0x6891, &(0x7f0000000180)={0x0, 0xa9ed, 0x10, 0x1, 0x19d}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_MPU={0x8, 0xe, 0x23}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040041}, 0x41)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r5 = gettid()
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8)
clock_adjtime(0x5, 0x0)
timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f0000000140)=<r6=>0x0)
clock_gettime(0x0, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x2000000, 0x0)
timer_settime(r6, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, 0x0, 0x400c850)
poll(0x0, 0x0, 0x4)
ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000580)={0x7, 0xba7, &(0x7f0000000300)="10272273473b0fa3b4719834581daf6d065c6769a1bfc0e59d0dc921fffde2ce6168efd6fe16073d36feb576608df4a4ac1a34bcd564ee6c8b0c4296f8b4a8dd7726797856c89801da64604c21e3f74b54065e81de92d796e1b862b57959ba5cedd9326c76", 0x0, 0x65})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000400))

1m13.988832361s ago: executing program 0 (id=186):
r0 = msgget(0x2, 0x80)
msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000000)=""/108)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/240) (async)
r1 = semget(0x1, 0x0, 0x1)
semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000180)=""/174) (async)
semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000240)=""/243) (async)
r2 = syz_ublk_setup_io_uring(0x5bf1, &(0x7f0000000340)={0x0, 0xc219, 0x80000, 0x2, 0x377}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) (async)
msgctl$MSG_STAT(r0, 0xb, 0x0)
semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000480))
semctl$SEM_STAT_ANY(r1, 0x0, 0x14, &(0x7f00000004c0)=""/4096)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020) (async, rerun: 64)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003500)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000003600)=0xe4) (rerun: 64)
read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005680)=<r6=>0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000056c0)={{0x1, 0xffffffffffffffff, r3, r4, r5, 0xa, 0x48}, 0x0, 0x0, 0x6, 0x1ff, 0x3, 0x7, 0x6, 0xb, 0xb, 0x401, 0xffffffffffffffff, r6}) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000005780), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000005880)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005840)={&(0x7f00000057c0)={0x68, r7, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x100, @media='eth\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40c0}, 0x20000804) (async, rerun: 32)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000005980)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) (async, rerun: 32)
semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000059c0)=""/10) (async, rerun: 32)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000005a00)=""/146) (rerun: 32)
semctl$IPC_INFO(r1, 0x1, 0x3, &(0x7f0000005ac0)=""/63) (async)
ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000005b00)={0x0, 0x0, <r8=>r2})
sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000005c40)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005b80)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000}, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x5e, 0x4, 0x40010, r8, 0x0) (async)
fchdir(0xffffffffffffffff) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r8, 0xc02c5341, &(0x7f0000005c80)) (async, rerun: 64)
openat$sr(0xffffff9c, &(0x7f0000005d00), 0x10200, 0x0) (async, rerun: 64)
msgctl$IPC_RMID(r1, 0x0) (async)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000005d40)=""/4096)

1m13.810271161s ago: executing program 0 (id=187):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}})

58.425792273s ago: executing program 32 (id=187):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0xd) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64)
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) (async)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r5=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}})

42.467773324s ago: executing program 3 (id=366):
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r0, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f00000007c0)="89", 0x1}], 0x2) (async, rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$kcm(0x11, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r4 = socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x84, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x40, 0x8, 0x7}}]}, {0xfffffffffffffc20}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 64)
close(r7) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500400086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) (async)
sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_ttl={{0x10, 0x0, 0x2, 0x1}}], 0x10}}], 0x1, 0xf00)

42.068029567s ago: executing program 3 (id=367):
r0 = openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)=0x6)

42.03139518s ago: executing program 3 (id=369):
r0 = socket(0x11, 0x2, 0x1000000)
setsockopt(r0, 0x107, 0x12, &(0x7f00000001c0)="ec1a0000", 0x4) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0xc) (rerun: 64)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async, rerun: 32)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x50, 0x7, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x9f}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000110001"], 0xa0}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r8}) (async)
syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @mcast2, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={r9, <r10=>0x0, <r11=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0], 0x1, r10, r11, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0x0, "fe1d00003413000000000020b42717e47f00"}})

41.870030211s ago: executing program 3 (id=371):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f0000001100)={0x0, @frame_sync})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
unlink(&(0x7f00000000c0)='./my_configfs/target/dbroot\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='cgroup\x00', 0xcfe313c55cd2df18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file0\x00', 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, <r1=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="f80000001b00000126bd7000fbdbdf25ff020000000000000000000000000001000000000000000000000000000000004e2000034e2300060a0000a01d000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES64=r1], 0xf8}}, 0x40800)
mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0xc10, 0x0)
mprotect(&(0x7f00000d6000/0x1000)=nil, 0x1000, 0xd)
chdir(&(0x7f0000000140)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x16e)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000900), 0x1000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000000, 0x110, 0xffffffffffffffff, 0xa00000)
r2 = socket$inet(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=r4, @ANYBLOB="723e000000eaffff0400214800000000ee11f9198fba166655be44c5018a2b2a10e511b7beeb8c38603b5d029cbfe3fd11fe8dcdece69cbc7e1e6912dbad4ba5a9f9eb88381f0d86110ea0b48f3f2e7d6432970b4ae6a4bbc308d36b7723002257a9fc0b43cf2c665ebc1a36786a8fc4132bbbd75acb620b488c82f79f1b68ff6733dd8c9dcfacdb2d"], 0x28}}, 0x0)
creat(&(0x7f0000000580)='./bus\x00', 0x80)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)

41.699537475s ago: executing program 3 (id=372):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
syz_open_dev$radio(0x0, 0x2, 0x2) (async)
syz_open_dev$radio(0x0, 0x2, 0x2)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x20000080) (async)
sendmsg$nl_generic(r4, 0x0, 0x20000080)
munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)}) (async)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4d, &(0x7f0000000100)})
keyctl$session_to_parent(0x12)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4038587a, &(0x7f0000000340)={{r2, &(0x7f0000000140)='\x00', 0x0, &(0x7f00000001c0)={@_ha_fsid={[0x8001, 0x2]}, {0x6, 0xffa1, 0xe, 0x7}}, 0xc, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x9}, {[0x61, 0x7f, 0x4, 0x7]}, 0x9, 0x21, &(0x7f0000000300)=""/33})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x1, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
accept4(r7, 0x0, 0x0, 0x80800)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b00050000006a965e43c97d2242c3ea8c51aa03af6ab596b1d7786a47ebe5664a7c174736f9a8e364d2e835"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004)

41.060090623s ago: executing program 3 (id=374):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000feffffff3a00000008000300", @ANYRES32=r4, @ANYBLOB="04105b00"], 0x20}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1)

41.007452023s ago: executing program 33 (id=374):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000feffffff3a00000008000300", @ANYRES32=r4, @ANYBLOB="04105b00"], 0x20}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1)

26.584250681s ago: executing program 5 (id=460):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r4, r3, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4606ff7aa33e0200000400000002003e00cd000000db0300000000000040000000000000003102000000000000000001000500380001000600b106040403000000810200007000000000000000f50f00000000000300fffffffffffffe970000000000000007000000000000000000000000000000e469736f4c675e7243b699d576ee56374318788d83a1d03c0fb47b4e0cb7f5cf8dc9f835a45e92b63abd679082cf0700ba78cbf0d780aa7389eba4ed9a8affc38c456bcc289b80c070c0bd98054f7823f2a1c29cb6a6a826e3c16b86c4aff63389037ec7a2b6f6b35b0e022f4bb081b3a02db9445c380890565c45cd5344ed52fc61"], 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
fchdir(r8)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000280)='proc\x00', 0x3000002, 0x0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r9, &(0x7f0000000000)='comm\x00')

26.394024333s ago: executing program 5 (id=462):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r0=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x15, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000001801000020786c3600000000002020207b1af8ff00000000bfa100008000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
rt_sigtimedwait(&(0x7f0000000280)={[0xa, 0x2]}, &(0x7f00000002c0), &(0x7f0000000440)={0x0, 0x3938700}, 0x8)
r2 = syz_ublk_setup_io_uring(0x46a4, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x120, 0x1, {0x2}})
close(0x3)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac000000000105"], 0xac}}, 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x15}}}, 0x0)
r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r7, &(0x7f0000000100)={'full', 0x20, 0x101, 0x20, 0x1}, 0x2f)
timer_delete(r0)

25.949464982s ago: executing program 5 (id=466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
poll(&(0x7f00000000c0)=[{r4, 0x1a}], 0x1, 0x81) (async)
poll(&(0x7f00000000c0)=[{r4, 0x1a}], 0x1, 0x81)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = dup2(r3, r4)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000200)=r5) (async)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000200)=r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
setns(0xc9, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x82, 0x0, 0x0, 0xb, 0xc036, @remote}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) (async)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48)
r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$afs(0x0, &(0x7f00000006c0)='./cgroup\x00', &(0x7f0000000700), 0x1001000, &(0x7f0000000100)=ANY=[@ANYRESDEC=r9])
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="679de9b7fbaeb6bea6e563380000000001050000000000000000000200a53302801400018008000100e000000108000200e00000010c000277050001000000000032ee150c3c394d3cc2bf2634f2c8cc2017fe05599f7c96412100"/105], 0x38}, 0x1, 0x0, 0x0, 0x4091}, 0x0)

24.306490509s ago: executing program 5 (id=473):
r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0xfe)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mtdblock0\x00', 0x2c82, 0x2)
sendfile(r2, r3, 0x0, 0x110000)
close(r2)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x103, 0x0)
process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, &(0x7f0000001740)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x7, 0x0)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x15) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0xfe) (async)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mtdblock0\x00', 0x2c82, 0x2) (async)
sendfile(r2, r3, 0x0, 0x110000) (async)
close(r2) (async)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x103, 0x0) (async)
process_vm_readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1, &(0x7f0000001740)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/222, 0xde}, {&(0x7f0000000380)=""/108, 0x6c}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x7, 0x0) (async)

24.138616567s ago: executing program 5 (id=474):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x2f}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101802, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000400)=[@exit_looper], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a0d301fb7c62e36dba0"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xd000, 0xffff1000, 0xf000, 0x5, 0x7f, 0x9, 0x81, 0xff, 0x0, 0x80, 0x0, 0xb}, {0xd000, 0x40000, 0x5, 0x3, 0x3, 0x7, 0x6, 0x6, 0x5, 0x44, 0xfa, 0x5}, {0xdddd1000, 0x4000, 0xd, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x1, 0x92, 0x80}, {0x10000, 0xeeef0000, 0xb, 0xf, 0x8, 0x40, 0x2, 0x0, 0xbd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x80a0000, 0x7, 0x9, 0x5, 0x2, 0x7, 0xf1, 0xfe, 0x6e, 0x4, 0x2}, {0x25000, 0xdddd1000, 0x8, 0x3, 0xad, 0x2, 0x4, 0x5, 0xf7, 0xe, 0x6, 0xff}, {0x54000, 0x60000, 0xf, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x4e, 0x7f, 0x1, 0xfc, 0x7f}, {0xd000, 0x5}, {0x80a0000, 0xff81}, 0x80000007, 0x0, 0x6000, 0x2021, 0x6, 0xf900, 0x8000900, 0x0, [0x0, 0x4, 0x3, 0x3]})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)

23.68862333s ago: executing program 5 (id=475):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
close_range(r0, r0, 0x0) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})

23.586086567s ago: executing program 34 (id=475):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
close_range(r0, r0, 0x0) (async)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x1, 0x0, 0x19ef, 0x2a, 0x7, 0x2800, 0x6, 0x2, 0xd1, 0x0, 0x30, {0x9d, 0xffffffff}, 0xd0, 0x9}})

11.6385168s ago: executing program 2 (id=534):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}, 0x3000c085)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r7=>r5, {0x7}}, './file0\x00'})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x14)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00')
fchdir(r9)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x1, <r10=>0x0}, 0x8)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000300d18f9b25a6eb4355e7f743ec00"/40], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1, <r13=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pI4   \x00'}, 0x1c)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0300000000000000002000000000000000000000c6d5cd1d3b1adf5294463226ad0fc607b973d4f9711b97c5201622e40eba0689cc6670de77c4b223cdc98907aa11c2fd348b8f670faa7a2b56cfe99bcfdcfc47ce6b5a4dd9dda2e6d58de904cb59bd8578fe1fd05f276b44545760fedb8a37b647b83ae16694597c3f20098743f5b477d10d017d9488f477ffd9576193b4f870b1ab7fffd7a4b3950840da98045c1f6a35981878f9db6d491854feae7d8d28fa5f7bd9236ebe8b6c88682a2b62eeeb2808e54f087de1836c69a1418fd786b8c3566825d1b5db3cc0107a92002acb78e545b90e60ceb898972610f8d6da44166b41b4ecc22c1c7964df16ac00b66711dd71174bdacda3a561ada1f1cb2869aa732092f74b5990116b5a1124717fb2156efc62a8275d10a4f8ad742ff0660ecd4f4d", @ANYRES32=r2, @ANYBLOB="d29a3e389d6405f45c83aec8796d53d1d8739637dae25238f62ae3f57251a5a32712c5c80a4f3d140dcec9be2f0fc3622a9603dfb76cbe09e08d35aaa90009f14db6f86f9ed2c7abb50ffa7ea6402c5b07bb3668e937afc7af4df9bd4195196f", @ANYRES16=r9], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r3, <r15=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx  \x00'}, 0x1c)
r16 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x200000000000029c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b7020000ef0000008500000086000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="000004000000040000000a00000000000000", @ANYRES16, @ANYBLOB="ff7f0000000000000000000000000000000000006972fa461abb8faeabbb50764f9f0224d2df0aca1d2b97205939359c2a22176781179074bf8e742a3be0f4c314e157020a3250f03d31c31c3f9373cb8157b83571f0a509f287a86a7c8e94d17a9e28bfd6cda5f407b50ad41ecffe5c2f1d4823cf84ed285624", @ANYRES32=r2, @ANYRESHEX=r15, @ANYBLOB="0100000000020000000000000000"], 0x50)
r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r2, @ANYRES32, @ANYBLOB="01000000010000000400"/19, @ANYRES8=0x0, @ANYRES32=r7], 0x50)
r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="4a03000000000000000000000011b83fb795effd0000000000000000000000bfcb0a55eb8b2f1ecf3c01000080000000009708ec5682a37394ab9654f1a92f37007e93c9c5be078cb0cba8b4e3ce77c234478edf2409bda7b5774699598dc3c6faf25d7564f6d989b7a83c2e99837b8b6633d136cd841bd47f723951250038f2a79c27a73d899fed2b35817aa5874756bc26516aef1955487a5b85606a82e7f1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0x1b, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa4c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @generic={0x4, 0x4, 0x8, 0xd5f, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000005c0)='syzkaller\x00', 0xfffffff7, 0x84, &(0x7f0000000b40)=""/132, 0x41000, 0x80, '\x00', r2, @cgroup_sysctl=0x12, r9, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, r11, 0x4, &(0x7f0000000c40)=[r12, r13, r14, r15, r16, r17, 0xffffffffffffffff, r18, r19], &(0x7f0000000c80)=[{0x4, 0x1, 0x9, 0x5}, {0x5, 0x2, 0x2, 0xc}, {0x3, 0x2, 0xd}, {0x4, 0x3, 0x10, 0x5}], 0x10, 0x8}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r20 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r20, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x4040000)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r20, @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

11.589113547s ago: executing program 2 (id=536):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440))
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0xa}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES64=r1, @ANYRESDEC=r1, @ANYBLOB="54c20500b59c462b3b2f990000e6d317052e169c2b69f404f1f5b728921aa98af0a79deec5020ed3d5b87cf70f8c70e05c5bee592d74199edaeeb8445a73f4b5c9114029c8fb9de674a4fc13f1da06bc86be06cc256034155b3a49351553b5a7a80101"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="84000900", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400", @ANYRES64], 0x84}, 0x1, 0x0, 0x0, 0x24044000}, 0x10000050)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000540)=0x1e)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
clock_getres(0x3, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)=@x86={0x0, 0x81, 0x8, 0x0, 0x7, 0x10, 0xd4, 0x9, 0x5, 0x2, 0x0, 0xff, 0x0, 0x1, 0xa, 0xe, 0x8, 0x32, 0x2, '\x00', 0xb0, 0x80})
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000005c0)='hybla', 0x5)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a45321, &(0x7f0000000000)={{0x1}, 'port1\x00', 0x10, 0x410, 0x1, 0x8, 0x1, 0x80000000, 0xd, 0x0, 0x3, 0x5})
r6 = openat$ppp(0xffffff9c, &(0x7f00000000c0), 0x6800, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004890)
write$ppp(r6, &(0x7f0000000100)="4d4ec74463f7238464b3a5e87aa1ba4f70edc7bdd0d96d12b2fec455f98f36cbf1e2e508bf1ee844c1a2ac84adbadc8fe7abac55305ded74dd32fd13e82bcf2bb4da22a231b5f7fd51bebd6e7903566e46cb38a0a0b9663d20bf8f0119f1631476fa6364c2478e69807872ac8674c17b661daf0dd6d729f8a5087ce02b60b7397cbd3c2d4eff41fb84bf3cd414d44d7a0a92b213d5c812721d66ba8d7f8813ea1ed12f6f70ca1c97602b4f5f9a7e6ff745d43bbd8273d9eba50e673327d2de95e437c229fa660d3de8bade611830d31279773efa4c9ab99b", 0xd8)
pwritev(r6, &(0x7f0000001400)=[{0x0}, {0x0}], 0x2, 0x5d2, 0xffffffff)
r8 = openat$ptp0(0xffffff9c, &(0x7f0000001440), 0x101, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400), 0x4)
ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, &(0x7f0000001480)={0x18})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

10.719368262s ago: executing program 2 (id=539):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
r0 = eventfd2(0x49d, 0x80800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x800000000004, 0x6000, 0x1, r0})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x4000, 0x4, 0x401, 0x13, r5, r6, 0x1000, '\x00', 0x6, 0x7, 0x0, 0x2, {0x40, 0x9}, {0x4000000000006, 0xfffffffa}, {0x5, 0xc}, {0x29, 0x9fc}, 0x1, 0x6, 0x1, 0x7}}}})
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r4, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50)

9.949356847s ago: executing program 4 (id=550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$9p_virtio(&(0x7f0000000680), &(0x7f00000006c0)='./bus\x00', &(0x7f0000000700), 0x800808, &(0x7f0000000500)={'trans=virtio,', {[{@uname={'uname', 0x3d, '('}}, {@version_u}]}})
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r5, &(0x7f00000054c0)={0x2020}, 0x2020)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

9.845908389s ago: executing program 2 (id=552):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00( ^ ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000009, 0x13, r0, 0x6b6c0000) (async)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x2000009, 0x13, r0, 0x6b6c0000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000500)}, 0x10)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0)
write$tun(r3, &(0x7f0000000c00)=ANY=[], 0xb8c)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='1', 0x1) (async)
write(r4, &(0x7f0000000400)='1', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:1d.7/remove\x00', 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r6, 0x4010ae42, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) (async)
preadv(r8, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (async)
sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x7fff, 0x3, 0x8, 0x20000006, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x17, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0x0, 0x1048008, 0x400, 0x80, 0x0, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x10001, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0xd, 0xfffffffe, 0x3, 0xffffffff, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x9, 0x1000005, 0x5f2a, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc25, 0xfe000000, 0xffff, 0x9, 0x4, 0x9, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x3, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x80, 0x5, 0x20061c, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x3, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x2, 0xca16, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x4, 0x3, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x2, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
socket$rds(0x15, 0x5, 0x0)

8.829339383s ago: executing program 4 (id=557):
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x20000000, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000e890}, 0x8080)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x4000, 0x40000000000000, 0x0, 0x7fffffff}, 0x0, 0x0)

8.699927589s ago: executing program 6 (id=559):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x480201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
readv(r1, &(0x7f0000003540)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000001680)=""/210, 0xd2}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/186, 0xba}, {&(0x7f0000003380)=""/155, 0x9b}, {&(0x7f0000003440)=""/230, 0xe6}], 0x6)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@deltclass={0xac, 0x29, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x0, 0xffe0}, {0x3, 0x4}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xa}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x8, 0x4, 0x200}}, @TCA_HFSC_FSC={0x10, 0x2, {0x77, 0x8, 0xfb8b}}, @TCA_HFSC_FSC={0x10, 0x2, {0x34475bed, 0x0, 0x9}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0xfffffffc, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x6cc, 0x4, 0x1000}}, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x0, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xf9}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4890)
r9 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x180, 0x0)
setuid(0xee01)
ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sysinfo(&(0x7f0000000680)=""/4092)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xf221c000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x20802600, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r10, &(0x7f0000001780)=[{&(0x7f0000000080)=""/203, 0xcb}, {&(0x7f00000005c0)=""/180, 0xb4}], 0x2, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/233, 0xe9}], 0x1, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.677078101s ago: executing program 4 (id=560):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10005, 0x18}, 0xfffffd8f)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x47dfffc, 0x105381)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x18, 0x4, "339f020bbe82b398000000000000369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f050500000000e354b98ef0000000000000000000004000", [0x6, 0x3fd]}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008003f00ff01"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802)
r4 = dup(r2)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

8.539712968s ago: executing program 1 (id=561):
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000540)={0x9, 0x108, 0xfa00, {r3, 0x5, '\x00', "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"}}, 0x110)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r1, 0x300, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x1ff)
recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x3000006, 0x80010, r0, 0xec774000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc9a10e10ac69ac014b0fa7807b11d2cabed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143", 0x32}, 0x13, 0xffffffffffffffff)

8.420105223s ago: executing program 4 (id=562):
r0 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="ff1b1134bd9fe4aa5c299f2af4b44a0ab8add8dc0b8aff4d091c4b929d93118a7cd5d0b17fccef604715934bd3d13f6c47354ad4a3dd97b08d6c89fe9b259ace31ef48c1aef7a2147c64772d6f8d602416d23dc9184644bdfe8e7fb9f273ec38e771c5a55f7d9a90cb5a8bca06e42ee6b26ba91e637aa89d0966956875e7d11df4032d925816f9c0e8bd787af90d", 0x8e, 0xfffffffffffffffa)
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, r0) (async)
setfsuid(0xffffffffffffffff) (async, rerun: 32)
r1 = syz_clone(0x80040000, 0x0, 0xffffff8e, 0x0, 0x0, 0x0) (rerun: 32)
r2 = syz_pidfd_open(r1, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
getpgrp(r1) (async)
r3 = syz_open_procfs(r1, &(0x7f0000000280)='net/ip6_tables_matches\x00')
eventfd2(0x8, 0x80000)
keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000200)='fscrypt-provisioning\x00')
exit(0x9) (async)
getdents64(r3, 0x0, 0x0) (async)
setns(r2, 0x24020000)

7.418690036s ago: executing program 1 (id=563):
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x3)
ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000140)={&(0x7f0000000080)="90459cd9c9b74969b0f994546b365b8d8469ca0a9d1fb979471c56e167ad51ecf9ef15b74608f8c3f1dafaabc5a3ccbf22c2c4c10e3c8ecc53a82bbd4808c41c3096fb20b14b37dbe6267c1a9b3d13dccf066d3fc7602c76db3dc2a229843c88d8a07897fa892102ceb17312cf31ce547053ceefbbbecafd5a15228d7b0619bbc82dd22a1007ec9e79d408547f94ddead0b015e0a91f819561e47de4640ed9c3f327e91e64128b48f5bff9", 0xab})
r1 = openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x8000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
close_range(r1, r2, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc00c64b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, <r3=>0x0, 0x0, 0x0, 0x0], 0x5})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000300)=<r4=>0x0)
connect$nfc_raw(r2, &(0x7f0000000340)={0x27, r4, 0x0, 0x4}, 0x10)
r5 = geteuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r1, {<r7=>0xee00, <r8=>0x0}}, './file0/file0\x00'})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000480)=<r9=>0x0)
mount$nfs4(&(0x7f0000000380)='/dev/sequencer\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x800008, &(0x7f00000004c0)={[{'/dev/sequencer\x00'}, {'/dev/sequencer\x00'}], [{@dont_hash}, {@measure}, {@euid_eq={'euid', 0x3d, r5}}, {@hash}, {@pcr={'pcr', 0x3d, 0x1b}}, {@pcr={'pcr', 0x3d, 0x2}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x39d850005e4f657d, 0x37, 0x31, 0x34, 0x32, 0x34, 0x67], 0x2d, [0x61, 0x33, 0x63, 0x36], 0x2d, [0x35, 0x66, 0x39, 0x37], 0x2d, [0x63, 0x63, 0x33, 0x64], 0x2d, [0x31, 0x32, 0x35, 0x34, 0x61, 0x39, 0x34, 0x32]}}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@uid_lt={'uid<', r9}}]})
openat$sndseq(0xffffff9c, &(0x7f00000005c0), 0x200000) (async)
r10 = openat$btrfs_control(0xffffff9c, &(0x7f0000000600), 0x400000, 0x0)
r11 = socket$inet6(0xa, 0x4, 0x7) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffff051}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x600000}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x587}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x8800) (async)
read$FUSE(r10, &(0x7f0000000740)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_ATTR(r2, &(0x7f0000002780)={0x78, 0x0, r12, {0xfb9e, 0x5, 0x0, {0x2, 0x9, 0x0, 0xfffffffffffffffa, 0x4, 0x2, 0xfff, 0xfff, 0x3, 0xa000, 0xb267, r9, r8, 0x1000}}}, 0x78)
r13 = syz_open_dev$dri(&(0x7f0000002800), 0x7e, 0x10000) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r10, 0xc01864c2, &(0x7f0000002840)={<r14=>0x0, 0x1, r2})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r13, 0xc00864c0, &(0x7f0000002880)={r14}) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000002d40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002940)={0x3ac, r15, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6d}}}}, [@NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x1, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x6, 0x2}, {0x4, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x6, 0x5, 0x6, 0x8001, 0x7, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x3, 0xc, 0x9, 0x8, 0x3, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x84, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x4, 0xa}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x7}, {0x2, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x4}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x4, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0x5}, {0x3, 0x5}, {0x2}, {0x0, 0x4}, {0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x6, 0x8, 0x8, 0x4, 0xff, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x294, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x5, 0x30, 0x6c, 0x48, 0xb, 0x1b, 0x6, 0x18, 0x36, 0x12, 0xb, 0x1, 0x1b, 0x96c4553a29f90eca, 0x1b, 0x9, 0x6, 0x9, 0x24, 0x1, 0xb, 0x6, 0x48, 0x9, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3b, 0x4e3a, 0x0, 0x0, 0x7, 0x0, 0x435a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x3, 0x956, 0xb, 0x3, 0x129, 0x400]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0x3}, {0x7, 0x5}, {0x2, 0x1}, {0x2, 0x4}, {0x4, 0xa}, {0x6, 0x2}, {0x1}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x7}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x4}, {0x3}, {0x2, 0x1}, {0x4, 0x8}, {0x4, 0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x2}, {0x5, 0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x0, 0x6}, {0x5, 0x3}, {0x6, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x8}, {0x3, 0x4}, {0x3, 0xf}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {0x1, 0x2}, {0x3, 0x4}, {0x4, 0xa}, {0x2, 0xa}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x6}, {0x3, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0x3}, {0x4, 0x7}, {0x5, 0x5}, {0x7, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x5, 0x5}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x12, 0x60, 0x30, 0x4, 0x48, 0x24, 0x36, 0x6, 0x6c, 0x24, 0x44]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x7, 0x8, 0x6, 0x8, 0x3fc, 0x1]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x24, 0x30, 0x3, 0xb, 0x16, 0x4, 0x48, 0x0, 0x1b]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf800, 0x126b, 0x91e, 0x1, 0x9, 0x7, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3996, 0x7, 0x1, 0xc6fc, 0x5, 0xf8ff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3c, 0x60]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x3, 0x7, 0x93fb, 0xb, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x5}, {0x2, 0x8}, {0x1}, {0x4, 0x3}, {}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x7}, {0x3}, {0x1, 0x1}, {0x1}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x6}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x7, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x6}, {0x5, 0x9}, {0x4, 0x5}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x9}, {0x7, 0xa}, {0x7, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x7}, {0x1, 0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x3, 0x9}, {0x6, 0x3}, {0x4}, {0x4, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x3}, {0x4, 0x8}, {0x5, 0x2}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {0x3}, {0x7, 0x8}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x7}, {0x1}, {0x6, 0x6}, {0x4, 0x8}, {}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x4}, {0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x9}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x12]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x6}, {0x3, 0x5}, {0x1, 0x5}, {0x6, 0xa}, {0x2, 0x1}, {0x6}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0x9}, {0x6, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x2, 0x4}, {0x3, 0x5}, {}, {0x6, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x6, 0x1}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0x2}, {0x4, 0x7}, {0x6}, {0x4, 0x6}, {0x5, 0x5}, {0x7, 0xa}, {0x4, 0xa}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x30, 0x48, 0x60, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xce1, 0x4, 0x6, 0xe76a, 0x4, 0x7, 0xff]}}]}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x20000080}, 0x84) (async)
openat$ipvs(0xffffff9c, &(0x7f0000002d80)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000002dc0)) (async)
r16 = syz_open_dev$sndpcmc(&(0x7f0000002e00), 0x7, 0x104c4)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000002e40)={0x9, {{0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00', 0x9}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}}, {{0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}]}, 0x18c) (async)
ppoll(&(0x7f00000030c0)=[{r2, 0x2000}, {0xffffffffffffffff, 0x400}, {r11, 0x1008}, {r16, 0x80}, {0xffffffffffffffff, 0x100}, {r16}], 0x6, &(0x7f0000003140), &(0x7f0000003180)={[0x2cba, 0x80]}, 0x8)

7.41718508s ago: executing program 4 (id=564):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x0, 0x444, 0x35c, 0x35c, 0x118, 0x50c, 0x50c, 0x50c, 0x50c, 0x50c, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2c}, @rand_addr=' \x01\x00', [0x0, 0xff000000, 0x0, 0xff000000], [0xffffff00, 0xffffff], 'veth0\x00', 'team_slave_0\x00', {0xff}, {}, 0x2b, 0x4, 0x0, 0x62}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x2b, 0x2, 0x2, 0xf8, 0x5d6, 0x2808, 0x590}}, @common=@hl={{0x24}, {0x0, 0x7}}]}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xffffff00, 0x0, 0xffffff00, 0xff], [0xff000000, 0xff, 0xffffffff, 0xffff00], 'geneve1\x00', '\x00', {0xff}, {0xff}, 0x3c, 0x3, 0x2, 0x5}, 0x0, 0x110, 0x134, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x6}}, @common=@dst={{0x48}, {0x0, 0x1, 0x1, [0xffff, 0x3, 0xa, 0x6, 0x0, 0x1, 0x81, 0xb3d, 0x7, 0xd80, 0x4, 0xe9a, 0x5, 0x696, 0x5, 0x7], 0x5}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xa}}]}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@uncond, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv6=@mcast1, 0x13, 0x2e, 0x58}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0x0, 0xffffffff], 'veth1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x3c, 0x5, 0x5, 0x11}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x1, 0x80}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x60c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0xfffffffffffffd49, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x68, 0x0, 0x401, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @link='syz1\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x22004884}, 0x40000)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000d00)="16f265d71a0b54c62fd0b1c4612c6f7d5fefad3f76910a226eb7514d50ef3884d64c3df10bb57f2da93d5b7a7a85927c7a19fe4cf3f740e7a36299dc7dbcabfaae9450d0ad8a8a11915911292e34d3a335753e23a3c6c8fe6f1d3aa6a84d0fe054c6093c9b836aab4dc6ccc55d21c54ba3ea43c264254b05a65de25b3aae9544e6b9dfb15d2370455b50276362e905b68009a8f4c2d0cb6fb7efbd0d8719d2c004", 0xa1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="f7ffffff2e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f000000000000000000"], 0x30}], 0x1}, 0x0)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
readv(r3, &(0x7f0000000580), 0x54)
socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000f00)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_LISTEN={0x39, 0x40, 0x0, r4, 0x0, 0x0, 0x1, 0x0, 0x1})
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000440)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000308", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10002d800a0000000202020202020000"], 0x2c}}, 0x0)

7.411669366s ago: executing program 6 (id=565):
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3)
symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$unix(r1, &(0x7f0000000180)="ada516cb", 0x4, 0x40040, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000240)=@md0, 0x0, &(0x7f0000000280)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x2}}, './file0\x00'})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000300)=0x1)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000340)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x64)
setns(r2, 0x40000000)
syz_open_dev$tty1(0xc, 0x4, 0x3)
setxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)={'L-', 0x1}, 0x16, 0x1)
sendmsg$nl_generic(r2, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x17c, 0x1d, 0x100, 0x70bd27, 0x25dfdbff, {0x16}, [@typed={0x8, 0xcd, 0x0, 0x0, @fd=r0}, @generic="05aa8689f40f228f17ce0b16a10ebc990c3f1198f15b406a2bd3cee1d22c1064264564f7ae4202ad96c0033b9b23d8c72c53ab64b74f98b894a5e6007da79c9b22f2df80b6fefeb78a8936a7b408454af1b28fb32fb505567fae73215de31075a161481b0a25a59ccafa1c25352ce1598421b0e942f24ab41f8b63207bf0e4b83823c3621deee9567a452109c9a1db6954bba7ad8a3e864515cf8fe811bc33f36a574a4cedceca3e4d7cc5bcddad5a87341c5b91159b31bca7a494543693b53bb819f18696c0fe2e1f", @generic="4eff81117865d079481a6abc16a2791fdac610492747714751ba4affd5160eefcb8a51f8c47efec23a95c96db272c06143d9f9bec868a37d1aad2c57fd278011fae7eee663ec22288d662195dda4d3d568712d87ad840fd1716ce2ce93f100e4b9efd06a2b92fe33baffb68f972516c00a34ab734ed054a4d51cd915db7534475c814f3d47d8bf58b69ab3fec2bddfd164a6aca0"]}, 0x17c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008891)
r3 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r3, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x2, {{0x3, 0x2}, 0x4}}, 0x10)
fstat(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
read$FUSE(r2, &(0x7f0000000800)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
mount$cgroup2(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x4, &(0x7f0000002840)={[{@favordynmods}, {@memory_hugetlb_accounting}, {@pids_localevents}, {@pids_localevents}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r4}}, {@uid_lt={'uid<', 0xee00}}, {@fowner_lt={'fowner<', r5}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'L-'}}]})
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002940)=<r6=>0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000002980)=0xc15)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000029c0)=0x5)
r7 = openat$dir(0xffffff9c, &(0x7f0000002a00)='./file1\x00', 0x24e00, 0x36)
openat2(r7, &(0x7f0000002a40)='./file1\x00', &(0x7f0000002a80)={0x10000, 0x1f2, 0x6}, 0x18)
r8 = openat$iommufd(0xffffff9c, &(0x7f0000002ac0), 0xa000, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000002b00)={0xc, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000002b40)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000002bc0)={0xc})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, &(0x7f0000002c00)={0xc, <r10=>0x0})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000002c40)={0x48, 0x7, r2, 0x0, 0x0, <r11=>0x0, 0x9, 0x60})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000002cc0)={0x48, 0x6, r10, 0x0, r11})

6.234974608s ago: executing program 2 (id=566):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
ioctl$sock_proto_private(r0, 0x89e0, 0x0) (async)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x739}) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x4b0f, &(0x7f0000000180)={0x0, 0xfffffffc, 0x80, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0)

6.128354227s ago: executing program 6 (id=567):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0)
write(r2, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000880), 0x10, r0}, 0x94)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0)
setgroups(0xefff, 0x0)
r5 = openat$sysfs(0xffffff9c, &(0x7f00000005c0)='/sys/kernel/vmcoreinfo', 0x22000, 0x120)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x6, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x6f}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x5, 0x5, 0x0, 0x18, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x4d, &(0x7f00000004c0)=""/77, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1a, r2, 0x8, &(0x7f0000000540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0xb, 0x68ee, 0x8}, 0x10, r0, r2, 0x1, &(0x7f0000000680)=[r2, r2, r2, r5, r2, r2, r6, r2], &(0x7f00000006c0)=[{0x2, 0x3, 0x7, 0xa}], 0x10, 0xfffffffe}, 0x94)
sync()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000180)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x0, <r8=>0xffffffffffffffff}}, './gadget/dummy_udc\x00'})
getgroups(0x2, &(0x7f0000000240)=[<r9=>0xee00, 0xffffffffffffffff])
syz_open_dev$video(&(0x7f00000003c0), 0x8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0xee01, <r10=>0xee01}}, './gadget/dummy_udc/file0\x00'})
getgroups(0x5, &(0x7f0000000380)=[r7, r8, r9, r10, 0xee00])
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x27, 0xe40, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.597756378s ago: executing program 1 (id=568):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x2, 0x0)
write(r5, &(0x7f0000000000)='3', 0x4e)
openat(r5, &(0x7f0000000040)='./proc\x00', 0x6000, 0x0)
r6 = memfd_create(&(0x7f0000000280)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5.413789672s ago: executing program 4 (id=569):
r0 = open(&(0x7f0000000000)='./file0\x00', 0xc84c0, 0x88)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x383, 0x6, 0x4, 0x6})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080))
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100))
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x30, 0x26, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x10}, {0x8}, {0x10, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x3000084c}, 0x480c1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xe)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x810, r0, 0x7cced000)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0684113, &(0x7f0000000280)={0x1, 0x8, 0xfff, 0x400, 0x200, 0x8, 0x400, 0x10, 0x7f, 0x6, 0x98, 0x2})
connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x10)
r1 = openat(r0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20)
sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000004c0)={0x5, {{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}}, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000800)={&(0x7f0000000580), 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x184, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x80}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x8}}, {0x8, 0xb, 0xe3}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0x6}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010)
ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000840)={0xc, <r4=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x1406, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000011}, 0x4001)
mprotect(&(0x7f0000d81000/0x4000)=nil, 0x4000, 0x1000006)
fsetxattr$security_capability(r1, &(0x7f0000000a00), &(0x7f0000000a40)=@v2={0x2000000, [{0x8, 0x4edd1d5e}, {0x6, 0x1}]}, 0x14, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000a80)={0x2, 0x0, [{0x80000008, 0xd, 0x3, 0x7, 0x6, 0x2, 0x10001}, {0xc0000000, 0x7, 0x0, 0x8, 0x3b, 0x1000, 0x16}]})
r5 = openat$audio(0xffffff9c, &(0x7f0000000b00), 0x0, 0x0)
sendfile(r5, r0, &(0x7f0000000b40)=0xffffffff, 0x3)
ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000b80)={0x0, 0x4, 0x401, 0xa3})
r6 = openat$kvm(0xffffff9c, &(0x7f0000000bc0), 0x501000, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000c40)=0xfffffff9, 0x4)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000c80)=0x2)

5.037865998s ago: executing program 2 (id=570):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(0xffffffffffffffff, 0xc010644f, &(0x7f00000005c0)={{0x18, 0x7, &(0x7f0000000500)=[{0x0, 0x1, 0x8000000000000000, 0x10}, {0x0, 0x1, 0x2, 0x92de}, {0x0, 0x0, 0x6, 0x1}, {0x0, 0x1, 0xb, 0x3}, {0x0, 0x1, 0x800, 0x7}, {0x0, 0x1, 0x400, 0x7}, {0x0, 0x1, 0xfffffffffffffffb}]}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_open_dev$media(&(0x7f0000000180), 0x409, 0x4b8200)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080))
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone3(&(0x7f0000019280)={0x40000000, &(0x7f0000019080), &(0x7f00000190c0)=<r3=>0x0, &(0x7f0000019100)=<r4=>0x0, {0x3e}, &(0x7f0000019140)=""/95, 0x5f, &(0x7f00000191c0)=""/81, &(0x7f0000019240)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58)
sched_setaffinity(r3, 0x8, &(0x7f0000019300)=0x1)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2002, 0x0)
sendfile(r6, r6, &(0x7f00000001c0)=0x9, 0x3) (async)
sendfile(r6, r6, &(0x7f00000001c0)=0x9, 0x3)
read$FUSE(r6, &(0x7f00000028c0)={0x2020}, 0x2020)
syz_open_procfs(r4, 0x0) (async)
syz_open_procfs(r4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.879293442s ago: executing program 1 (id=571):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_usbip_server_init(0x5)
write$usbip_server(r0, &(0x7f0000000040)=@ret_unlink={{0x4, 0x3, 0x0, 0x1, 0xffffffff}, {0x7}}, 0x30)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @remote}], 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000001900000000080004004400000008001b0000000000"], 0x30}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r6, &(0x7f0000000000)='7', 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x8, 0x3, 0x4, 0x7ffc0001}, {0x8, 0x8, 0x8, 0x8}]})
bind$inet(r2, 0x0, 0x0)
r7 = socket(0x25, 0x2, 0x1)
bind$unix(r7, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r8, r8, 0x0, 0x8)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0xc008004)

1.52622353s ago: executing program 6 (id=572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0xffffffff, 0x0)
ppoll(&(0x7f0000000100)=[{r1, 0xb208}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xf8)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delqdisc={0xf8, 0x25, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x8, 0xd}, {0x8003, 0x2}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc878}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x67}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3b}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44014}, 0x8081)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
accept4$alg(r2, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[], 0x54}}, 0x0)

1.51073255s ago: executing program 1 (id=573):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

450.041045ms ago: executing program 6 (id=574):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='map_files\x00')
lseek(r0, 0x76f, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14)
shutdown(r1, 0x1)
getdents64(r0, 0x0, 0x0)

189.902881ms ago: executing program 1 (id=575):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async, rerun: 32)
write(r1, &(0x7f0000000000)="010000000000000020", 0x9) (rerun: 32)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x12, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x0)

0s ago: executing program 6 (id=576):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}}, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
preadv2(r2, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0)
syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa0904"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ookup blockdev
[   41.473697][ T5817] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   41.484783][ T5752] Bluetooth: hci0: command tx timeout
[   41.485091][ T5752] Bluetooth: hci2: command tx timeout
[   41.485107][ T5752] Bluetooth: hci3: command tx timeout
[   41.485118][ T5752] Bluetooth: hci1: command tx timeout
[   41.655487][ T5817] usb 7-1: not running at top speed; connect to a high speed hub
[   41.655506][ T5817] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   41.656512][ T5817] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   41.658461][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.658474][ T5817] usb 7-1: Product: syz
[   41.658481][ T5817] usb 7-1: Manufacturer: syz
[   41.658488][ T5817] usb 7-1: SerialNumber: syz
[   41.737798][ T5817] oti6858 7-1:1.0: oti6858 converter detected
[   41.746314][ T5817] usb 7-1: oti6858 converter now attached to ttyUSB0
[   41.785625][ T5958] ip6gre1: entered promiscuous mode
[   41.785639][ T5958] ip6gre1: entered allmulticast mode
[   42.119348][ T5965] FAULT_INJECTION: forcing a failure.
[   42.119348][ T5965] name failslab, interval 1, probability 0, space 0, times 1
[   42.119369][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.3.17 Not tainted syzkaller #0 PREEMPT(full) 
[   42.119383][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   42.119389][ T5965] Call Trace:
[   42.119393][ T5965]  <TASK>
[   42.119397][ T5965]  dump_stack_lvl+0x100/0x190
[   42.119414][ T5965]  should_fail_ex.cold+0x5/0xa
[   42.119429][ T5965]  should_failslab+0xc2/0x120
[   42.119444][ T5965]  __kmalloc_noprof+0xfc/0x840
[   42.119456][ T5965]  ? sk_prot_alloc+0x10b/0x2a0
[   42.119476][ T5965]  sk_prot_alloc+0x10b/0x2a0
[   42.119493][ T5965]  sk_alloc+0x36/0xe80
[   42.119507][ T5965]  __netlink_create+0x5e/0x2c0
[   42.119524][ T5965]  ? __wake_up+0x3f/0x60
[   42.119537][ T5965]  netlink_create+0x29b/0x610
[   42.119548][ T5965]  ? __pfx_rtnetlink_bind+0x10/0x10
[   42.119562][ T5965]  __sock_create+0x339/0x860
[   42.119574][ T5965]  __sys_socket+0x14d/0x260
[   42.119585][ T5965]  ? xfd_validate_state+0x129/0x190
[   42.119600][ T5965]  ? __pfx___sys_socket+0x10/0x10
[   42.119615][ T5965]  __ia32_sys_socket+0x72/0xb0
[   42.119626][ T5965]  ? lockdep_hardirqs_on+0x7d/0x110
[   42.119642][ T5965]  __do_fast_syscall_32+0x13a/0x8b0
[   42.119660][ T5965]  do_fast_syscall_32+0x32/0x70
[   42.119677][ T5965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   42.119690][ T5965] RIP: 0023:0xf6fdefec
[   42.119703][ T5965] Code: Unable to access opcode bytes at 0xf6fdefc2.
[   42.119707][ T5965] RSP: 002b:00000000f53ac50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[   42.119718][ T5965] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000003
[   42.119724][ T5965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   42.119730][ T5965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   42.119736][ T5965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   42.119742][ T5965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   42.119754][ T5965]  </TASK>
[   42.120003][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'.
[   42.747244][ T5985] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   42.749205][ T5985] netlink: 'syz.0.23': attribute type 7 has an invalid length.
[   43.211880][ T6003] capability: warning: `syz.1.27' uses 32-bit capabilities (legacy support in use)
[   43.564587][ T5752] Bluetooth: hci3: command tx timeout
[   43.564609][ T5752] Bluetooth: hci2: command tx timeout
[   43.564621][ T5752] Bluetooth: hci0: command tx timeout
[   43.564692][ T5098] Bluetooth: hci1: command tx timeout
[   43.574426][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574448][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574460][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574472][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574485][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574497][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574509][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574521][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574533][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.574545][ T6014] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[   43.687464][ T6019] Zero length message leads to an empty skb
[   43.730581][    T9] usb 7-1: USB disconnect, device number 2
[   43.747970][    T9] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   43.748411][    T9] oti6858 7-1:1.0: device disconnected
[   43.859678][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'.
[   43.962241][ T6043] overlayfs: unescaped trailing colons in lowerdir mount option.
[   43.963745][ T6043] geneve1: invalid flags given to default FDB implementation
[   44.219260][ T6067] can0: slcan on ptm0.
[   44.304919][ T6066] can0 (unregistered): slcan off ptm0.
[   44.642767][   T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   44.794940][   T30] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   44.796867][   T30] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   44.796913][   T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   44.796954][   T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[   44.797029][   T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   44.800243][   T30] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   44.800288][   T30] usb 8-1: Product: syz
[   44.800328][   T30] usb 8-1: Manufacturer: syz
[   44.825165][   T30] cdc_wdm 8-1:1.0: skipping garbage
[   44.825215][   T30] cdc_wdm 8-1:1.0: skipping garbage
[   44.837082][   T30] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[   44.837128][   T30] cdc_wdm 8-1:1.0: Unknown control protocol
[   44.973016][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   45.037869][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.038197][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   45.123356][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[   45.124133][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   45.124155][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   45.126106][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   45.126118][    T9] usb 5-1: Product: syz
[   45.126125][    T9] usb 5-1: Manufacturer: syz
[   45.126132][    T9] usb 5-1: SerialNumber: syz
[   45.158157][   T42] usb 8-1: USB disconnect, device number 2
[   45.405815][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   45.598777][ T6123] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   45.653563][ T5752] Bluetooth: hci3: command tx timeout
[   45.653812][ T5742] Bluetooth: hci2: command tx timeout
[   45.655155][ T5098] Bluetooth: hci1: command tx timeout
[   45.673826][ T1164] IPVS: starting estimator thread 0...
[   45.674073][ T6124] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20001
[   45.732124][ T6127] bond1 (unregistering): Released all slaves
[   45.762720][ T6125] IPVS: using max 44 ests per chain, 105600 per kthread
[   45.962538][ T6136] netlink: 'syz.1.51': attribute type 10 has an invalid length.
[   46.080210][ T6136] team0 (unregistering): Port device team_slave_0 removed
[   46.165817][ T6136] team0 (unregistering): Port device team_slave_1 removed
[   46.380121][ T6143] 9pnet_fd: Insufficient options for proto=fd
[   46.446867][ T6136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'.
[   46.917133][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'.
[   46.917148][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'.
[   46.920185][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.935934][ T6167] bridge_slave_1 (unregistering): left allmulticast mode
[   46.935950][ T6167] bridge_slave_1 (unregistering): left promiscuous mode
[   46.936009][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.283096][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   47.562719][ T6102] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   48.004721][ T6229] tipc: Started in network mode
[   48.004738][ T6229] tipc: Node identity 0010000000000000002, cluster identity 1
[   48.093105][ T6233] xt_CT: No such helper "pptp"
[   48.149864][ T6235] gre1: entered promiscuous mode
[   48.454932][ T6239] process 'syz.3.73' launched './file2' with NULL argv: empty string added
[   48.555594][ T6248] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.560153][   T43] audit: type=1326 audit(1789902971.175:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.3.76" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0xffff0000
[   48.648354][ T6253] loop6: detected capacity change from 0 to 2640
[   48.651352][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651389][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651415][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651438][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651462][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651499][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651534][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651558][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651571][ T6253] ldm_validate_partition_table(): Disk read failed.
[   48.651593][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651617][ T6253] Buffer I/O error on dev loop6, logical block 0, async page read
[   48.651653][ T6253] Dev loop6: unable to read RDB block 0
[   48.651801][ T6253]  loop6: unable to read partition table
[   48.651961][ T6253] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[   48.713553][ T5830] usb 5-1: USB disconnect, device number 2
[   48.992028][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   48.992043][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   49.167017][   T43] audit: type=1326 audit(1789902971.785:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167064][   T43] audit: type=1326 audit(1789902971.785:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167432][   T43] audit: type=1326 audit(1789902971.785:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71e75ab code=0x7ffc0000
[   49.167549][   T43] audit: type=1326 audit(1789902971.785:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167622][   T43] audit: type=1326 audit(1789902971.785:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167842][   T43] audit: type=1326 audit(1789902971.785:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167913][   T43] audit: type=1326 audit(1789902971.785:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.167998][   T43] audit: type=1326 audit(1789902971.785:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.168169][   T43] audit: type=1326 audit(1789902971.785:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.2.79" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aefec code=0x7ffc0000
[   49.169665][ T6275] IPVS: ip_vs_add_dest(): server weight less than zero
[   49.175620][ T6209] IPVS: starting estimator thread 0...
[   49.272800][ T6276] IPVS: using max 43 ests per chain, 103200 per kthread
[   49.310616][ T6287] binder: 6283:6287 ioctl 8953 80000600 returned -22
[   49.380495][ T6289] CUSE: unknown device info ""
[   49.380505][ T6289] CUSE: unknown device info "�"
[   49.380509][ T6289] CUSE: unknown device info ""
[   49.380512][ T6289] CUSE: unknown device info ""
[   49.380516][ T6289] CUSE: unknown device info ""
[   49.380519][ T6289] CUSE: unknown device info ""
[   49.380523][ T6289] CUSE: unknown device info "����"
[   49.380527][ T6289] CUSE: unknown device info ""
[   49.380531][ T6289] CUSE: unknown device info ""
[   49.380534][ T6289] CUSE: unknown device info ""
[   49.380538][ T6289] CUSE: unknown device info ""
[   49.380542][ T6289] CUSE: unknown device info "r"
[   49.380546][ T6289] CUSE: unknown device info "��������#�"
[   49.380550][ T6289] CUSE: unknown device info "����"
[   49.380555][ T6289] CUSE: unknown device info ""
[   49.380559][ T6289] CUSE: unknown device info "�"
[   49.380564][ T6289] CUSE: DEVNAME unspecified
[   49.569386][ T6299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.90'.
[   49.587821][ T6299] sch_tbf: peakrate 3 is lower than or equals to rate 6 !
[   49.623596][ T5098] Bluetooth: hci2: hcon ffff888024f8c000 sent 1 < count 1025
[   49.626391][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'.
[   49.635209][ T6302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.91'.
[   49.643066][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'.
[   49.946932][ T6313] 9p: Bad value for 'rfdno'
[   50.723733][ T1172] IPVS: starting estimator thread 0...
[   50.812879][ T6356] IPVS: using max 43 ests per chain, 103200 per kthread
[   50.882967][ T6359] binder: 6357:6359 ioctl 8914 80000040 returned -22
[   51.153024][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   51.844952][ T6383] NILFS (nbd1): device size too small
[   52.094126][ T6390] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   52.196032][ T6390] bond1 (unregistering): Released all slaves
[   52.226515][ T6402] syz.3.111 uses obsolete (PF_INET,SOCK_PACKET)
[   52.615568][ T6419] capability: warning: `syz.3.119' uses deprecated v2 capabilities in a way that may be insecure
[   52.683300][ T6352] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   52.753011][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   52.983068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.113032][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.193004][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.343026][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.363003][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.377097][ T6448] Sensor A: =================  START STATUS  =================
[   53.377107][ T6448] Sensor A: Test Pattern: 75% Colorbar
[   53.377119][ T6448] Sensor A: Show Information: All
[   53.377129][ T6448] Sensor A: Vertical Flip: false
[   53.377138][ T6448] Sensor A: Horizontal Flip: false
[   53.377148][ T6448] Sensor A: Brightness: 128
[   53.377157][ T6448] Sensor A: Contrast: 128
[   53.377894][ T6448] Sensor A: Hue: 0
[   53.377907][ T6448] Sensor A: Saturation: 128
[   53.377918][ T6448] Sensor A: Pixel Rate: 160000000
[   53.377928][ T6448] Sensor A: Horizontal Blanking: 800
[   53.377938][ T6448] Sensor A: Vertical Blanking: 3223
[   53.377948][ T6448] Sensor A: ==================  END STATUS  ==================
[   53.423007][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.433866][   T57] e1000 0000:00:06.0 eth0: Reset adapter
[   53.493015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.553760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   53.600795][ T6438] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames
[   53.608912][ T6457] binder: 6456:6457 ioctl c0306201 80004a40 returned -22
[   54.075569][ T5891] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
[   54.156846][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'.
[   54.214197][   T57] e1000 0000:00:06.0 eth0: Reset adapter
[   54.743243][   T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
[   54.824297][ T6484] /dev/sr0: Can't open blockdev
[   65.725593][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[   65.725641][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[   67.027556][ T6526] netlink: 'syz.1.132': attribute type 1 has an invalid length.
[   67.131585][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.132'.
[   67.149821][ T6527] 8021q: adding VLAN 0 to HW filter on device bond2
[   67.154470][ T6527] bond1: (slave bond2): making interface the new active one
[   67.157529][ T6527] bond1: (slave bond2): Enslaving as an active interface with an up link
[   67.192618][ T6540] bond1: entered promiscuous mode
[   67.193926][ T6540] bond2: entered promiscuous mode
[   67.195131][ T6540] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.345836][ T6538] event trace: Could not enable event p1
[   67.548753][ T6561] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   67.818144][ T6580] =======================================================
[   67.818144][ T6580] WARNING: The mand mount option has been deprecated and
[   67.818144][ T6580]          and is ignored by this kernel. Remove the mand
[   67.818144][ T6580]          option from the mount to silence this warning.
[   67.818144][ T6580] =======================================================
[   67.923011][ T6587] jffs2: notice: (6587) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   68.132757][ T6599] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[   68.229371][ T6605] Need at least one configuration in g1.
[   68.229505][ T6605] udc dummy_udc.0: failed to start g1: -22
[   68.229516][ T6605] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[   68.233178][ T6605] UDC core: g1: couldn't find an available UDC or it's busy
[   69.167940][   T43] kauditd_printk_skb: 48 callbacks suppressed
[   69.167957][   T43] audit: type=1400 audit(1789902991.785:60): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=6617 comm="syz.1.153" name="p" offset=33
[   69.231578][   T43] audit: type=1326 audit(1789902991.845:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6620 comm="syz.1.154" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7dff0000
[   69.643468][ T6624] i2c i2c-1: dtv_property_process_set: SET cmd 0x7665642f undefined
[   69.905859][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'.
[   70.633739][ T6653] hid-generic 0003:0627:0001.0001: pid 6653 passed too large report
[   70.755736][ T6667] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[   70.766223][ T6667] binder: 6666:6667 ioctl c0306201 80000040 returned -14
[   70.766368][ T6667] binder: 6666:6667 ioctl c0306201 80000640 returned -22
[   70.854576][ T1040] cfg80211: failed to load regulatory.db
[   71.002807][   T42] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   71.039149][ T6672] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   71.039181][ T6672] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   71.156708][   T42] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   71.161415][   T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.161671][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.292249][   T42] usb 5-1: config 0 descriptor??
[   72.093791][   T42] ath6kl: Failed to submit usb control message: -71
[   72.093817][   T42] ath6kl: unable to send the bmi data to the device: -71
[   72.093824][   T42] ath6kl: Unable to send get target info: -71
[   72.109775][   T42] ath6kl: Failed to init ath6kl core: -71
[   72.119998][   T42] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[   72.127567][   T42] usb 5-1: USB disconnect, device number 3
[   72.230746][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'.
[   72.230759][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'.
[   72.230772][ T6678] netlink: 'syz.3.166': attribute type 13 has an invalid length.
[   72.230778][ T6678] netlink: 'syz.3.166': attribute type 14 has an invalid length.
[   73.008656][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.1.182'.
[   73.018203][ T6739] jffs2: notice: (6739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   73.594135][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   73.594151][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'.
[   73.594164][ T6753] netlink: 'syz.0.185': attribute type 13 has an invalid length.
[   73.594171][ T6753] netlink: 'syz.0.185': attribute type 14 has an invalid length.
[   74.513781][ T6783] mmap: syz.2.192 (6783) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   74.615055][ T6788] jffs2: notice: (6788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   74.641030][ T6788] jffs2: error: (6788) jffs2_do_read_inode: requested to read a nonexistent ino 2147484930
[   74.641344][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'.
[   74.685159][ T6787] lo speed is unknown, defaulting to 1000
[   74.685203][ T6787] lo speed is unknown, defaulting to 1000
[   74.688246][ T6787] lo speed is unknown, defaulting to 1000
[   74.688975][ T6787] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   74.688994][ T6787] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   74.689017][ T6787] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   74.696291][ T6787] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.713399][ T6787] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   74.761703][ T6787] lo speed is unknown, defaulting to 1000
[   74.765329][ T6787] lo speed is unknown, defaulting to 1000
[   74.766068][ T6787] lo speed is unknown, defaulting to 1000
[   74.767096][ T6787] lo speed is unknown, defaulting to 1000
[   74.909476][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[   74.909490][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[   74.909503][ T6801] netlink: 'syz.1.195': attribute type 13 has an invalid length.
[   74.909510][ T6801] netlink: 'syz.1.195': attribute type 14 has an invalid length.
[   75.518938][ T6834] fuse: Unknown parameter 'Td'
[   75.519080][ T6834] fuse: Unknown parameter 'Td'
[   75.519194][ T6834] fuse: Unknown parameter 'Td'
[   75.519493][ T6834] fuse: Unknown parameter 'Td'
[   75.519598][ T6834] fuse: Unknown parameter 'Td'
[   75.519700][ T6834] fuse: Unknown parameter 'Td'
[   75.519815][ T6834] fuse: Unknown parameter 'Td'
[   75.519916][ T6834] fuse: Unknown parameter 'Td'
[   75.520019][ T6834] fuse: Unknown parameter 'Td'
[   75.520120][ T6834] fuse: Unknown parameter 'Td'
[   75.520425][ T6834] fuse: Unknown parameter 'Td'
[   75.520528][ T6834] fuse: Unknown parameter 'Td'
[   75.520632][ T6834] fuse: Unknown parameter 'Td'
[   75.520734][ T6834] fuse: Unknown parameter 'Td'
[   75.520836][ T6834] fuse: Unknown parameter 'Td'
[   75.520938][ T6834] fuse: Unknown parameter 'Td'
[   75.521046][ T6834] fuse: Unknown parameter 'Td'
[   75.521147][ T6834] fuse: Unknown parameter 'Td'
[   75.521250][ T6834] fuse: Unknown parameter 'Td'
[   75.521357][ T6834] fuse: Unknown parameter 'Td'
[   75.522146][ T6834] fuse: Unknown parameter 'Td'
[   75.522266][ T6834] fuse: Unknown parameter 'Td'
[   75.522379][ T6834] fuse: Unknown parameter 'Td'
[   75.522483][ T6834] fuse: Unknown parameter 'Td'
[   75.522590][ T6834] fuse: Unknown parameter 'Td'
[   75.523474][ T6834] fuse: Unknown parameter 'IPVS'
[   75.523578][ T6834] fuse: Unknown parameter 'IPVS'
[   75.523676][ T6834] fuse: Unknown parameter 'IPVS'
[   75.523779][ T6834] fuse: Unknown parameter 'IPVS'
[   75.523912][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524008][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524107][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524205][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524308][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524404][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524503][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524606][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524706][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524802][ T6834] fuse: Unknown parameter 'IPVS'
[   75.524936][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525035][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525132][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525426][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525623][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525824][ T6834] fuse: Unknown parameter 'IPVS'
[   75.525935][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526051][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526154][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526250][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526410][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526510][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526608][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526708][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526807][ T6834] fuse: Unknown parameter 'IPVS'
[   75.526904][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527003][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527131][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527231][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527332][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527461][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527563][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527721][ T6834] fuse: Unknown parameter 'IPVS'
[   75.527888][ T6834] fuse: Unknown parameter 'IPVS'
[   75.528038][ T6834] fuse: Unknown parameter 'IPVS'
[   75.528138][ T6834] fuse: Unknown parameter 'IPVS'
[   75.584129][   T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   75.733501][   T42] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[   75.733967][   T42] usb 6-1: config 0 has no interfaces?
[   75.733983][   T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.736869][   T42] usb 6-1: config 0 descriptor??
[   75.945552][   T42] usb 6-1: USB disconnect, device number 2
[   75.956372][ T6817] syzkaller0: entered promiscuous mode
[   75.956385][ T6817] syzkaller0: entered allmulticast mode
[   77.317890][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.208'.
[   77.403653][ T6859] team0: Device ipip0 is up. Set it down before adding it as a team port
[   77.514333][ T6862] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   79.738916][ T6928] lo speed is unknown, defaulting to 1000
[   79.821333][ T1172] IPVS: starting estimator thread 0...
[   79.835735][ T6936] xt_hl: Unknown Hop Limit match mode: 230
[   79.902715][ T6933] IPVS: using max 43 ests per chain, 103200 per kthread
[   80.465367][ T1353] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   80.612756][ T1353] usb 8-1: Using ep0 maxpacket: 8
[   80.615063][ T1353] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   80.616193][ T1353] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[   80.616212][ T1353] usb 8-1: config 0 has no interface number 0
[   80.616242][ T1353] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   80.616274][ T1353] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.620249][ T1353] usb 8-1: config 0 descriptor??
[   80.626694][ T1353] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   80.833924][ T1353] usb 8-1: USB disconnect, device number 3
[   80.956957][ T6965] FAULT_INJECTION: forcing a failure.
[   80.956957][ T6965] name failslab, interval 1, probability 0, space 0, times 0
[   80.956976][ T6965] CPU: 3 UID: 0 PID: 6965 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) 
[   80.956989][ T6965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   80.956995][ T6965] Call Trace:
[   80.956999][ T6965]  <TASK>
[   80.957004][ T6965]  dump_stack_lvl+0x100/0x190
[   80.957023][ T6965]  should_fail_ex.cold+0x5/0xa
[   80.957039][ T6965]  should_failslab+0xc2/0x120
[   80.957054][ T6965]  __kmalloc_cache_node_noprof+0x94/0x720
[   80.957069][ T6965]  ? __alloc_workqueue+0x1211/0x1950
[   80.957083][ T6965]  __alloc_workqueue+0x1211/0x1950
[   80.957097][ T6965]  alloc_workqueue_noprof+0xc7/0x130
[   80.957107][ T6965]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[   80.957121][ T6965]  ? __pfx___debug_object_init+0x10/0x10
[   80.957140][ T6965]  nci_register_device+0x21e/0xb80
[   80.957155][ T6965]  ? __pfx_nci_register_device+0x10/0x10
[   80.957172][ T6965]  ? lockdep_init_map_type+0x5c/0x250
[   80.957190][ T6965]  virtual_ncidev_open+0x141/0x220
[   80.957207][ T6965]  ? __pfx_virtual_ncidev_open+0x10/0x10
[   80.957223][ T6965]  misc_open+0x26d/0x450
[   80.957236][ T6965]  ? __pfx_misc_open+0x10/0x10
[   80.957247][ T6965]  chrdev_open+0x234/0x6a0
[   80.957261][ T6965]  ? __pfx_chrdev_open+0x10/0x10
[   80.957274][ T6965]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[   80.957292][ T6965]  do_dentry_open+0x6ab/0x14d0
[   80.957304][ T6965]  ? __pfx_chrdev_open+0x10/0x10
[   80.957320][ T6965]  vfs_open+0x82/0x3f0
[   80.957336][ T6965]  path_openat+0x19fa/0x2440
[   80.957351][ T6965]  ? __pfx_path_openat+0x10/0x10
[   80.957367][ T6965]  do_file_open+0x20e/0x430
[   80.957381][ T6965]  ? __pfx_do_file_open+0x10/0x10
[   80.957423][ T6965]  ? _raw_spin_unlock+0x28/0x50
[   80.957438][ T6965]  ? alloc_fd+0x471/0x7a0
[   80.957455][ T6965]  do_sys_openat2+0x10f/0x1e0
[   80.957472][ T6965]  ? __pfx_do_sys_openat2+0x10/0x10
[   80.957493][ T6965]  __ia32_compat_sys_openat+0x12d/0x210
[   80.957510][ T6965]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[   80.957533][ T6965]  __do_fast_syscall_32+0x13a/0x8b0
[   80.957552][ T6965]  do_fast_syscall_32+0x32/0x70
[   80.957569][ T6965]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   80.957583][ T6965] RIP: 0023:0xf6fdefec
[   80.957595][ T6965] Code: Unable to access opcode bytes at 0xf6fdefc2.
[   80.957600][ T6965] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127
[   80.957611][ T6965] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080
[   80.957618][ T6965] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[   80.957624][ T6965] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   80.957630][ T6965] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   80.957636][ T6965] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   80.957654][ T6965]  </TASK>
[   81.086869][ T6968] lo speed is unknown, defaulting to 1000
[   81.976019][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'.
[   81.977185][ T7000] Invalid ELF header magic: != ELF
[   82.280105][ T7038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'.
[   82.316093][ T7042] netlink: 48 bytes leftover after parsing attributes in process `syz.2.241'.
[   83.380252][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   83.380266][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[   83.579081][ T7078] Cannot find set identified by id 0 to match
[   83.708045][ T7089] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[   83.728335][ T7089] binder: 7088:7089 ioctl c0306201 80000040 returned -14
[   83.728705][ T7089] binder: 7088:7089 ioctl c0306201 80000640 returned -22
[   83.962828][   T57] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   84.012788][ T5844] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   84.113193][   T57] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   84.113976][   T57] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   84.114017][   T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.115152][   T57] usb 6-1: config 0 descriptor??
[   84.164853][ T5844] usb 7-1: Using ep0 maxpacket: 32
[   84.172077][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.173455][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.185261][ T5844] usb 7-1: unable to get BOS descriptor or descriptor too short
[   84.185298][ T5844] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   84.186109][ T5844] usb 7-1: unable to read config index 0 descriptor/start: -71
[   84.186135][ T5844] usb 7-1: can't read configurations, error -71
[   84.207317][ T7094] random: crng reseeded on system resumption
[   84.299774][ T7096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.330913][   T57] ath6kl: Failed to submit usb control message: -71
[   84.330935][   T57] ath6kl: unable to send the bmi data to the device: -71
[   84.330942][   T57] ath6kl: Unable to send get target info: -71
[   84.337302][   T57] ath6kl: Failed to init ath6kl core: -71
[   84.337529][   T57] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71
[   84.355353][   T57] usb 6-1: USB disconnect, device number 3
[   84.374231][ T7096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.455371][ T7096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.515735][ T7096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   84.612762][ T5611] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.612801][ T5611] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.612829][ T5611] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.623068][ T5611] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.735484][ T7099] fuse: Unknown parameter 'fscontext'
[   84.980626][ T7104] overlayfs: failed to resolve './bus': -2
[   85.373284][ T7111] input: syz0 as /devices/virtual/input/input6
[   85.811536][ T7115] ref_ctr increment failed for inode: 0x1f5 offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff88801c0cf2c0
[   85.852781][ T5846] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   86.003389][ T5846] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   86.004619][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.004635][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.004646][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   86.004665][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.005841][ T5846] usb 7-1: config 0 descriptor??
[   86.224354][ T7126] F2FS-fs: Conflicting test_dummy_encryption options
[   86.229471][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'.
[   86.235587][ T7126] netlink: 'syz.3.272': attribute type 4 has an invalid length.
[   86.255690][ T5846] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   86.544363][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[   87.643255][    T9] usb 7-1: reset high-speed USB device number 5 using dummy_hcd
[   88.972782][ T5844] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   88.989931][ T7140] random: crng reseeded on system resumption
[   89.019458][ T7140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.116076][ T7143] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[   89.119223][ T7140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.126551][ T5844] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   89.127701][ T5844] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   89.127715][ T5844] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   89.131406][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.131419][ T5844] usb 8-1: Product: syz
[   89.131426][ T5844] usb 8-1: Manufacturer: syz
[   89.131434][ T5844] usb 8-1: SerialNumber: syz
[   89.144946][ T7143] binder: 7142:7143 ioctl c0306201 80000040 returned -14
[   89.145400][ T7143] binder: 7142:7143 ioctl c0306201 80000640 returned -22
[   89.196261][ T7140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.258857][ T7140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.347106][ T5844] usblp 8-1:1.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   89.372842][ T5816] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.386631][ T5816] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.386660][ T5816] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.386677][ T5816] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.468324][  T853] usb 7-1: USB disconnect, device number 5
[   89.570974][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.572161][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.572846][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.581754][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.582072][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.632778][  T853] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[   89.668540][   T25] usb 8-1: USB disconnect, device number 4
[   89.686831][   T25] usblp1: removed
[   89.750813][ T7158] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[   89.750838][ T7158] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[   89.777490][ T7148] lo speed is unknown, defaulting to 1000
[   89.783221][  T853] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   89.785380][  T853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.785402][  T853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.789525][  T853] usb 7-1: config 0 descriptor??
[   90.002722][ T5846] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   90.010431][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.010562][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.010623][ T7148] bridge_slave_0: entered allmulticast mode
[   90.011776][ T7148] bridge_slave_0: entered promiscuous mode
[   90.015805][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.015847][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.015906][ T7148] bridge_slave_1: entered allmulticast mode
[   90.016969][ T7148] bridge_slave_1: entered promiscuous mode
[   90.019454][  T853] ath6kl: Failed to submit usb control message: -71
[   90.019475][  T853] ath6kl: unable to send the bmi data to the device: -71
[   90.019482][  T853] ath6kl: Unable to send get target info: -71
[   90.022112][  T853] ath6kl: Failed to init ath6kl core: -71
[   90.022343][  T853] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[   90.024816][  T853] usb 7-1: USB disconnect, device number 6
[   90.079855][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.081301][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.139988][ T7148] team0: Port device team_slave_0 added
[   90.154686][ T7148] team0: Port device team_slave_1 added
[   90.182776][ T5846] usb 6-1: Using ep0 maxpacket: 8
[   90.183241][ T5846] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   90.184780][ T5846] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[   90.184804][ T5846] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   90.184815][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   90.184826][ T5846] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   90.184838][ T5846] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.184856][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.210629][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.210640][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.210652][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.223672][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.223682][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.223695][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.237411][ T7172] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   90.237434][ T7172] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   90.240062][ T7172] vhci_hcd vhci_hcd.0: Device attached
[   90.271969][ T7173] vhci_hcd: connection closed
[   90.274458][ T5816] vhci_hcd vhci_hcd.3: stop threads
[   90.275117][ T5816] vhci_hcd vhci_hcd.3: release socket
[   90.275137][ T5816] vhci_hcd vhci_hcd.3: disconnect device
[   90.297181][ T7148] hsr_slave_0: entered promiscuous mode
[   90.297609][ T7148] hsr_slave_1: entered promiscuous mode
[   90.297903][ T7148] debugfs: 'hsr0' already exists in 'hsr'
[   90.297915][ T7148] Cannot create hsr debugfs directory
[   90.396406][ T5846] usb 6-1: usb_control_msg returned -32
[   90.396430][ T5846] usbtmc 6-1:16.0: can't read capabilities
[   90.572661][ T7148] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.592673][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   90.597336][ T7148] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.629096][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   90.631932][ T7148] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.657656][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   90.667124][ T7148] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.685955][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   90.733996][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.734087][ T7148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.734274][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.734361][ T7148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.752542][ T7183] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   90.752557][ T7183] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[   90.754907][ T7183] vhci_hcd vhci_hcd.0: Device attached
[   90.756855][ T7184] vhci_hcd: unknown pdu 2
[   90.762038][ T5611] vhci_hcd vhci_hcd.2: stop threads
[   90.762053][ T5611] vhci_hcd vhci_hcd.2: release socket
[   90.762063][ T5611] vhci_hcd vhci_hcd.2: disconnect device
[   90.764582][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.766366][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.798542][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.825392][ T7148] 8021q: adding VLAN 0 to HW filter on device team0
[   90.850262][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.850309][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.859663][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.859709][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.163480][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.299586][ T7148] veth0_vlan: entered promiscuous mode
[   91.302478][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.277'.
[   91.318984][ T7148] veth1_vlan: entered promiscuous mode
[   91.336222][ T7148] veth0_macvtap: entered promiscuous mode
[   91.339814][ T7148] veth1_macvtap: entered promiscuous mode
[   91.347039][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.350438][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.409474][ T6961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.409489][ T6961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.464333][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.464348][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.493431][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.493458][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.493476][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.493494][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.552965][   T25] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[   91.642878][ T5098] Bluetooth: hci4: command tx timeout
[   91.712740][   T25] usb 7-1: Using ep0 maxpacket: 32
[   91.713205][   T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[   91.716360][   T25] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[   91.716382][   T25] usb 7-1: config 0 has no interface number 0
[   91.716410][   T25] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[   91.716430][   T25] usb 7-1: config 0 interface 196 has no altsetting 0
[   91.718481][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.718499][   T25] usb 7-1: Product: syz
[   91.718510][   T25] usb 7-1: Manufacturer: syz
[   91.718522][   T25] usb 7-1: SerialNumber: syz
[   91.721426][   T25] usb 7-1: config 0 descriptor??
[   91.721901][ T7213] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   91.953087][ T7213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.953448][ T7213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.345877][   T25] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[   92.347907][   T25] ipheth 7-1:0.196: probe with driver ipheth failed with error -71
[   92.444721][ T7160] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   92.447992][   T25] usb 7-1: USB disconnect, device number 7
[   92.499926][   T57] usb 6-1: USB disconnect, device number 4
[   92.931920][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931933][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931938][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931943][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931948][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931953][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931957][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931962][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931967][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931972][ T7236] tc action pedit 'at' offset 5 out of bounds
[   92.931981][ T7236] 0: reclassify loop, rule prio 0, protocol 800
[   92.932194][ T7236] IPv6: Can't replace route, no match found
[   92.932313][ T7237] IPv6: Can't replace route, no match found
[   93.343871][ T7245] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input8
[   93.491740][   T43] audit: type=1326 audit(1789903015.097:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7260 comm="syz.2.290" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x0
[   93.527095][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'.
[   93.721804][ T7272] netlink: 'syz.1.292': attribute type 10 has an invalid length.
[   93.722829][ T5098] Bluetooth: hci4: command tx timeout
[   94.266702][ T7285] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15)
[   94.266718][ T7285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   94.268175][ T7285] vhci_hcd vhci_hcd.0: Device attached
[   94.382791][   T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   94.532747][   T57] usb 6-1: Using ep0 maxpacket: 32
[   94.533219][    T9] usb 44-1: SetAddress Request (2) to port 0
[   94.533230][   T57] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   94.533260][    T9] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd
[   94.534476][   T57] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[   94.534495][   T57] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   94.534511][   T57] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   94.534524][   T57] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   94.534536][   T57] usb 6-1: config 0 interface 0 has no altsetting 0
[   94.536548][   T57] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   94.536561][   T57] usb 6-1: Product: syz
[   94.536568][   T57] usb 6-1: Manufacturer: syz
[   94.536575][   T57] usb 6-1: SerialNumber: syz
[   94.538868][   T57] usb 6-1: config 0 descriptor??
[   94.579114][   T57] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   94.581546][   T57] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   94.645514][ T7296] netlink: 'syz.2.299': attribute type 1 has an invalid length.
[   94.669337][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.675383][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'.
[   94.690399][ T7296] bond1: (slave veth0_to_bond): making interface the new active one
[   94.698160][ T7296] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[   94.706484][ T7296] bond1: entered promiscuous mode
[   94.706497][ T7296] veth0_to_bond: entered promiscuous mode
[   94.706582][ T7296] bond1: entered allmulticast mode
[   94.706589][ T7296] veth0_to_bond: entered allmulticast mode
[   94.726054][ T7296] macvlan2: entered promiscuous mode
[   94.726066][ T7296] macvlan2: entered allmulticast mode
[   94.728280][ T7296] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   94.730077][ T7296] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[   94.748915][ T7283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.749408][ T7283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.804507][   T43] audit: type=1326 audit(1789903016.417:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.804668][   T43] audit: type=1326 audit(1789903016.417:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.805066][   T43] audit: type=1326 audit(1789903016.417:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.805232][   T43] audit: type=1326 audit(1789903016.417:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.805364][   T43] audit: type=1326 audit(1789903016.417:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.805562][   T43] audit: type=1326 audit(1789903016.417:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.809089][   T43] audit: type=1326 audit(1789903016.417:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707efec code=0x7ffc0000
[   94.809162][   T43] audit: type=1326 audit(1789903016.417:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf707f017 code=0x7ffc0000
[   94.809182][   T43] audit: type=1326 audit(1789903016.417:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf707efec code=0x7ffc0000
[   95.094337][ T7287] vhci_hcd: connection reset by peer
[   95.095776][   T12] vhci_hcd vhci_hcd.3: stop threads
[   95.095791][   T12] vhci_hcd vhci_hcd.3: release socket
[   95.096387][   T12] vhci_hcd vhci_hcd.3: disconnect device
[   95.690522][ T7313] netlink: 256 bytes leftover after parsing attributes in process `syz.2.303'.
[   95.802773][ T5098] Bluetooth: hci4: command tx timeout
[   95.924267][ T7322] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks
[   95.924283][ T7322] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   96.012749][   T25] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[   96.172849][   T25] usb 7-1: Using ep0 maxpacket: 8
[   96.173812][   T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   96.175537][   T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   96.175560][   T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   96.175578][   T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   96.175602][   T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.175632][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.385352][   T25] usb 7-1: GET_CAPABILITIES returned 0
[   96.385375][   T25] usbtmc 7-1:16.0: can't read capabilities
[   96.487045][ T7328] orangefs: client-core tried to read wrong size
[   97.892773][ T5098] Bluetooth: hci4: command tx timeout
[   98.388234][ T7356] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks
[   98.388249][ T7356] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted
[   98.784477][  T853] usb 7-1: USB disconnect, device number 8
[   99.581903][    T9] usb 44-1: device descriptor read/8, error -110
[   99.587230][ T7371] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[   99.599084][ T6189] rtrs_client L2018: <s+>: CM error (CM event: address error, err: -ENODEV)
[   99.600108][ T7371] rtrs_client L2636: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[   99.601078][ T7378] netlink: 96 bytes leftover after parsing attributes in process `syz.4.322'.
[   99.601089][ T7378] netlink: 96 bytes leftover after parsing attributes in process `syz.4.322'.
[   99.806812][ T7388] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0
[   99.813098][ T7283] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[   99.825675][   T57] usb 6-1: USB disconnect, device number 5
[   99.835077][   T57] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[   99.896169][ T7389] syzkaller1: entered promiscuous mode
[   99.896509][ T7389] syzkaller1: entered allmulticast mode
[   99.919334][ T7392] could not allocate digest TFM handle /dev/vsock
[   99.963796][    T9] usb usb44-port1: attempt power cycle
[  100.028944][ T7406] netlink: 104 bytes leftover after parsing attributes in process `syz.2.332'.
[  100.080138][ T7409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.081514][ T7409] openvswitch: netlink: IP tunnel dst address not specified
[  100.102697][   T25] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  100.168657][ T7414] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  100.170203][ T6204] rtrs_client L2018: <s+>: CM error (CM event: address error, err: -ENODEV)
[  100.188902][ T7414] rtrs_client L2636: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  100.262690][   T25] usb 8-1: device descriptor read/64, error -71
[  100.505294][   T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  100.524341][    T9] usb usb44-port1: unable to enumerate USB device
[  100.558831][   T43] kauditd_printk_skb: 455 callbacks suppressed
[  100.558843][   T43] audit: type=1326 audit(1789903021.170:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.4.336" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f74fec code=0x0
[  100.559271][ T7431] lo speed is unknown, defaulting to 1000
[  100.642811][   T25] usb 8-1: device descriptor read/64, error -71
[  100.754059][   T25] usb usb8-port1: attempt power cycle
[  100.895881][ T7451] kvm: apic: phys broadcast and lowest prio
[  100.897195][ T7451] overlayfs: fs on 'lower2' does not support file handles, falling back to index=off,nfs_export=off.
[  101.102675][   T25] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  101.134406][   T25] usb 8-1: device descriptor read/8, error -71
[  101.266045][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'.
[  101.297378][ T7458] fuse: Bad value for 'fd'
[  101.374255][   T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  101.395653][   T25] usb 8-1: device descriptor read/8, error -71
[  101.514545][   T25] usb usb8-port1: unable to enumerate USB device
[  101.921045][ T7472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  101.921061][ T7472] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  101.921118][ T7472] vhci_hcd vhci_hcd.0: Device attached
[  101.926748][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'.
[  102.204056][  T853] usb 46-1: SetAddress Request (2) to port 0
[  102.204090][  T853] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  102.566230][ T7473] vhci_hcd: connection reset by peer
[  102.566453][   T12] vhci_hcd vhci_hcd.4: stop threads
[  102.566468][   T12] vhci_hcd vhci_hcd.4: release socket
[  102.568832][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  102.586943][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'.
[  102.989411][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.350'.
[  103.200600][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'.
[  103.392544][ T7513] futex_wake_op: syz.3.354 tries to shift op by 144; fix this program
[  103.841438][ T7521] ip6t_rt: too many addresses specified
[  104.201436][ T7529] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  104.201453][ T7529] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  104.201492][ T7529] vhci_hcd vhci_hcd.0: Device attached
[  104.326168][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[  104.502717][ T5846] usb 42-1: SetAddress Request (2) to port 0
[  104.502752][ T5846] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  104.615718][ T7532] vhci_hcd: connection reset by peer
[  104.618801][   T12] vhci_hcd vhci_hcd.2: stop threads
[  104.618865][   T12] vhci_hcd vhci_hcd.2: release socket
[  104.619135][   T12] vhci_hcd vhci_hcd.2: disconnect device
[  104.868795][ T7539] jffs2: notice: (7539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  105.333369][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'.
[  105.434570][ T7549] netlink: 152 bytes leftover after parsing attributes in process `syz.1.361'.
[  105.516737][ T7560] futex_wake_op: syz.1.365 tries to shift op by 144; fix this program
[  105.543110][ T7559] syzkaller0: entered promiscuous mode
[  105.543124][ T7559] syzkaller0: entered allmulticast mode
[  105.545547][ T7559] netlink: 168 bytes leftover after parsing attributes in process `syz.3.366'.
[  106.159474][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'.
[  106.159494][ T7580] syz_tun: entered allmulticast mode
[  106.207200][ T7582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.213744][ T7582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.412420][   T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.474949][   T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.552373][   T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.610438][   T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.693595][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  106.783295][   T12] bridge_slave_1: left allmulticast mode
[  106.783324][   T12] bridge_slave_1: left promiscuous mode
[  106.785359][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.791545][   T12] bridge_slave_0: left allmulticast mode
[  106.791559][   T12] bridge_slave_0: left promiscuous mode
[  106.791655][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.960913][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.967476][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.970968][   T12] bond0 (unregistering): Released all slaves
[  106.991165][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.994320][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.995093][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  107.000937][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  107.001638][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  107.047675][   T12] IPVS: stopping master sync thread 7388 ...
[  107.185289][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'.
[  107.214305][ T5453] 8021q: adding VLAN 0 to HW filter on device eth2
[  107.215994][ T7607] [U] 
[  107.244537][  T853] usb 46-1: device descriptor read/8, error -110
[  107.290219][   T12] hsr_slave_0: left promiscuous mode
[  107.291724][   T12] hsr_slave_1: left promiscuous mode
[  107.292175][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.292192][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.303998][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.304011][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.336850][   T12] veth1_macvtap: left promiscuous mode
[  107.337497][   T12] veth0_macvtap: left promiscuous mode
[  107.338142][   T12] veth1_vlan: left promiscuous mode
[  107.338238][   T12] veth0_vlan: left promiscuous mode
[  107.542180][   T12] team0 (unregistering): Port device team_slave_1 removed
[  107.561279][   T12] team0 (unregistering): Port device team_slave_0 removed
[  107.566343][ T7625] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  107.642296][ T7595] lo speed is unknown, defaulting to 1000
[  107.644268][  T853] usb usb46-port1: attempt power cycle
[  107.663024][ T5891] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  107.824675][ T5453] 8021q: adding VLAN 0 to HW filter on device eth3
[  107.907467][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.907519][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.907576][ T7595] bridge_slave_0: entered allmulticast mode
[  107.908244][ T7595] bridge_slave_0: entered promiscuous mode
[  107.909371][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.909410][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.909462][ T7595] bridge_slave_1: entered allmulticast mode
[  107.928771][ T7595] bridge_slave_1: entered promiscuous mode
[  107.943802][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.945544][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.957495][ T7595] team0: Port device team_slave_0 added
[  107.958708][ T7595] team0: Port device team_slave_1 added
[  107.969663][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.969673][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.969685][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.970488][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.970495][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.970506][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.991379][ T7595] hsr_slave_0: entered promiscuous mode
[  107.991803][ T7595] hsr_slave_1: entered promiscuous mode
[  107.994224][ T7660] CacheFiles: No cache directory specified
[  108.019383][ T5453] 8021q: adding VLAN 0 to HW filter on device eth4
[  108.121149][ T5891] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  108.123222][ T5891] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.123257][ T5891] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  108.123275][ T5891] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  108.123303][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.156477][ T7595] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  108.158371][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.158898][ T7595] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  108.160663][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.161234][ T7595] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  108.164909][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  108.165291][ T7595] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.169637][ T7595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  108.204928][   T12] IPVS: stop unused estimator thread 0...
[  108.214500][  T853] usb usb46-port1: unable to enumerate USB device
[  108.226330][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.236242][ T7595] 8021q: adding VLAN 0 to HW filter on device team0
[  108.240363][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.240410][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.246962][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.247017][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.274306][ T7595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.285946][ T5453] 8021q: adding VLAN 0 to HW filter on device eth5
[  108.312859][ T5817] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  108.474957][ T5817] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  108.475819][ T5817] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  108.475835][ T5817] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  108.475853][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.479758][ T7663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  108.512253][ T5817] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  108.525963][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.551450][ T5891] cxacru 9-1:1.0: send of cm 0x91 failed (-71)
[  108.551616][ T5891] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  108.551623][ T5891] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  108.574221][ T5891] cxacru 9-1:1.0: probe with driver cxacru failed with error -71
[  108.584401][ T5891] usb 9-1: USB disconnect, device number 2
[  108.665505][ T7595] veth0_vlan: entered promiscuous mode
[  108.670459][ T7595] veth1_vlan: entered promiscuous mode
[  108.698228][ T7595] veth0_macvtap: entered promiscuous mode
[  108.701959][ T7595] veth1_macvtap: entered promiscuous mode
[  108.719599][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.725788][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.763512][ T5816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.763916][ T5816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.763947][ T5816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.763975][ T5816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.798048][ T6204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.798066][ T6204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.808675][ T7698] netlink: 128 bytes leftover after parsing attributes in process `syz.2.386'.
[  108.812155][ T6961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.812171][ T6961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.004576][ T7706] lo speed is unknown, defaulting to 1000
[  109.083159][ T5742] Bluetooth: hci0: command tx timeout
[  109.120715][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'.
[  109.199205][ T7711] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  109.200298][ T6189] rtrs_client L2018: <s+>: CM error (CM event: address error, err: -ENODEV)
[  109.200491][ T7711] rtrs_client L2636: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  109.266339][ T7717] Bluetooth: MGMT ver 1.23
[  109.309769][ T7716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.398510][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'.
[  109.412640][ T7723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'.
[  109.418157][ T7716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.484631][ T7716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.538084][ T7716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.562693][ T5846] usb 42-1: device descriptor read/8, error -110
[  109.662759][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.662784][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.672867][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.672889][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.954931][ T5846] usb usb42-port1: attempt power cycle
[  109.978668][ T7748] netlink: 68 bytes leftover after parsing attributes in process `syz.1.397'.
[  110.519153][ T5846] usb usb42-port1: unable to enumerate USB device
[  111.102114][ T5846] usb 7-1: USB disconnect, device number 9
[  111.163021][ T5098] Bluetooth: hci0: command tx timeout
[  111.325789][ T5742] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  111.353481][ T7799] fuse: Unknown parameter '��E�)P���FReS��_��N�ϖ1)k�'
[  111.567856][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.5.410'.
[  111.774199][ T5846] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  111.944717][ T5846] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[  111.946525][ T5846] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.946537][ T5846] usb 7-1: config 0 has no interfaces?
[  111.946551][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.949449][ T5846] usb 7-1: config 0 descriptor??
[  113.242826][ T5742] Bluetooth: hci0: command 0x040f tx timeout
[  113.249324][ T7821] netlink: 36 bytes leftover after parsing attributes in process `syz.4.413'.
[  113.536418][ T7833] overlayfs: failed to resolve '/��OeK�aW�@���K': -2
[  114.628700][ T7839] netlink: 'syz.4.417': attribute type 39 has an invalid length.
[  114.639674][ T7839] macvlan1: entered promiscuous mode
[  114.639689][ T7839] macvlan1: entered allmulticast mode
[  114.648673][ T7848] netlink: 'syz.4.417': attribute type 39 has an invalid length.
[  114.672131][   T57] usb 7-1: USB disconnect, device number 10
[  115.052052][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'.
[  115.168791][ T7860] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  115.168887][ T7860] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  115.208075][ T7860] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  115.215768][ T7860] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  115.216007][ T7860] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  115.227072][ T7860] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  115.229346][ T7860] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  115.229379][ T7860] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  115.235153][ T7860] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  115.238975][ T7860] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  115.239029][ T7860] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  115.251271][ T7860] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  115.261158][ T7860] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  115.261194][ T7860] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  115.275997][ T7860] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  115.312763][ T5817] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  115.462684][ T5817] usb 7-1: Using ep0 maxpacket: 8
[  115.463613][ T5817] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  115.464767][ T5817] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  115.464800][ T5817] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  115.464816][ T5817] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  115.464834][ T5817] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  115.464850][ T5817] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  115.464878][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.526242][ T7869] netlink: 'syz.4.422': attribute type 1 has an invalid length.
[  115.529706][ T7872] netlink: 'syz.5.420': attribute type 10 has an invalid length.
[  115.542171][ T7869] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.547794][ T7870] bond1: (slave geneve2): making interface the new active one
[  115.548576][ T7870] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  115.551617][ T7872] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  115.631889][ T7879] lo speed is unknown, defaulting to 1000
[  115.711907][ T5817] usb 7-1: usb_control_msg returned -32
[  115.711931][ T5817] usbtmc 7-1:16.0: can't read capabilities
[  115.808066][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  116.129573][   T57] kernel write not supported for file /sequencer2 (pid: 57 comm: kworker/2:1)
[  116.192537][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.428'.
[  117.048377][   T43] audit: type=1326 audit(1789903033.660:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.048538][   T43] audit: type=1326 audit(1789903033.660:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.048712][   T43] audit: type=1326 audit(1789903033.660:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=182 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.049634][   T43] audit: type=1326 audit(1789903033.660:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.050010][   T43] audit: type=1326 audit(1789903033.660:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.050204][   T43] audit: type=1326 audit(1789903033.660:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.050678][   T43] audit: type=1326 audit(1789903033.660:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.050860][   T43] audit: type=1326 audit(1789903033.660:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.051012][   T43] audit: type=1326 audit(1789903033.660:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.051207][   T43] audit: type=1326 audit(1789903033.660:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm=")-/" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  117.069911][ T7911] lo speed is unknown, defaulting to 1000
[  117.118428][ T7918] lo speed is unknown, defaulting to 1000
[  117.254955][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout
[  117.255126][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[  117.255154][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[  117.255181][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[  117.722706][ T7856] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  117.728530][    T9] usb 7-1: USB disconnect, device number 11
[  118.025155][ T7928] netlink: 'syz.4.433': attribute type 10 has an invalid length.
[  118.035819][ T7928] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  118.305321][ T7935] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  118.305516][ T7935] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  118.305622][ T7935] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  118.328242][ T7935] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  119.417452][ T7961] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  119.435811][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[  119.435824][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'.
[  120.270930][ T7989] syz_tun: entered allmulticast mode
[  120.353691][ T8005] netlink: 'syz.4.451': attribute type 1 has an invalid length.
[  120.353705][ T8005] netlink: 'syz.4.451': attribute type 3 has an invalid length.
[  120.353711][ T8005] netlink: 224 bytes leftover after parsing attributes in process `syz.4.451'.
[  120.363010][ T5742] Bluetooth: hci3: command 0x0c1a tx timeout
[  120.363045][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[  120.363065][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout
[  120.414988][ T8005] fsa4480 0-0042: error -ENODEV: FSA4480 not found
[  120.419540][ T8005] i2c i2c-0: new_device: Instantiated device fsa4480 at 0x42
[  121.360160][ T8040] bridge0: port 2(syz_tun) entered blocking state
[  121.360243][ T8040] bridge0: port 2(syz_tun) entered disabled state
[  121.360313][ T8040] syz_tun: entered allmulticast mode
[  121.361070][ T8040] syz_tun: entered promiscuous mode
[  121.361360][ T8040] bridge0: port 2(syz_tun) entered blocking state
[  121.361436][ T8040] bridge0: port 2(syz_tun) entered listening state
[  121.888609][ T8063] netlink: 152 bytes leftover after parsing attributes in process `syz.5.462'.
[  122.023653][ T8071] input: syz1 as /devices/virtual/input/input9
[  122.202798][ T5817] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  122.212710][ T7699] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  122.313697][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'.
[  122.352697][ T5817] usb 10-1: Using ep0 maxpacket: 8
[  122.353314][ T5817] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  122.354355][ T5817] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  122.354373][ T5817] usb 10-1: config 0 has no interface number 0
[  122.354400][ T5817] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  122.354417][ T5817] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  122.354435][ T5817] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  122.354454][ T5817] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  122.354485][ T5817] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.357770][ T5817] usb 10-1: config 0 descriptor??
[  122.363215][ T7699] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  122.363995][ T7699] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  122.364010][ T7699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  122.364022][ T7699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  122.365829][ T7699] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.365841][ T7699] usb 7-1: Product: syz
[  122.365848][ T7699] usb 7-1: Manufacturer: syz
[  122.365855][ T7699] usb 7-1: SerialNumber: syz
[  122.373289][ T7699] usb 7-1: config 0 descriptor??
[  122.376656][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  122.389491][ T5817] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  122.442743][ T7699] rc_core: IR keymap rc-streamzap not found
[  122.442754][ T7699] Registered IR keymap rc-empty
[  122.443994][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout
[  122.444023][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout
[  122.444044][ T5098] Bluetooth: hci2: command 0x0c1a tx timeout
[  122.444420][ T7699] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0
[  122.448111][ T7699] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input10
[  122.539094][ T8084] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  122.559145][ T8084] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  122.559608][ T8084] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff]
[  122.559945][ T8084] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  122.566016][ T8084] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  122.616690][ T8084] pci 0000:00:01.0: Adding to iommu group 1
[  122.635137][ T8085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.467'.
[  122.712958][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'.
[  122.837283][ T8084] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  122.837296][ T8084] pci 0000:00:01.0: vgaarb: bridge control possible
[  122.837304][ T8084] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  122.983593][ T8084] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  122.991859][ T8084] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  123.006471][ T8093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.006699][ T8093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.038907][ T3379] usb 10-1: USB disconnect, device number 2
[  123.041834][ T3379] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  123.147719][ T8084] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  123.269012][ T8084] [drm] Found bochs VGA, ID 0xb0c5.
[  123.269025][ T8084] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  123.374562][ T8084] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1
[  123.606012][ T8097] netlink: 'syz.5.473': attribute type 1 has an invalid length.
[  123.608315][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.473'.
[  123.626452][ T8097] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  123.651441][ T8097] ptrace attach of "/syz-executor exec"[8098] was attempted by "/syz-executor exec"[8097]
[  123.683061][ T8097] ptrace attach of "/syz-executor exec"[8098] was attempted by "/syz-executor exec"[8097]
[  123.745256][ T8084] Console: switching to colour frame buffer device 160x50
[  124.003557][ T8100] syz_tun (unregistering): left allmulticast mode
[  124.207214][ T8084] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device
[  124.259706][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.340754][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.406575][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.428591][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.431406][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.432423][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.435370][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.435876][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.723540][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.815451][ T8115] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  124.819261][   T43] kauditd_printk_skb: 327 callbacks suppressed
[  124.819271][   T43] audit: type=1326 audit(1789903041.430:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.822251][   T43] audit: type=1326 audit(1789903041.430:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.822277][   T43] audit: type=1326 audit(1789903041.430:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.822406][   T43] audit: type=1326 audit(1789903041.430:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.822781][   T43] audit: type=1326 audit(1789903041.430:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.822880][   T43] audit: type=1326 audit(1789903041.440:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.823050][   T43] audit: type=1326 audit(1789903041.440:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.823136][   T43] audit: type=1326 audit(1789903041.440:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.823498][   T43] audit: type=1326 audit(1789903041.440:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71b75ab code=0x7ffc0000
[  124.823640][   T43] audit: type=1326 audit(1789903041.440:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.1.477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707efec code=0x7ffc0000
[  124.877434][   T13] bridge_slave_1: left allmulticast mode
[  124.877451][   T13] bridge_slave_1: left promiscuous mode
[  124.877564][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.920685][   T13] bridge_slave_0: left allmulticast mode
[  124.920702][   T13] bridge_slave_0: left promiscuous mode
[  124.920811][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.054733][   T25] usb 7-1: USB disconnect, device number 12
[  125.180972][ T8129] netlink: 'syz.1.479': attribute type 10 has an invalid length.
[  125.251673][ T8130] program syz.1.479 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  125.480760][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.490118][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.497578][   T13] bond0 (unregistering): Released all slaves
[  125.533704][ T8138] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.447814][ T5098] Bluetooth: hci0: command tx timeout
[  126.594760][ T5453] 8021q: adding VLAN 0 to HW filter on device eth6
[  126.867331][ T8154] ������: renamed from vlan1 (while UP)
[  127.006040][ T8106] lo speed is unknown, defaulting to 1000
[  127.136335][ T8165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.485'.
[  127.163925][ T1439] ieee802154 phy0 wpan0: encryption failed: -22
[  127.163966][ T1439] ieee802154 phy1 wpan1: encryption failed: -22
[  127.204102][ T8165] overlayfs: missing 'lowerdir'
[  127.234606][   T13] hsr_slave_0: left promiscuous mode
[  127.241769][   T13] hsr_slave_1: left promiscuous mode
[  127.245733][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.246089][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.251005][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.251111][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.441422][   T13] veth1_macvtap: left promiscuous mode
[  127.442466][   T13] veth0_macvtap: left promiscuous mode
[  127.444525][   T13] veth1_vlan: left promiscuous mode
[  127.447472][   T13] veth0_vlan: left promiscuous mode
[  127.665594][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'.
[  128.290945][ T8201] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  128.297940][   T13] team0 (unregistering): Port device team_slave_1 removed
[  128.315066][   T13] team0 (unregistering): Port device team_slave_0 removed
[  128.315202][ T8201] netlink: 'syz.1.490': attribute type 8 has an invalid length.
[  128.377633][ T5453] 8021q: adding VLAN 0 to HW filter on device eth7
[  128.380326][ T8163] lo speed is unknown, defaulting to 1000
[  128.523252][ T5098] Bluetooth: hci0: command tx timeout
[  128.713568][ T5453] 8021q: adding VLAN 0 to HW filter on device eth8
[  128.775770][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.775843][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.775945][ T8106] bridge_slave_0: entered allmulticast mode
[  128.777197][ T8106] bridge_slave_0: entered promiscuous mode
[  128.782096][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.782168][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.782253][ T8106] bridge_slave_1: entered allmulticast mode
[  128.784735][ T8106] bridge_slave_1: entered promiscuous mode
[  128.808026][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.810349][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.831203][ T8106] team0: Port device team_slave_0 added
[  128.833574][ T8106] team0: Port device team_slave_1 added
[  128.949897][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.949909][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.949921][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.950738][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.950745][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.950758][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.972444][ T5453] 8021q: adding VLAN 0 to HW filter on device eth9
[  129.077453][ T8106] hsr_slave_0: entered promiscuous mode
[  129.079129][ T8106] hsr_slave_1: entered promiscuous mode
[  129.087496][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'.
[  129.173132][ T8235] lo speed is unknown, defaulting to 1000
[  129.201716][ T8237] siw: device registration error -23
[  129.552711][ T8106] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  129.564307][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  129.566741][ T8106] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  129.578358][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  129.580415][ T8256] CIFS: Attempting to mount //127.0.0.1/share
[  129.586364][ T8106] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  129.617954][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  129.621922][ T5453] veth0_vlan: left promiscuous mode
[  129.632979][ T8106] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  129.646204][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  129.646577][ T5817] veth0_vlan: entered promiscuous mode
[  129.650796][ T8252] lo speed is unknown, defaulting to 1000
[  129.826732][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.849832][ T8106] 8021q: adding VLAN 0 to HW filter on device team0
[  129.856624][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.856669][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.857532][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.857573][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.167985][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.323273][ T8106] veth0_vlan: entered promiscuous mode
[  130.326731][ T8106] veth1_vlan: entered promiscuous mode
[  130.344002][ T8256] CIFS: VFS: cifs_mount failed w/return code = -112
[  130.344207][ T8106] veth0_macvtap: entered promiscuous mode
[  130.346724][ T8106] veth1_macvtap: entered promiscuous mode
[  130.353269][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.356478][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.405020][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.405048][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.405065][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.405082][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.426886][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.426906][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.446405][ T6189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.446424][ T6189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.544907][ T8313] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  130.544931][ T8313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  130.544986][ T8313] vhci_hcd vhci_hcd.0: Device attached
[  130.549918][ T8314] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  130.550123][ T5611] vhci_hcd vhci_hcd.4: stop threads
[  130.550135][ T5611] vhci_hcd vhci_hcd.4: release socket
[  130.550145][ T5611] vhci_hcd vhci_hcd.4: disconnect device
[  130.576974][ T8313] bond0: no command found in slaves file - use +ifname or -ifname
[  130.612772][ T5742] Bluetooth: hci0: command tx timeout
[  130.647739][ T8321] gfs2: error -5 reading superblock
[  131.264112][   T25] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  131.392740][   T25] usb 6-1: device descriptor read/64, error -71
[  131.629823][ T8358] nvme_tcp: malformed address passed: 127.0.0.1:44.0
[  131.632764][   T25] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  131.773087][   T25] usb 6-1: device descriptor read/64, error -71
[  131.873404][   T43] kauditd_printk_skb: 3 callbacks suppressed
[  131.873416][   T43] audit: type=1326 audit(1789903048.490:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.873870][   T43] audit: type=1326 audit(1789903048.490:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877862][   T43] audit: type=1326 audit(1789903048.490:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877888][   T43] audit: type=1326 audit(1789903048.490:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=141 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877908][   T43] audit: type=1326 audit(1789903048.490:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877928][   T43] audit: type=1326 audit(1789903048.490:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877947][   T43] audit: type=1326 audit(1789903048.490:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877966][   T43] audit: type=1326 audit(1789903048.490:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.877984][   T43] audit: type=1326 audit(1789903048.490:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.878003][   T43] audit: type=1326 audit(1789903048.490:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.6.513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  131.885855][   T25] usb usb6-port1: attempt power cycle
[  131.895782][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'.
[  132.232849][   T25] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  132.242734][ T1040] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  132.253086][   T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  132.254382][   T25] usb 6-1: device descriptor read/8, error -71
[  132.382761][   T57] usb 7-1: device descriptor read/64, error -71
[  132.403173][ T1040] usb 9-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  132.404277][ T1040] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  132.404297][ T1040] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  132.405821][ T1040] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  132.405838][ T1040] usb 9-1: Product: syz
[  132.405850][ T1040] usb 9-1: Manufacturer: syz
[  132.413980][ T1040] iuu_phoenix 9-1:1.0: iuu_phoenix converter detected
[  132.423806][ T1040] usb 9-1: iuu_phoenix converter now attached to ttyUSB0
[  132.492746][   T25] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  132.513132][   T25] usb 6-1: device descriptor read/8, error -71
[  132.623325][   T57] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  132.623921][   T25] usb usb6-port1: unable to enumerate USB device
[  132.674771][ T8394] block device autoloading is deprecated and will be removed.
[  132.677791][ T8394] random: crng reseeded on system resumption
[  132.683029][ T5742] Bluetooth: hci0: command tx timeout
[  132.752704][   T57] usb 7-1: device descriptor read/64, error -71
[  132.862802][   T57] usb usb7-port1: attempt power cycle
[  133.021914][ T8399] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.112115][ T8400] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  133.112130][ T8400] CIFS mount error: No usable UNC path provided in device string!
[  133.112130][ T8400] 
[  133.112274][ T8400] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  133.114059][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.519'.
[  133.136093][ T8400] hsr_slave_1 (unregistering): left promiscuous mode
[  133.212775][   T57] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  133.236356][   T57] usb 7-1: device descriptor read/8, error -71
[  133.240157][ T5453] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  133.472715][   T57] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  133.493190][   T57] usb 7-1: device descriptor read/8, error -71
[  133.602931][   T57] usb usb7-port1: unable to enumerate USB device
[  134.035776][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'.
[  134.136164][ T8416] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  134.379431][ T8422] netlink: 'syz.1.524': attribute type 1 has an invalid length.
[  134.389368][ T8422] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.400048][ T8422] bond3: (slave geneve2): making interface the new active one
[  134.401378][ T8422] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  134.502324][ T8427] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  134.503348][   T74] rtrs_client L2018: <s+>: CM error (CM event: address error, err: -ENODEV)
[  134.509109][ T8427] rtrs_client L2636: <s+>: init_conns() failed: err=-EHOSTUNREACH path=<invalid address family>@ip:27.0.0.1 [:0]
[  135.029567][   T42] usb 9-1: USB disconnect, device number 3
[  135.050019][   T42] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  135.050502][   T42] iuu_phoenix 9-1:1.0: device disconnected
[  135.229378][ T8445] 9p: Bad value for 'rfdno'
[  135.236969][ T8445] netlink: 'syz.4.530': attribute type 4 has an invalid length.
[  135.236982][ T8445] netlink: 152 bytes leftover after parsing attributes in process `syz.4.530'.
[  135.260008][ T8445] .`: renamed from bond0 (while UP)
[  136.272243][ T8464] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  136.292714][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  136.445643][    T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  136.446686][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.446716][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  136.446731][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  136.446756][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.452533][ T8458] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  136.460272][    T9] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected
[  136.463240][    T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1
[  136.466217][    T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84
[  136.466283][    T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2
[  136.481467][    T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  136.503360][    T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88
[  136.503425][    T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6
[  136.508733][    T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  136.533524][ T3379] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  136.698211][ T3379] usb 6-1: not running at top speed; connect to a high speed hub
[  136.698242][ T3379] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0083, bcdDevice=59.8a
[  136.699664][ T3379] usb 6-1: config 242 has an invalid interface number: 212 but max is 2
[  136.699686][ T3379] usb 6-1: config 242 has an invalid interface number: 4 but max is 2
[  136.699702][ T3379] usb 6-1: config 242 has an invalid interface number: 168 but max is 2
[  136.699717][ T3379] usb 6-1: config 242 has an invalid interface number: 168 but max is 2
[  136.699733][ T3379] usb 6-1: config 242 has no interface number 0
[  136.699746][ T3379] usb 6-1: config 242 has no interface number 1
[  136.699758][ T3379] usb 6-1: config 242 has no interface number 2
[  136.699802][ T3379] usb 6-1: config 242 interface 212 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  136.699821][ T3379] usb 6-1: config 242 interface 212 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  136.699838][ T3379] usb 6-1: config 242 interface 212 altsetting 128 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  136.699860][ T3379] usb 6-1: config 242 interface 212 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  136.699880][ T3379] usb 6-1: config 242 interface 212 altsetting 128 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  136.699911][ T3379] usb 6-1: config 242 interface 168 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  136.699928][ T3379] usb 6-1: config 242 interface 168 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  136.699944][ T3379] usb 6-1: config 242 interface 168 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 9
[  136.699971][ T3379] usb 6-1: too many endpoints for config 242 interface 168 altsetting 25: 245, using maximum allowed: 30
[  136.700003][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has a duplicate endpoint with address 0x9, skipping
[  136.700022][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has a duplicate endpoint with address 0x2, skipping
[  136.700042][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has an invalid descriptor for endpoint zero, skipping
[  136.700059][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has a duplicate endpoint with address 0xD, skipping
[  136.700077][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has a duplicate endpoint with address 0xB, skipping
[  136.700094][ T3379] usb 6-1: config 242 interface 168 altsetting 25 has 6 endpoint descriptors, different from the interface descriptor's value: 245
[  136.700116][ T3379] usb 6-1: config 242 interface 212 has no altsetting 0
[  136.700130][ T3379] usb 6-1: config 242 interface 4 has no altsetting 0
[  136.700145][ T3379] usb 6-1: config 242 interface 168 has no altsetting 0
[  136.700159][ T3379] usb 6-1: config 242 interface 168 has no altsetting 1
[  136.707401][ T3379] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.707422][ T3379] usb 6-1: Product: 㹂て燵黮愐쐕䑠ាꆵ똻±䓳俕蹁
[  136.707437][ T3379] usb 6-1: Manufacturer: ࡃ
[  136.707449][ T3379] usb 6-1: SerialNumber: 䒠餕丼㱆ﶳ㵆圾깍匲⾁잠㜱镚欯比椴Ủ॰ᇦ鰂脞뱠쵁ፀ皢ￕ凉촸ሙ⁊○誤㸛됺欜躥鐚홷펭዆큔魫왜쀿㞣䐖핧鵴灃靵閺Ꮓ㧾墵⼈먤≺쌵飬斃豈쿾⠪蹏ၨ⽝爴〕ꪘ㞑총粹튤䚍魞앀曙⶘ퟡ઎⌈諌챋嘾煂蠆藨㧺ᆟ吩퓪쥗췹彟ᐁ칧劘٬ݭꙟ般ᧆ澠䘸ᚐퟸ଄
[  136.713291][ T8466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  136.713809][ T8466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  136.766096][    C0] bridge0: port 2(syz_tun) entered learning state
[  136.783538][    T9] usb 9-1: USB disconnect, device number 4
[  136.787337][ T8458] FAULT_INJECTION: forcing a failure.
[  136.787337][ T8458] name failslab, interval 1, probability 0, space 0, times 0
[  136.787380][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.4.532 Not tainted syzkaller #0 PREEMPT(full) 
[  136.787403][ T8458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  136.787414][ T8458] Call Trace:
[  136.787420][ T8458]  <TASK>
[  136.787428][ T8458]  dump_stack_lvl+0x100/0x190
[  136.787528][ T8458]  should_fail_ex.cold+0x5/0xa
[  136.787551][ T8458]  should_failslab+0xc2/0x120
[  136.787602][ T8458]  __kmalloc_cache_noprof+0x91/0x6d0
[  136.787633][ T8458]  ? kobject_uevent_env+0x263/0x18b0
[  136.787684][ T8458]  kobject_uevent_env+0x263/0x18b0
[  136.787708][ T8458]  ? kasan_quarantine_put+0x104/0x240
[  136.787729][ T8458]  ? lockdep_hardirqs_on+0x7d/0x110
[  136.787758][ T8458]  ? module_remove_driver+0xa0/0x260
[  136.787780][ T8458]  __kobject_del+0x168/0x220
[  136.787799][ T8458]  kobject_put+0x348/0x640
[  136.787821][ T8458]  bus_remove_driver+0x16e/0x2e0
[  136.787845][ T8458]  driver_unregister+0x76/0xb0
[  136.787871][ T8458]  usb_gadget_unregister_driver+0x49/0x70
[  136.787919][ T8458]  raw_release+0x19b/0x260
[  136.787940][ T8458]  ? __pfx_raw_release+0x10/0x10
[  136.787965][ T8458]  __fput+0x3ff/0xb50
[  136.787994][ T8458]  task_work_run+0x150/0x240
[  136.788018][ T8458]  ? __pfx_task_work_run+0x10/0x10
[  136.788050][ T8458]  exit_to_user_mode_loop+0x1d8/0x700
[  136.788079][ T8458]  ? rcu_is_watching+0x13/0xc0
[  136.788102][ T8458]  __do_fast_syscall_32+0x59f/0x8b0
[  136.788130][ T8458]  ? lockdep_hardirqs_on+0x7d/0x110
[  136.788158][ T8458]  do_fast_syscall_32+0x32/0x70
[  136.788187][ T8458]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  136.788210][ T8458] RIP: 0023:0xf7f74fec
[  136.788231][ T8458] Code: Unable to access opcode bytes at 0xf7f74fc2.
[  136.788239][ T8458] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4
[  136.788257][ T8458] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ffffffff
[  136.788268][ T8458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  136.788279][ T8458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  136.788290][ T8458] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  136.788300][ T8458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  136.788324][ T8458]  </TASK>
[  136.801317][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  136.813895][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  136.814719][    T9] keyspan 9-1:1.0: device disconnected
[  136.983957][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.984233][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.986192][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'.
[  137.014544][ T3379] option 6-1:242.212: GSM modem (1-port) converter detected
[  137.031483][ T3379] usb 6-1: USB disconnect, device number 10
[  137.035590][ T3379] option 6-1:242.212: device disconnected
[  137.430756][ T8496] ipvlan0: entered promiscuous mode
[  137.552295][   T43] kauditd_printk_skb: 537 callbacks suppressed
[  137.552308][   T43] audit: type=1800 audit(1789903054.160:1423): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.542" name="/" dev="fuse" ino=1 res=0 errno=0
[  137.554616][ T8503] FAULT_INJECTION: forcing a failure.
[  137.554616][ T8503] name failslab, interval 1, probability 0, space 0, times 0
[  137.554634][ T8503] CPU: 2 UID: 0 PID: 8503 Comm: syz.6.542 Not tainted syzkaller #0 PREEMPT(full) 
[  137.554647][ T8503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  137.554653][ T8503] Call Trace:
[  137.554657][ T8503]  <TASK>
[  137.554661][ T8503]  dump_stack_lvl+0x100/0x190
[  137.554679][ T8503]  should_fail_ex.cold+0x5/0xa
[  137.554694][ T8503]  should_failslab+0xc2/0x120
[  137.554709][ T8503]  __kmalloc_noprof+0xfc/0x840
[  137.554722][ T8503]  ? trace_kmalloc+0xeb/0x110
[  137.554737][ T8503]  ? lsm_blob_alloc+0x68/0x90
[  137.554751][ T8503]  lsm_blob_alloc+0x68/0x90
[  137.554763][ T8503]  security_sk_alloc+0x2d/0x290
[  137.554780][ T8503]  sk_prot_alloc+0x12a/0x2a0
[  137.554798][ T8503]  sk_alloc+0x36/0xe80
[  137.554811][ T8503]  pfkey_create+0x105/0x600
[  137.554823][ T8503]  __sock_create+0x339/0x860
[  137.554838][ T8503]  __sys_socket+0x14d/0x260
[  137.554863][ T8503]  ? xfd_validate_state+0x129/0x190
[  137.554880][ T8503]  ? __pfx___sys_socket+0x10/0x10
[  137.554895][ T8503]  __ia32_sys_socket+0x72/0xb0
[  137.554906][ T8503]  ? lockdep_hardirqs_on+0x7d/0x110
[  137.554923][ T8503]  __do_fast_syscall_32+0x13a/0x8b0
[  137.554943][ T8503]  do_fast_syscall_32+0x32/0x70
[  137.554960][ T8503]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  137.554974][ T8503] RIP: 0023:0xf706efec
[  137.554987][ T8503] Code: Unable to access opcode bytes at 0xf706efc2.
[  137.554991][ T8503] RSP: 002b:00000000f545d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000167
[  137.555003][ T8503] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000000000003
[  137.555010][ T8503] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  137.555017][ T8503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  137.555024][ T8503] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  137.555031][ T8503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  137.555050][ T8503]  </TASK>
[  137.730540][   T43] audit: type=1800 audit(1789903054.340:1424): pid=8519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  137.883812][ T8527] netlink: 'syz.1.546': attribute type 4 has an invalid length.
[  137.888842][ T8528] netlink: 'syz.1.546': attribute type 4 has an invalid length.
[  137.902022][ T5817] lo speed is unknown, defaulting to 1000
[  137.902256][ T5817] lo speed is unknown, defaulting to 1000
[  138.233038][ T8543] lo speed is unknown, defaulting to 1000
[  138.283480][ T8547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  138.352760][ T5817] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  138.513285][ T5817] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  138.514284][ T5817] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  138.514308][ T5817] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65344, setting to 1024
[  138.514322][ T5817] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  138.514334][ T5817] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.516319][ T5817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  138.516338][ T5817] usb 7-1: Product: syz
[  138.516350][ T5817] usb 7-1: Manufacturer: syz
[  138.520755][ T8540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  138.521842][ T5817] garmin_gps 7-1:1.0: Garmin GPS usb/tty converter detected
[  138.565197][ T5817] usb 7-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  138.720209][ T8563] dummy0: entered promiscuous mode
[  138.733154][ T8541] uhci_hcd 0000:00:1d.0: remove, state 4
[  138.733226][ T8541] usb usb1: USB disconnect, device number 1
[  138.741504][ T8563] dummy0: left promiscuous mode
[  138.773045][ T8541] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered
[  139.106611][ T8582] trusted_key: encrypted_key: insufficient parameters specified
[  139.110432][ T8584] trusted_key: encrypted_key: master key parameter '�ser:tr:' is invalid
[  139.189426][ T8593] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  139.189442][ T8593] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  139.241857][ T8590] lo speed is unknown, defaulting to 1000
[  139.305563][ T8598] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  139.305792][ T8601] loop6: detected capacity change from 0 to 2640
[  139.322336][ T6544] buffer_io_error: 11 callbacks suppressed
[  139.322348][ T6544] Buffer I/O error on dev loop6, logical block 0, async page read
[  139.323641][ T6544] Buffer I/O error on dev loop6, logical block 0, async page read
[  139.323866][ T6544] Buffer I/O error on dev loop6, logical block 0, async page read
[  139.324081][ T6544] Buffer I/O error on dev loop6, logical block 0, async page read
[  139.324326][ T6544] Buffer I/O error on dev loop6, logical block 0, async page read
[  141.514721][    T9] usb 7-1: USB disconnect, device number 17
[  141.517868][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  141.518162][    T9] garmin_gps 7-1:1.0: device disconnected
[  142.584197][ T8665] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  142.620255][ T8665] 8021q: adding VLAN 0 to HW filter on device bond4
[  142.662656][ T1353] usb 11-1: new high-speed USB device number 2 using dummy_hcd
[  142.783757][ T8667] bond4: (slave geneve3): making interface the new active one
[  142.791120][ T8667] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  142.839237][ T1353] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  142.856013][ T1353] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.856029][ T1353] usb 11-1: Product: syz
[  142.856037][ T1353] usb 11-1: Manufacturer: syz
[  142.856044][ T1353] usb 11-1: SerialNumber: syz
[  143.117512][ T8672] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  143.117529][ T8672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  143.121695][ T8672] vhci_hcd vhci_hcd.0: Device attached
[  143.137214][ T8675] vhci_hcd: cannot find the pending unlink 3
[  143.234447][ T5817] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  143.413321][  T853] usb 40-1: SetAddress Request (2) to port 0
[  143.413971][  T853] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  144.762830][ T5817] usb 11-1: Service connection timeout for: 256
[  144.762846][ T5817] ath9k_htc 11-1:1.0: ath9k_htc: Unable to initialize HTC services
[  144.795738][ T5817] ath9k_htc: Failed to initialize the device
[  144.816469][ T5817] usb 11-1: ath9k_htc: USB layer deinitialized
[  145.206431][   T57] usb 11-1: USB disconnect, device number 2
[  145.274339][ T8675] vhci_hcd: connection reset by peer
[  145.274576][ T5816] vhci_hcd vhci_hcd.1: stop threads
[  145.274591][ T5816] vhci_hcd vhci_hcd.1: release socket
[  145.275803][ T5816] vhci_hcd vhci_hcd.1: disconnect device
[  145.711099][ T5846] lo speed is unknown, defaulting to 1000
[  145.711202][ T5846] syz0: Port: 1 Link DOWN
[  146.307462][ T8677] lo speed is unknown, defaulting to 1000
[  146.770687][ T8604] syz.1.558 (8604) used greatest stack depth: 19752 bytes left
[  146.942972][   T43] audit: type=1326 audit(1789903063.560:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  146.943174][   T43] audit: type=1326 audit(1789903063.560:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  146.947264][   T43] audit: type=1326 audit(1789903063.560:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706efec code=0x7ffc0000
[  146.949567][   T43] audit: type=1326 audit(1789903063.560:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  146.951646][   T43] audit: type=1326 audit(1789903063.560:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf706efec code=0x7ffc0000
[  147.015795][   T43] audit: type=1326 audit(1789903063.630:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  147.016180][   T43] audit: type=1326 audit(1789903063.630:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  147.029303][   T43] audit: type=1326 audit(1789903063.640:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706efec code=0x7ffc0000
[  147.029333][   T43] audit: type=1326 audit(1789903063.640:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  147.029353][   T43] audit: type=1326 audit(1789903063.640:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8685 comm="syz.6.572" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000
[  148.450720][  T853] usb 40-1: device descriptor read/8, error -110
[  148.853745][  T853] usb usb40-port1: attempt power cycle
[  149.423246][  T853] usb usb40-port1: unable to enumerate USB device
[  150.502205][ T8712] ------------[ cut here ]------------
[  150.502215][ T8712] current->flags & PF_MEMALLOC
[  150.502220][ T8712] WARNING: mm/page_alloc.c:4816 at __alloc_frozen_pages_noprof+0x1eac/0x3300, CPU#2: syz-executor/8712
[  150.508968][ T8712] Modules linked in:
[  150.511993][ T8712] CPU: 2 UID: 0 PID: 8712 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  150.514956][ T8712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  150.518905][ T8712] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.520949][ T8712] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[  150.526899][ T8712] RSP: 0000:ffffc90007a265e8 EFLAGS: 00010202
[  150.528732][ T8712] RAX: ffff888029814b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[  150.531135][ T8712] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[  150.533568][ T8712] RBP: ffff888029814b2c R08: 0000000000008000 R09: 0000000000000001
[  150.536274][ T8712] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[  150.539327][ T8712] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000f44cd7
[  150.542417][ T8712] FS:  0000000000000000(0000) GS:ffff888096b60000(0063) knlGS:000000005832e480
[  150.545953][ T8712] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  150.548531][ T8712] CR2: 00000000f71a10b0 CR3: 0000000074103000 CR4: 0000000000352ef0
[  150.551527][ T8712] Call Trace:
[  150.552623][ T8712]  <TASK>
[  150.553552][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.555129][ T8712]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  150.557094][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.558660][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.560233][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.561793][ T8712]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.563821][ T8712]  ? policy_nodemask+0xed/0x4f0
[  150.565404][ T8712]  alloc_pages_mpol+0x201/0x550
[  150.567031][ T8712]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  150.568775][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.570396][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.572002][ T8712]  folio_alloc_noprof+0x22/0x250
[  150.573655][ T8712]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  150.575621][ T8712]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  150.577818][ T8712]  ? lock_acquire+0x1d1/0x380
[  150.579328][ T8712]  ? ext4_get_group_info+0x146/0x480
[  150.580989][ T8712]  ? find_held_lock+0x2b/0x80
[  150.582480][ T8712]  __filemap_get_folio_mpol+0x653/0x1320
[  150.584535][ T8712]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[  150.586261][ T8712]  ext4_discard_preallocations+0x584/0x10c0
[  150.588110][ T8712]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  150.590511][ T8712]  ? __pfx_xa_destroy+0x10/0x10
[  150.592056][ T8712]  ? inode_wait_for_writeback+0x171/0x390
[  150.593948][ T8712]  ext4_clear_inode+0x6e/0x280
[  150.595468][ T8712]  ext4_evict_inode+0x1de/0x17d0
[  150.597012][ T8712]  ? evict+0x37e/0xad0
[  150.598296][ T8712]  ? __pfx_ext4_evict_inode+0x10/0x10
[  150.599964][ T8712]  evict+0x3c2/0xad0
[  150.601176][ T8712]  ? _raw_spin_unlock+0x28/0x50
[  150.602948][ T8712]  ? __list_lru_walk_one+0x26d/0x550
[  150.604614][ T8712]  ? __pfx_evict+0x10/0x10
[  150.606018][ T8712]  ? __pfx___might_resched+0x10/0x10
[  150.607668][ T8712]  dispose_list+0x117/0x1e0
[  150.609121][ T8712]  prune_icache_sb+0xea/0x150
[  150.610689][ T8712]  ? list_lru_count_one+0x147/0x320
[  150.612376][ T8712]  ? __pfx_prune_icache_sb+0x10/0x10
[  150.614166][ T8712]  super_cache_scan+0x3ac/0x5c0
[  150.615711][ T8712]  do_shrink_slab+0x416/0x1200
[  150.617250][ T8712]  shrink_slab+0xa82/0x12e0
[  150.618768][ T8712]  ? shrink_slab+0x677/0x12e0
[  150.620233][ T8712]  ? __pfx_shrink_slab+0x10/0x10
[  150.621779][ T8712]  ? __pfx_get_random_u8+0x10/0x10
[  150.623464][ T8712]  ? lock_acquire+0x1d1/0x380
[  150.624933][ T8712]  shrink_one+0x398/0x850
[  150.626305][ T8712]  ? shrink_node+0x2b00/0x4320
[  150.627808][ T8712]  shrink_node+0x2b20/0x4320
[  150.629264][ T8712]  ? __queue_work+0x4d6/0x1370
[  150.630813][ T8712]  ? shrink_node+0x286e/0x4320
[  150.632315][ T8712]  ? __pfx_shrink_node+0x10/0x10
[  150.634117][ T8712]  ? queue_work_on+0x141/0x1e0
[  150.635942][ T8712]  ? do_try_to_free_pages+0x33e/0x16d0
[  150.637746][ T8712]  do_try_to_free_pages+0x33e/0x16d0
[  150.639402][ T8712]  ? __pfx_do_try_to_free_pages+0x10/0x10
[  150.641166][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.642785][ T8712]  try_to_free_pages+0x2a0/0x740
[  150.644448][ T8712]  ? __pfx_try_to_free_pages+0x10/0x10
[  150.646177][ T8712]  ? find_held_lock+0x2b/0x80
[  150.647652][ T8712]  ? fs_reclaim_acquire+0x70/0x100
[  150.649289][ T8712]  ? fs_reclaim_acquire+0x70/0x100
[  150.650905][ T8712]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[  150.652895][ T8712]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  150.654881][ T8712]  ? __blk_flush_plug+0x2f3/0x4b0
[  150.656485][ T8712]  ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10
[  150.658468][ T8712]  ? __pfx___blk_flush_plug+0x10/0x10
[  150.660322][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.662013][ T8712]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.663987][ T8712]  ? policy_nodemask+0xed/0x4f0
[  150.665537][ T8712]  alloc_pages_mpol+0x201/0x550
[  150.667089][ T8712]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  150.668978][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.670756][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.672550][ T8712]  folio_alloc_noprof+0x22/0x250
[  150.674364][ T8712]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  150.676554][ T8712]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  150.679136][ T8712]  __filemap_get_folio_mpol+0x653/0x1320
[  150.681185][ T8712]  filemap_fault+0x879/0x3130
[  150.682961][ T8712]  ? __pfx_filemap_fault+0x10/0x10
[  150.684839][ T8712]  ? find_held_lock+0x2b/0x80
[  150.686840][ T8712]  ? __pfx_filemap_map_pages+0x10/0x10
[  150.688814][ T8712]  __do_fault+0x10b/0x440
[  150.690388][ T8712]  do_fault+0xb3f/0x1830
[  150.691886][ T8712]  ? __pfx_do_fault+0x10/0x10
[  150.693724][ T8712]  ? rcu_read_unlock+0x2d/0xb0
[  150.695436][ T8712]  ? rcu_read_unlock+0x2d/0xb0
[  150.697219][ T8712]  ? __pte_offset_map+0x179/0x310
[  150.699073][ T8712]  __handle_mm_fault+0x150b/0x2f60
[  150.700923][ T8712]  ? lock_vma_under_rcu+0x11d/0x590
[  150.702777][ T8712]  ? __pfx___handle_mm_fault+0x10/0x10
[  150.704428][ T8712]  ? lock_vma_under_rcu+0x17c/0x590
[  150.706159][ T8712]  handle_mm_fault+0x363/0xa20
[  150.708131][ T8712]  do_user_addr_fault+0x59c/0x12f0
[  150.709960][ T8712]  exc_page_fault+0x6f/0xd0
[  150.711617][ T8712]  asm_exc_page_fault+0x26/0x30
[  150.713307][ T8712] RIP: 0023:0xf71be7c7
[  150.714778][ T8712] Code: Unable to access opcode bytes at 0xf71be79d.
[  150.717073][ T8712] RSP: 002b:00000000ffcc1d58 EFLAGS: 00010206
[  150.719197][ T8712] RAX: 00000000f7282fcf RBX: 00000000f7448ff4 RCX: 0000000000002525
[  150.721524][ T8712] RDX: 0000000025252525 RSI: 00000000f7282fcf RDI: 00000000ffcc2274
[  150.724453][ T8712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  150.726824][ T8712] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[  150.729300][ T8712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  150.731799][ T8712]  </TASK>
[  150.732804][ T8712] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  150.735008][ T8712] CPU: 2 UID: 0 PID: 8712 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  150.737884][ T8712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  150.740933][ T8712] Call Trace:
[  150.741982][ T8712]  <TASK>
[  150.743004][ T8712]  dump_stack_lvl+0x100/0x190
[  150.744428][ T8712]  vpanic+0x553/0x970
[  150.745665][ T8712]  ? __pfx_vpanic+0x10/0x10
[  150.747067][ T8712]  panic+0xd1/0xe0
[  150.748216][ T8712]  ? __pfx_panic+0x10/0x10
[  150.749587][ T8712]  check_panic_on_warn.cold+0x19/0x34
[  150.751191][ T8712]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.753055][ T8712]  __warn.cold+0x191/0x318
[  150.754416][ T8712]  __report_bug+0x30f/0x440
[  150.755804][ T8712]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.757634][ T8712]  ? __pfx___report_bug+0x10/0x10
[  150.759169][ T8712]  ? __zone_watermark_ok+0x281/0x500
[  150.760760][ T8712]  ? get_page_from_freelist+0x344/0x35d0
[  150.762487][ T8712]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.764309][ T8712]  report_bug+0xb3/0x220
[  150.765629][ T8712]  ? __alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.767471][ T8712]  handle_bug+0x16a/0x2a0
[  150.768783][ T8712]  exc_invalid_op+0x17/0x50
[  150.770171][ T8712]  asm_exc_invalid_op+0x1a/0x20
[  150.771653][ T8712] RIP: 0010:__alloc_frozen_pages_noprof+0x1eac/0x3300
[  150.773653][ T8712] Code: 38 d0 7c 08 84 d2 0f 85 de 12 00 00 65 48 8b 05 62 56 1c 12 c7 84 24 94 00 00 00 00 80 00 00 f6 40 2d 08 0f 84 ba e7 ff ff 90 <0f> 0b 90 e9 b1 e7 ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03
[  150.779341][ T8712] RSP: 0000:ffffc90007a265e8 EFLAGS: 00010202
[  150.781160][ T8712] RAX: ffff888029814b00 RBX: 0000000000000000 RCX: 1ffff1100fffad29
[  150.783501][ T8712] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88803fffd938
[  150.785872][ T8712] RBP: ffff888029814b2c R08: 0000000000008000 R09: 0000000000000001
[  150.788217][ T8712] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000048c40
[  150.790778][ T8712] R13: ffff88803fffb900 R14: 0000000000000000 R15: 1ffff92000f44cd7
[  150.793136][ T8712]  ? __alloc_frozen_pages_noprof+0x2eb/0x3300
[  150.795066][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.796767][ T8712]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  150.798760][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.800278][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.801797][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.803334][ T8712]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.805126][ T8712]  ? policy_nodemask+0xed/0x4f0
[  150.806649][ T8712]  alloc_pages_mpol+0x201/0x550
[  150.808133][ T8712]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  150.809759][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.811312][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.812889][ T8712]  folio_alloc_noprof+0x22/0x250
[  150.814387][ T8712]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  150.816303][ T8712]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  150.818351][ T8712]  ? lock_acquire+0x1d1/0x380
[  150.819796][ T8712]  ? ext4_get_group_info+0x146/0x480
[  150.821427][ T8712]  ? find_held_lock+0x2b/0x80
[  150.822864][ T8712]  __filemap_get_folio_mpol+0x653/0x1320
[  150.824558][ T8712]  ext4_mb_load_buddy_gfp+0x70d/0x1b20
[  150.826249][ T8712]  ext4_discard_preallocations+0x584/0x10c0
[  150.828053][ T8712]  ? __pfx_ext4_discard_preallocations+0x10/0x10
[  150.830000][ T8712]  ? __pfx_xa_destroy+0x10/0x10
[  150.831486][ T8712]  ? inode_wait_for_writeback+0x171/0x390
[  150.833220][ T8712]  ext4_clear_inode+0x6e/0x280
[  150.834716][ T8712]  ext4_evict_inode+0x1de/0x17d0
[  150.836277][ T8712]  ? evict+0x37e/0xad0
[  150.837539][ T8712]  ? __pfx_ext4_evict_inode+0x10/0x10
[  150.839163][ T8712]  evict+0x3c2/0xad0
[  150.840350][ T8712]  ? _raw_spin_unlock+0x28/0x50
[  150.841828][ T8712]  ? __list_lru_walk_one+0x26d/0x550
[  150.843451][ T8712]  ? __pfx_evict+0x10/0x10
[  150.844821][ T8712]  ? __pfx___might_resched+0x10/0x10
[  150.846442][ T8712]  dispose_list+0x117/0x1e0
[  150.847818][ T8712]  prune_icache_sb+0xea/0x150
[  150.849268][ T8712]  ? list_lru_count_one+0x147/0x320
[  150.850824][ T8712]  ? __pfx_prune_icache_sb+0x10/0x10
[  150.852431][ T8712]  super_cache_scan+0x3ac/0x5c0
[  150.853936][ T8712]  do_shrink_slab+0x416/0x1200
[  150.855410][ T8712]  shrink_slab+0xa82/0x12e0
[  150.856798][ T8712]  ? shrink_slab+0x677/0x12e0
[  150.858230][ T8712]  ? __pfx_shrink_slab+0x10/0x10
[  150.859746][ T8712]  ? __pfx_get_random_u8+0x10/0x10
[  150.861304][ T8712]  ? lock_acquire+0x1d1/0x380
[  150.862726][ T8712]  shrink_one+0x398/0x850
[  150.864034][ T8712]  ? shrink_node+0x2b00/0x4320
[  150.865502][ T8712]  shrink_node+0x2b20/0x4320
[  150.866917][ T8712]  ? __queue_work+0x4d6/0x1370
[  150.868374][ T8712]  ? shrink_node+0x286e/0x4320
[  150.869859][ T8712]  ? __pfx_shrink_node+0x10/0x10
[  150.871371][ T8712]  ? queue_work_on+0x141/0x1e0
[  150.872815][ T8712]  ? do_try_to_free_pages+0x33e/0x16d0
[  150.874471][ T8712]  do_try_to_free_pages+0x33e/0x16d0
[  150.876088][ T8712]  ? __pfx_do_try_to_free_pages+0x10/0x10
[  150.877813][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.879334][ T8712]  try_to_free_pages+0x2a0/0x740
[  150.880851][ T8712]  ? __pfx_try_to_free_pages+0x10/0x10
[  150.882504][ T8712]  ? find_held_lock+0x2b/0x80
[  150.883931][ T8712]  ? fs_reclaim_acquire+0x70/0x100
[  150.885483][ T8712]  ? fs_reclaim_acquire+0x70/0x100
[  150.887062][ T8712]  __alloc_frozen_pages_noprof+0xf8a/0x3300
[  150.888893][ T8712]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  150.890808][ T8712]  ? __blk_flush_plug+0x2f3/0x4b0
[  150.892333][ T8712]  ? __pfx_ext4_mpage_readpages.isra.0+0x10/0x10
[  150.894250][ T8712]  ? __pfx___blk_flush_plug+0x10/0x10
[  150.895861][ T8712]  ? __lock_acquire+0x5c0/0x1f40
[  150.897377][ T8712]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  150.899268][ T8712]  ? policy_nodemask+0xed/0x4f0
[  150.900749][ T8712]  alloc_pages_mpol+0x201/0x550
[  150.902237][ T8712]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  150.903868][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.905439][ T8712]  ? filemap_get_entry+0x22d/0x450
[  150.906996][ T8712]  folio_alloc_noprof+0x22/0x250
[  150.908503][ T8712]  filemap_alloc_folio_noprof.part.0+0x3db/0x440
[  150.910456][ T8712]  ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10
[  150.912577][ T8712]  __filemap_get_folio_mpol+0x653/0x1320
[  150.914317][ T8712]  filemap_fault+0x879/0x3130
[  150.915773][ T8712]  ? __pfx_filemap_fault+0x10/0x10
[  150.917343][ T8712]  ? find_held_lock+0x2b/0x80
[  150.918834][ T8712]  ? __pfx_filemap_map_pages+0x10/0x10
[  150.920509][ T8712]  __do_fault+0x10b/0x440
[  150.921831][ T8712]  do_fault+0xb3f/0x1830
[  150.923141][ T8712]  ? __pfx_do_fault+0x10/0x10
[  150.924564][ T8712]  ? rcu_read_unlock+0x2d/0xb0
[  150.926043][ T8712]  ? rcu_read_unlock+0x2d/0xb0
[  150.927497][ T8712]  ? __pte_offset_map+0x179/0x310
[  150.929047][ T8712]  __handle_mm_fault+0x150b/0x2f60
[  150.930608][ T8712]  ? lock_vma_under_rcu+0x11d/0x590
[  150.932188][ T8712]  ? __pfx___handle_mm_fault+0x10/0x10
[  150.933823][ T8712]  ? lock_vma_under_rcu+0x17c/0x590
[  150.935369][ T8712]  handle_mm_fault+0x363/0xa20
[  150.936824][ T8712]  do_user_addr_fault+0x59c/0x12f0
[  150.938387][ T8712]  exc_page_fault+0x6f/0xd0
[  150.939810][ T8712]  asm_exc_page_fault+0x26/0x30
[  150.941279][ T8712] RIP: 0023:0xf71be7c7
[  150.942538][ T8712] Code: Unable to access opcode bytes at 0xf71be79d.
[  150.944521][ T8712] RSP: 002b:00000000ffcc1d58 EFLAGS: 00010206
[  150.946336][ T8712] RAX: 00000000f7282fcf RBX: 00000000f7448ff4 RCX: 0000000000002525
[  150.948685][ T8712] RDX: 0000000025252525 RSI: 00000000f7282fcf RDI: 00000000ffcc2274
[  150.951032][ T8712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  150.953410][ T8712] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[  150.955809][ T8712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  150.958219][ T8712]  </TASK>
[  150.959877][ T8712] Kernel Offset: disabled
[  150.961194][ T8712] Rebooting in 86400 seconds..