last executing test programs:

5m32.147076585s ago: executing program 0 (id=1059):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x2, 0x468, 0xffffffff, 0x0, 0x0, 0x2b0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:agp_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@empty, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x8, "d85a58008beaa5785dadc0384586ccc9f5c2ff5d0f5171d73a80be2cac2f"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)
mkdirat(0xffffffffffffff9c, 0x0, 0xe0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x80)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000380)=0x7fffffff, 0x4)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$unix(0xffffffffffffffff, &(0x7f0000000500)=""/5, 0xfffffffffffffc75, 0x2000, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e)
ptrace(0x10, r4)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r4)
ptrace$setsig(0x4203, r4, 0x6, &(0x7f0000000000)={0x2a, 0x4, 0x2})
syz_open_dev$media(&(0x7f0000000080), 0x5, 0x101000)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYRES64=r3, @ANYRES8=r1], 0xfe33)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
preadv2(r6, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x3, 0x2b, 0x0, 0x0)

5m29.955770319s ago: executing program 0 (id=1063):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
socket$alg(0x26, 0x5, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0)

5m29.803528563s ago: executing program 0 (id=1066):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9, @broadcast}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x9}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r12, &(0x7f00000003c0)=@abs={0x1}, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r13=>0x0})
ioctl$sock_SIOCDELRT(r12, 0x890c, &(0x7f00000005c0)={0x0, @tipc=@name={0x1e, 0x2, 0x3, {{0x43}, 0x2}}, @in={0x2, 0x7ff, @multicast1}, @can={0x1d, r13}, 0x100, 0x0, 0x0, 0x0, 0x726a, &(0x7f0000000540)='vlan1\x00', 0x1ff, 0x58, 0xfff9})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r14=>0x0, 0x2, 0x1, 0x8, 0x8, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, 0x8000, 0x8000, 0x1, 0x7}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYRES16=r12, @ANYBLOB="08002cbd7000fddbdf25150000000c000000002400018008000100c903cb9ab9d6ae0db19a923b99ab753d8b3de7a745e0ef789f1bab27412883c85ed782cb2a691591c5d02f6b77592140db9869a07db15c219fd42e3b817260b4b696ff40e4e68d51b78a1bfa1fffe82520507a37c70d512a582a79", @ANYRES32=r13, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRESOCT=r9, @ANYBLOB="5000018008000100", @ANYRES32=r10, @ANYBLOB="08000300030000001400020070696d36726567300000000000000000080003000100000008000100", @ANYRES32=r14, @ANYBLOB="080003000100000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES64=r10, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x3, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804)
close(0x3)
r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r15, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r15, 0x0, 0xffffffff000)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0)
socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300))

5m28.753228849s ago: executing program 0 (id=1072):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
rseq(0x0, 0x0, 0x0, 0x0)
gettid()
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000740)='./file0/file0\x00', 0x0, 0x1aa9892, 0x0)
mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x80, 0x8)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r2 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000040)="4fd1f72c3dc5", 0x6}, {&(0x7f0000000300)="fec4ef98bd1494800407b315dade6580a620db7761eac4bab228885d1b7f4648e355f242203775135123adbd41778ff1eabb3d5b597eeba3a3571151c27ccbac3ced0797b5a41500281f82344a2415e8e0ed82b8b4721d70b4926bb8f2aabaf832738dc933a6a37848c73c549ca6b96f3393eef5994d131228c0616099a4f3a03e28bf55be427b68f8d50890299bdcd2f1da819c9b748822f79c3ba6cc722422c777549d76310671f173fa2376df50aae803307d56c4f9aab83f88dff2ee35fd725e19072c3951090594a91d3691b1ec2a1e3390ae1a2f33b495c94fb778bcc9", 0xe0}, {&(0x7f0000000400)="dbe628284ad6816216afd4e4c53e0910ff59557636c3d437fddbe3db11bc3c1f725db15e8544d98fb728e4d4eebb7e10486f4a48ce9b5a70ffb8ef140338bf31a23cf1d12e86e5fc510df29f2fe681133c7ce8d6cc2dce9945938c77d83e78fa00731f54f4edf5d0c780905c1defeda19ac2b4f351b25d7810efd6ce63bdc6f08b9227fce2e1e855c8ad875c511da3291b2fca2c6da4779c3b39f7959c4fef59ad6033b8bac1303fe1f6e3c5ed22f9050abd19893b82f3515933a2768753d88e763638897118621e3474f2bf89cb60b0f043094f9967bdfeb955", 0xda}, {&(0x7f0000000500)="770293af8b5ddd06b3b3e8e5cda2ae974297bf180059e75f21157fcd0e9a375558154501b1897fc0be7b0e8906e27dc3b03d219887fdf6a3582f3bb686ba3e39b494dbbfd6", 0x45}, {&(0x7f00000005c0)="45128a9702add75b5c9493", 0xb}, {&(0x7f0000000600)="0916470ac05e744edff0a31df5fc665f47ab0ec62fd52279196f86fb57f7ae797b9ed22b07cc6fdd30f19dd0b46d2aef07925da2f1fac79afe4578e94e0a467a6f26eb19329531a5715ae2df855eaf5635f859657252ef54577584983e527557e1ae0b6a457147f3cf3fa70fe64953a4dd7e915235ddb3c8e980588d4ab22b4cd65c12d381015dc29001da2990baafd319b25b05289c7e498b5775d69143e953a93e03841a10de2eeaf1fd582ae496e7829860a4129b600f493cd966f72c", 0xbe}], 0x6)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
read$FUSE(r1, &(0x7f0000004640)={0x2020}, 0x2020)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0x10, 0xffffffffffffffff, 0xff}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4}, 0x5, 0x0, 0x0, 0x0, "1f2ee3a766b725cf"}, 0x6}}, @CGW_SRC_IF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x8004)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x6)
r5 = socket$inet(0xa, 0x801, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
listen(r5, 0x8)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x8)

5m27.925650422s ago: executing program 0 (id=1075):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0})
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
munlockall()
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e1e, 0x83, @dev={0xfe, 0x80, '\x00', 0x33}, 0x3}, 0x80, 0x0}, 0x20000040)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
sendmsg$inet(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="8b3a688afc729cc5306448244aa694656c126f6b997fe9df101eda4ed9de42f0ed31e0cb1b6dac1ea14dcdfab17dbb6b9036b705567a09e16a27820cd297457226131616e15552c050f06a9c864355c5cef259f75d1f6937485a553fbcf3b3ae9d7e1da5e89bf66a77f8a14f40229efde36e464c38c227dad488b461060740301d622c5c68232ab66583930acccdcca63a85afee12e95c7e773e44dec96647777032be0c02c8ff731ed0", 0xaa}, {&(0x7f00000000c0)="3747028d3dc43a678664054ae64a89c06fc49062ef6e9bef0a2a06755da691b272abad5160d5d803ff2be82a9862a8d68bf14582f91923e8f6b45e9ade86ad4cdbf9dbaf337973c1e182c8a0dc22f35cf4546b3f8f115898f305deff4bf0ead566af84531c0a79dbca13ca8f45703d70a5ace133d371d3f1288ce9eafff5ca5d4e6b97f528ffd101b5a26c57f26c81aab1916c1a16092e09475536f233179caaca41413334fec6ea16a2d04b6a615955e59d13eb9cb12d63b817538f66bd215de01c7265d102", 0xc6}, {&(0x7f00000001c0)="23ebfe70785241032ed3915543a798e4b7e86d4e698451cfefccde419b41f4d6000f33b7ac7cb63ba888e2c73e234c7370e9b223f1f65bceaf30b14cb72e04b34d1011255ba309bb2b331cd2019e4c148b6ba3b46c6bb38abb92b35c9b8dcc0f06bd1e7fb617bb2009955c3502", 0x6d}, {&(0x7f0000000240)="da2bd0a08687833f0eceec3ccd3177cef1260b6e9e527154bb54cc844ac14836", 0x20}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000000000000000000080000005a0bda1e9dfb68cbb8d94d834787533552d97b21b5ec721b932f0bc6d319e0154bfe1356dd0a", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x8000)
move_pages(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540), 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x2, 0x1, 0x4, 0x2}}, 0x26)

5m27.507981172s ago: executing program 0 (id=1077):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x20000040)

5m27.165881428s ago: executing program 32 (id=1077):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}}, 0x20000040)

4m40.912355369s ago: executing program 5 (id=1246):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002b40)={0x1c, &(0x7f00000029c0)=ANY=[@ANYBLOB="201807"], 0x0, 0x0})
clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x4, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4})
add_key(0x0, 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf2", 0x49, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x0, 0x13, 0x5, "504cf7e880"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m37.197469682s ago: executing program 5 (id=1256):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)="67eac517536f0621f7bed50c07e004863a0685fabf02bca3cbddd8f746923709fd7904acb013a9154f14382fe6d78b7576261fef8d414c575c09cabff5b59abb1cfad60cff4b5e9f0a1c213eb0fb2631820a6cf1110540064b29def2b15b72109748af0056c447364c5fa283e5b5c06bbb4f86e35d0568316f4fe96c6bb17cf209660e6b3c5c8c06d018a7d8e0141af7e08efbfd5a736743bd61887654f9bee54fd18a6ff090ffd68acc6dab0ff2f3", 0xaf}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000))
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) (async)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) (async)
ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}})
unshare(0x2a020480) (async)
unshare(0x2a020480)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) (async)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_RANGEINFO(r6, 0x80106408, &(0x7f0000000280)={0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
syz_emit_ethernet(0x106, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r7, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x1b, 0xde, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05d1", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a633c74a34e82949b401a6f5649f683612afb19668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee09e5c09269845ea686525461429559d4b3dcbb51aeda91ac9e4287b6403281f3", 0x2, 0x0, 0x3}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r7, 0x0, 0x40, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d7774162147dbec7f16b9ad3ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x1b, 0xde, &(0x7f0000003600)="16c66ad813ddc0658a773fd590c0c56a9103da2dff52ac06df05d1", &(0x7f0000003640)="229659ccd6f855f1bd40fd739fde0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913d47292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a633c74a34e82949b401a6f5649f683612afb19668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee09e5c09269845ea686525461429559d4b3dcbb51aeda91ac9e4287b6403281f3", 0x2, 0x0, 0x3}, 0x50)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m36.935170748s ago: executing program 5 (id=1259):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, 0x0, &(0x7f0000000000))
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001300)={0xffffffffffffffff, 0x7, 0x0, 0x2})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="832a0a65", 0x5ac)

4m35.262314213s ago: executing program 1 (id=1262):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r2 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x80001001})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x800, 0x4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r8, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r8, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x3, {0x2, 0x7, 0x0, 0x6, 0x8, 0x4, {0x6, 0x8000, 0x100000000, 0xff, 0x203, 0x55d, 0xfffdfff8, 0x0, 0x80010000, 0x2000, 0x1002, 0x0, r9, 0x8001, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$TUNDETACHFILTER(r10, 0x8903, 0x1000000000000)
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000c80)={0x0, 0x0, <r12=>r6})
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r4, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
r14 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r15 = dup(r14)
getdents(r15, &(0x7f0000000380)=""/31, 0x1f)
getdents(r15, &(0x7f00000001c0)=""/109, 0x6d)
r16 = syz_open_dev$ndb(&(0x7f0000000d40), 0x0, 0x200040)
r17 = openat$incfs(0xffffffffffffffff, &(0x7f0000000d80)='.pending_reads\x00', 0x2e702, 0x40)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000dc0)={<r18=>0xffffffffffffffff})
r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50)
sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)="84dd01c010ae5a821195ca67e61accb741fa686d8f69b668e230446a0811864e5281086b75017edcbfbbd48b0c809e36721cbf70cc2236df2e0cf588750a958450f8a949fe08a14f0acedb25a64bd83a36d5fca9db286b6d744ca44b078fe74d2069c660b15fff997a8d96ebfb5e44c1c3ad4750e1c97176b7009e56360aefedd6296217bf99bc1ef8136971fd268ffebe182f5cf459bea088e919db1d8a03294c341e8ddd23854754d04fc401a82eeb21761c4db4650fc1383ec04def305e429e396d771db561591dc51a9242bf8a1cb661d5", 0xd3}, {&(0x7f0000000540)="739fd272367c740362c2f35b4ce7fa1563b380ce699a8fd7459138d9879b0a32df9977564fa2ab9a2232888438902427445b2f2d155cc8844c48a042a0bb3e9da3cd1e0f1e578f18d1d581f11e2db24c12e742456cfbdc73e911961b1e65f8181c5c7ef6ba84799a03717754fceb43a28d809e8f7120be16c454e62a365229c68d3bed5b8f851d46ecfc1e083addc12a9b165e741bd52957009f25be2e730d374698d8", 0xa3}, {&(0x7f0000000a00)="419eb54545f36b797c141435aa2df59377a2e7eb74363710e00dfc232b51c361fe8825d6e1b1767576e31fe8680b543d97ca8fe4bd39ace9ff7e11b55b269f5b38488e110fd28b8d5ee969b014785d03ef42f2db6a81b9ccce0fe1b7b051fd8082c97d696a8f355cb9347561d10c46e47dc82163a2d0aa93f7da28410000df8e047f60d823e9efd55b16fda7fd6e0b2fe470215878809b3458c7", 0x9a}], 0x3, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x20, 0x8000}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="d3b9683bb55684b00339193ccd8101c04f57f8101071c56cf5e62db2bd2c82e8486549c047dbb31344ff67a2adb7d2915212a90578b3dd4ca0785c0a07f0ba421e4f93a5b8db3949903d28440db5785f3d40bba0e6000d084efc8559d2c0c5318cbdfa587492fe6896d581eea27366", 0x6f}], 0x1, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x40, 0x4040}}, {{&(0x7f0000000980)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000b40)="0f886086e2072a5be85dd94ca676708bf026e072e34774ca3dc11f0a47ec0e7c96c306202cdd42b0528884a5c89e0732f9888a8af9286789e1edc38cca646606309e3f6f6be7daf8b24610d548e057812ba7a7c6ec00b7013fc64ec6a7462e4afb82f44e86943fbc22446d5f9991ddab9b57614d2a6953801222958d3940f3e5625bb48f6b5377e94cb102cc7f92c8e5a574d7eec7506a2cf8a3a2fb5adcc6573bba8c8a9f5edd7c6f4021cbe2f2ec49311827261df4d422443eeb13834923fee8eb29dbdae69f1d3e7d7b6c3e72b4cb0b5f283566dd3ceb920f6c0e899bbacec3bed1afd82b517bb9", 0xe9}], 0x1, &(0x7f0000000ec0)=[@rights={{0x24, 0x1, 0x1, [r6, r10, r1, r0, r3]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r11, r3, r6, r3]}}, @rights={{0x34, 0x1, 0x1, [r0, r12, r13, r0, r15, r16, r2, r17, r18]}}, @rights={{0x2c, 0x1, 0x1, [r6, r19, r0, r5, r5, r0, r2]}}], 0xc0, 0x11}}, {{&(0x7f0000000f80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001000)="e559f429a4f0be6af699da89ee060529920e33776cde6c68643eeaa05c28823ef0c442836946b2a4c72a2d8471cef24049057c99abf090eaaabba3d6ae2d9a18885d5915e90af6bcdf32c77d6ac3fb25698fcfda05de7f746a5a0044898a8695e5", 0x61}, {&(0x7f0000001080)="8e27683bdafa9c132278f4974df7c53a0b49c3e24561a1c10b0c8df3ed6bc0b4c52bfbbede640f42ba5acd052833fdce2255a27ba9c44ba272db384c80d86b74a9399f7a5d3d5e4d2c0f82e61e281d1e5dd98b852df0a974baa645ed4698d45ab21bbb6d18011aceda967e91029a33063a0d3c11e21696a9918d4bf285a31c307eab11a679902b27d84a65daed0b7b4f94356f4cd0accf14d09c748f03cbc13880190e3e42ae8cf961953c746629a9b26d4fd8e4b15224ae9d325e481939a296cee33aa1666369fecfad48d1e81784db6cc2a9bd2eb23ea7d546148f1c9aa4cc7f3d8ccb600e9f92dd", 0xe9}, {&(0x7f0000001180)="d57ee6c8afdbdb9b382306b84bb63f45cbf79152579a8f23148a3b60ca4a3b80420672c8a413bb3910e2b51e0c86bf9967cad4bd519e4624da01a231296e31046c4c4becf9995ab1e8e6f3751c128e21d0aacb121643da7980a7dc8bf5a896c62adbc8ad920ffd84ba4127d5b8e565fc9dd7f740c3d6b0d6555686c24d2ec9c8b329c463422e96be784830851c591272117311517f380727c4d2cfe83dfeb26cf417ed019944d2fd147e8e40524d749b6e6a64b58bf889f49cff784093f4204245ccc0f8c2ec967f8be0784f5e92cb5ef63bffda10865f0fa8794b", 0xdb}, {&(0x7f0000001280)="a7619fea1920a5492b9f78ed273a3ca01a585925e306bc6bf8a2d64669148c27ecb82c807f4a39b9fa9683f1053a27486dac35c9a78ab86d45d13512adf4be50dfd153fe", 0x44}, {&(0x7f0000001300)="c303f462fe2a98884c892c45848adb0e57b782633e6627edfec7089fe4647fade188f1df7ed7505ec486ba62c66234f6f0", 0x31}, {&(0x7f0000001340)="b0645d391838f7b09f84d0f195b844d380ec66157c3d7c56b5c557d4fb4bd77f56554a4dac7cb2f36312038a86b8f638f71792cfda21b73474de8a8e3eed7423878aebdfea5e3aa50e4234a621b4b0eb107441c3754a3344608b963b39bf2f3b72cbba50d53392c38b88c18e167eb7e5457432e6d8e267db192673147d5aae80a6af53e6dd24cdf82a4239e74d9842263f22dd5a86372d05bb1b97cbb7f0a530a315ff84a17a0864d474783b2cb7c84ea65a3ab001b7f083eeb9006447f83d450fea66d064bcd3d6de7b14da9152f72459c14a271d99f90af6953de16b646a57cbfcf9", 0xe3}], 0x6, 0x0, 0x0, 0x4000000}}], 0x4, 0x8040)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r20}, @IFLA_MASTER={0x8, 0xa, r20}]}, 0x4c}}, 0x0)

4m34.264410228s ago: executing program 1 (id=1268):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="af000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="08003500000000000a00340002020202020200000a00060008021100000100"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x373e00, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
r4 = socket(0x10, 0x803, 0x2)
getsockopt$sock_linger(r4, 0x1, 0xd, 0x0, &(0x7f0000000040))
epoll_create1(0x80000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x29, 0x2, 0x400)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)

4m33.293605801s ago: executing program 5 (id=1271):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2})
r2 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
getdents64(r3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
fsmount(r2, 0x1, 0xfd)
syz_usb_connect(0x1, 0x3d, &(0x7f0000000680)=ANY=[@ANYBLOB="1201d08e5db9a3082e0c200729d40102030109022b000108044009046d000278549908000200050907058e33975a9509050b080800080c3f00000000"], 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00')
add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='[', 0x1, 0xffffffffffffffff)
mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r0, 0xffffffffffffc000)

4m32.567932977s ago: executing program 1 (id=1276):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
getpid() (async)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) (async)
modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64)
syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r1, 0x0, 0x0) (async)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e9f, 0x0, @mcast1, 0x7}, 0x1c) (async, rerun: 32)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r6 = syz_clone(0x10a8c00, 0x0, 0xfde9, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) (async)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000002, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)

4m31.621785806s ago: executing program 1 (id=1279):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4f23, 0x0, @mcast1}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
r5 = open(&(0x7f0000000100)='./file1\x00', 0x101342, 0x0)
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sendfile(r6, r5, 0x0, 0x1000b)
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000ac0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r9, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, <r10=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r9, 0x0, &(0x7f00002dd000/0x3000)=nil, 0x3000, 0xd})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0xfffffffd, 0xc0950, 0x3d3b4e})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14d0c44eb809cbb6c0ba0ba0d6c64a0000c900ffa1c642aef8c85abc09feee00e9276c378b82a5f4175e511800000000a2d46fecf8ab22a5da9e467a3744bcc7f22f75cb53f6c04bee9ef45aec0e2c0bc72eac154b9d7689f235d1450e1c233b686b0c2ec02048efb57879b3299b767c744e95df", @ANYRES16=r0, @ANYBLOB="150b2abd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0xc880)
ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000180)={0x0, <r11=>0x0, 0x4})
ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(r3, 0xc028644b, &(0x7f0000000280)={r11, 0x0, 0x200000, 0x1c, 0x4, 0x0, 0x1, 0x1ff})

4m31.358750063s ago: executing program 1 (id=1280):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
getdents64(r1, 0x0, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f0000000180)=0x2)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000700)="e2", 0x19fff, 0x40000, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
setrlimit(0x9, &(0x7f00000000c0)={0x8, 0x4})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x84, @local, 0x4e22, 0x3, 'fo\x00', 0x22, 0xaa, 0x72}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

4m30.615497256s ago: executing program 5 (id=1287):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726d754e5f69643d47e8959e1d9d0c078a3282c6f42e30f385d7ea210c5955e24c0eab40b25cb1b122380b61af", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x20040084)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"})
r4 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000002})
syz_open_pts(r3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0)

4m29.602371497s ago: executing program 1 (id=1291):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe47, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x10, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}) (rerun: 32)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r3], 0x15) (async, rerun: 64)
r7 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)

4m29.259679458s ago: executing program 5 (id=1293):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
syz_usb_connect$midi(0x1, 0x5d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x15, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2d, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xa7, 0x7}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x7, 0x40, 0x1, {0xa, 0x25, 0x1, 0x6, "2870e5b5a127"}}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xf, 0x1, 0x6, {0xa, 0x25, 0x1, 0x6, "3491c8fade9a"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xff, 0x6, 0x9, 0x40, 0x93}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f0000000200)=@string={0xcd, 0x3, "8543fca63a88a8e96d2378c1da3ff8bb618df886386a3b6e674db85b1a5034b1b4e4b986c753120f5c7855065d893f4f043cab0b62575c8139fb19a2731cce6ccbb12a81d119ddfa9a17a01076ff03574747eb9096adc36317d6209576d6cbe4e72a386982763b5099f5432ca89c563e18d932e8b24e30a78088df4e115aa1e0baae62e507ccb8f2218ce40919b1d995718f68b2a22fc2a9addc7794353e933bedf7b2caf522a5a114e846b6ebfa1decfd039ca6a225ede7739729bef46b28e3d54a7ff070c4ad72b1aebf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x83, &(0x7f0000000340)=@string={0x83, 0x3, "28c5af828094c0db918d158325708f4b1b3fb4fbfac5b9a4b0bf29fd3ed1fa8731dde0c9a71abca3a85962f278a7234daa93fe27a2740d56a10e5627712b2301670d81295671a56ca47604bc41111e8a825b88251e6b4d5a28f2b0451af8d98fbfb65244fb68cfc8004a2a138629e95f944fb3d3b741a7c21c46432dfd7c42a35e"}}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="07000000010000", 0x7)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='=', 0x1}], 0x1)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) (async)
syz_usb_connect$midi(0x1, 0x5d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x15, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2d, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xa7, 0x7}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x7, 0x40, 0x1, {0xa, 0x25, 0x1, 0x6, "2870e5b5a127"}}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xf, 0x1, 0x6, {0xa, 0x25, 0x1, 0x6, "3491c8fade9a"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xff, 0x6, 0x9, 0x40, 0x93}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f0000000200)=@string={0xcd, 0x3, "8543fca63a88a8e96d2378c1da3ff8bb618df886386a3b6e674db85b1a5034b1b4e4b986c753120f5c7855065d893f4f043cab0b62575c8139fb19a2731cce6ccbb12a81d119ddfa9a17a01076ff03574747eb9096adc36317d6209576d6cbe4e72a386982763b5099f5432ca89c563e18d932e8b24e30a78088df4e115aa1e0baae62e507ccb8f2218ce40919b1d995718f68b2a22fc2a9addc7794353e933bedf7b2caf522a5a114e846b6ebfa1decfd039ca6a225ede7739729bef46b28e3d54a7ff070c4ad72b1aebf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x83, &(0x7f0000000340)=@string={0x83, 0x3, "28c5af828094c0db918d158325708f4b1b3fb4fbfac5b9a4b0bf29fd3ed1fa8731dde0c9a71abca3a85962f278a7234daa93fe27a2740d56a10e5627712b2301670d81295671a56ca47604bc41111e8a825b88251e6b4d5a28f2b0451af8d98fbfb65244fb68cfc8004a2a138629e95f944fb3d3b741a7c21c46432dfd7c42a35e"}}]}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f0000000040)="07000000010000", 0x7) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='=', 0x1}], 0x1) (async)

4m13.471434647s ago: executing program 33 (id=1291):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffe47, &(0x7f0000000280)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x10, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}) (rerun: 32)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r3], 0x15) (async, rerun: 64)
r7 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)

4m13.145118415s ago: executing program 34 (id=1293):
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0)
syz_usb_connect$midi(0x1, 0x5d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x15, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2d, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xa7, 0x7}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x7, 0x40, 0x1, {0xa, 0x25, 0x1, 0x6, "2870e5b5a127"}}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xf, 0x1, 0x6, {0xa, 0x25, 0x1, 0x6, "3491c8fade9a"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xff, 0x6, 0x9, 0x40, 0x93}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f0000000200)=@string={0xcd, 0x3, "8543fca63a88a8e96d2378c1da3ff8bb618df886386a3b6e674db85b1a5034b1b4e4b986c753120f5c7855065d893f4f043cab0b62575c8139fb19a2731cce6ccbb12a81d119ddfa9a17a01076ff03574747eb9096adc36317d6209576d6cbe4e72a386982763b5099f5432ca89c563e18d932e8b24e30a78088df4e115aa1e0baae62e507ccb8f2218ce40919b1d995718f68b2a22fc2a9addc7794353e933bedf7b2caf522a5a114e846b6ebfa1decfd039ca6a225ede7739729bef46b28e3d54a7ff070c4ad72b1aebf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x83, &(0x7f0000000340)=@string={0x83, 0x3, "28c5af828094c0db918d158325708f4b1b3fb4fbfac5b9a4b0bf29fd3ed1fa8731dde0c9a71abca3a85962f278a7234daa93fe27a2740d56a10e5627712b2301670d81295671a56ca47604bc41111e8a825b88251e6b4d5a28f2b0451af8d98fbfb65244fb68cfc8004a2a138629e95f944fb3d3b741a7c21c46432dfd7c42a35e"}}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="07000000010000", 0x7)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='=', 0x1}], 0x1)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) (async)
syz_usb_connect$midi(0x1, 0x5d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x15, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x5, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2d, 0x6}, @ms_header={0x7, 0x24, 0x1, 0xa7, 0x7}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x7, 0x40, 0x1, {0xa, 0x25, 0x1, 0x6, "2870e5b5a127"}}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0xf, 0x1, 0x6, {0xa, 0x25, 0x1, 0x6, "3491c8fade9a"}}}]}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xff, 0x6, 0x9, 0x40, 0x93}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}, {0xcd, &(0x7f0000000200)=@string={0xcd, 0x3, "8543fca63a88a8e96d2378c1da3ff8bb618df886386a3b6e674db85b1a5034b1b4e4b986c753120f5c7855065d893f4f043cab0b62575c8139fb19a2731cce6ccbb12a81d119ddfa9a17a01076ff03574747eb9096adc36317d6209576d6cbe4e72a386982763b5099f5432ca89c563e18d932e8b24e30a78088df4e115aa1e0baae62e507ccb8f2218ce40919b1d995718f68b2a22fc2a9addc7794353e933bedf7b2caf522a5a114e846b6ebfa1decfd039ca6a225ede7739729bef46b28e3d54a7ff070c4ad72b1aebf"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2009}}, {0x83, &(0x7f0000000340)=@string={0x83, 0x3, "28c5af828094c0db918d158325708f4b1b3fb4fbfac5b9a4b0bf29fd3ed1fa8731dde0c9a71abca3a85962f278a7234daa93fe27a2740d56a10e5627712b2301670d81295671a56ca47604bc41111e8a825b88251e6b4d5a28f2b0451af8d98fbfb65244fb68cfc8004a2a138629e95f944fb3d3b741a7c21c46432dfd7c42a35e"}}]}) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f0000000040)="07000000010000", 0x7) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
writev(r1, &(0x7f0000000b80)=[{&(0x7f0000000ac0)='=', 0x1}], 0x1) (async)

2m20.803877844s ago: executing program 2 (id=1797):
r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x10, 0x80002, 0x0)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000280)=0x4, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xfffe, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000, 0x1}, 0x0, 0x34ff, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc-serpent-sse2\x00'}}}]}, 0x138}}, 0x44050)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x28, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x6, 0x0, 0xffffff0c, 0x81, 0xfffffffffffffac8, 0x4, 0x72, 0x8, 0x91}, 0x0)
write(r8, &(0x7f0000000000)="2d000000010001", 0x7)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={r9, 0x6}, &(0x7f0000000100)=0x8)
openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x9, 0x0, 0x6, 0x6, 0xfffffffffffffffb, 0x9, 0x6}, 0x0, 0x0, 0x0, 0x0)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32])

2m19.370664711s ago: executing program 2 (id=1798):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0), 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0) (async)
ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000580)={'\x00', 0x1, 0xdd37, 0x80, 0xa3, 0x81})
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) (async)
ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0)
syz_open_dev$sndctrl(0x0, 0x188, 0x0)
semget$private(0x0, 0x1, 0x3a0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mremap(&(0x7f0000633000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil)

2m17.390475928s ago: executing program 2 (id=1807):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0x2020)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0x19f, 0x0, &(0x7f0000002300)="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", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m17.285478597s ago: executing program 2 (id=1808):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0])
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019380)={r0, 0x0, 0x2d, 0x0, @val=@uprobe_multi={&(0x7f00000192c0)='./file0\x00', &(0x7f0000019300), &(0x7f0000019340), 0x5}}, 0x40)
prlimit64(0x0, 0x7, &(0x7f0000000600)={0x5, 0xa2}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/psched\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x0, 0x24240)
bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000300)={r2, 0x3c, &(0x7f0000000780)}, 0xffffffffffffff27)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x14, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xa}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx  \x00'}, 0x20)
pipe2$watch_queue(&(0x7f0000000a00)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x11, &(0x7f00000193c0)=ANY=[@ANYBLOB="180000000006000018410000fbffffff0000000000000018000d257ebcd01f15a23e422dbff6853d714b0bad6200005701000000000000ff00000000000006fef3f2936f9b8171b2e554251ef6bb11defbc8b14aa59a880115650d4899286bc3ad707c2321c1c8723b855b68a2", @ANYRES32, @ANYBLOB="0000000059000000850000005100000018120000", @ANYRES32, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0xffffff81, 0x19, &(0x7f00000007c0)=""/25, 0x41000, 0x36, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x30000001, 0x9, 0xfffff001, 0x3b4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r2, r5, r6, r7], &(0x7f0000019200), 0x10, 0x823}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r8=>0x0}, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4)
chdir(&(0x7f0000000140)='./file0\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r9, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r9, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000046000000850000002900000585000000070000c72652fc6e3ca900951e64fd9ba07053ce60645149fa754ec67110019312c3c24ace73f245b7e7841a233a336c3530b9f34c5f9a2bb518d1e94193fb25188e0000539a8d998435a716602911aab1e6de5e22ad29dfe2d2ec29dbdfe6d47e3646560f5f0516444f3a2de9f4a8fcb60447f31b76915f38682355d9492e724948409d0d69ce84882285f27f92bbbb74d8eedf00dfb285"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m17.272754318s ago: executing program 2 (id=1809):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) (async)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000001200)={&(0x7f0000001040)=0xfffffffffffffe01, 0x800, &(0x7f0000001080)=[{}], &(0x7f0000001140)})
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018008000002800000003000000000000000f020000002b00000000000000000f02000000f008005f000000000000000000000000000000000000000000000033642d3dace0779c1fe21c34c5df487a3c4fe55d04b7b653172266780300afd0bd9910cd15bf8837ef36d169994e4d2aab21c57e95a0d5d6bf4a145b0f"], &(0x7f0000000340)=""/149, 0x43, 0x95, 0x1}, 0x28) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000004c0)=0x1, 0x4) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async)
r9 = socket$kcm(0x11, 0x3, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x474, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x448, 0x2, [@TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x4, 0x7, 0xd988, 0x3, 0x3, 0xa089, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x1007, 0xffffffb2, 0xeaac, 0x2, 0x5, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x9, 0x10001, 0xc6d, 0x88000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0xffffff9a, 0x3, 0xd, 0xbc, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1000001, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0xd, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x8, 0x6, 0x6, 0x8, 0x6, 0x7ff, 0x100, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x5, 0x2, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0x5, 0x9, 0xb, 0x5, 0x8000, 0x5, 0x6, 0x6, 0xfa, 0x3, 0x3, 0x10, 0x1ff, 0x3, 0x6, 0x60000000, 0x8, 0x2, 0x5, 0x3, 0x4000002, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x3, 0x6e4, 0x1, 0x5, 0x7, 0xb, 0x6, 0x4, 0x7ffffffd, 0x3, 0x99b, 0x9c4, 0x7f, 0x800003, 0x70, 0xff800, 0xfffffffd, 0x7, 0x5, 0xff, 0x7, 0x26, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x5, 0x8, 0x6, 0xe2f3, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x3, 0x1, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x10000, 0x480, 0x64c, 0x8, 0x7, 0x8, 0x6, 0xff, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x2005, 0x4, 0x8, 0x8, 0x1000, 0x7, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x8, 0x10000, 0xb, 0xcf9, 0x8, 0x0, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x4007, 0xc28, 0x2, 0x400, 0x2, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x81, 0x40, 0x0, 0x2, 0x3feb, 0x7, 0x2, 0x100, 0x7, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x1003, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x5, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x474}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r12 = userfaultfd(0x801)
ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)) (async)
syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), 0x0, 0x0) (async)
close(r11)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x6}, 0x80, &(0x7f0000000300)=[{&(0x7f00000006c0)='\'', 0x1}], 0x1}, 0x4) (async)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000401000000000011"], 0x14}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'pim6reg1\x00'})

2m16.8687311s ago: executing program 2 (id=1814):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00'}, 0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8)
quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000200, r9, &(0x7f0000000740)='./file0\x00')
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50)

2m16.598103415s ago: executing program 35 (id=1814):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x12083)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x1000000)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx  \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4   \x00'}, 0x20)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8)
quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000200, r9, &(0x7f0000000740)='./file0\x00')
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r10, 0x0, 0x4, 0x0, &(0x7f00000000c0)="e0b95432ea161d8d0cecdb46d806a86a27ff07000000000000b865b9c9cd7ce6c4cff9d02ea7e5ac27bb430dbd181128", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50)

1m9.433905041s ago: executing program 7 (id=2193):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) (async)
setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000080)=0x8, 0x4) (async)
clock_gettime(0x0, &(0x7f00000001c0)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f00000000c0)=[{r1, 0x51b}], 0x1, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000240)={[0x28b]}, 0x8) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x7f, './file0/../file0/file0\x00'}}) (async)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c000000140011f005000000000000002b"], 0x4c}, 0x1, 0x0, 0x0, 0x40000d1}, 0x8004)

1m9.05770775s ago: executing program 7 (id=2198):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a966fd0ea7482a7d2b63ff2f8e44b7fe934a94d880feb9089c7ebdeb35fffcf29d35d508d840cfc3b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0xb3)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'vlan0\x00', 0x0})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
syz_clone3(&(0x7f0000000680)={0x80000000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xb, 0x0, &(0x7f0000000300)="61df712bc884fed5722780", 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd9726", 0x0}, 0x50)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x2000000)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1f, 0x0, 0x1000000})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r0, <r7=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x11, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1m6.945192722s ago: executing program 7 (id=2209):
ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'})

1m5.732041616s ago: executing program 7 (id=2212):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x442801, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x8000003}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c085}, 0x0)
r4 = syz_pidfd_open(0x0, 0x0)
pidfd_send_signal(r4, 0x9, 0x0, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xff, 0x6, 0x7f, 0xff, 0x2}, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="09ca0f0001071003000600dd0a0002"], 0x3, [{0xa, &(0x7f00000001c0)=@string={0xa, 0x3, "330973aee8d6ba41"}}, {0x4a, &(0x7f0000000240)=@string={0x4a, 0x3, "468388e752aceea4c16da1adf9de2543ec6171e96723bc7ed629f283f314bbd39e2852287e61f4edabf6375725dbe866cb7619e0807b41584c197a86f4e8c2a800eec434773024d2"}}, {0xec, &(0x7f00000002c0)=@string={0xec, 0x3, "a9744f240e9a316761c3e3b3de12492db10e998a52f6c9b199c6e5b06e04360a16ca00081ea0e7a9919e01089d3af19ebc49b050edc699cfe6b9bfd8aca0c27e2106e9bef284dafa71e090beebcaca3716486b0959276c91053e5c3c1e967bbb6bd4121d20d8a3d0aea34342a73212675a1907c02e0caf88052baaac7b89878ea1a7d8b1b20d158944ae4c8035fbe552b85a729424e83684cbc27f7175b25402af4a992d73fd0909ec5dd7f34f1a36d26ecc970eb48c0449c4133a1bbc62872ad761c39ac7efc71dab05dc0c5d72dd11d29b2ecab1784699d2ae0cd930326b6d9627c8e8ae313a8fc918"}}]})
setgroups(0xefff, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e)
getsockopt(r6, 0x111, 0x4, 0x0, &(0x7f0000000080))
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
r8 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000040)={0xf0, 0x2})
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r9, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000006c0)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r9, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r9, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r9, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)
ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000080)=0x2)
sendto$inet(r7, &(0x7f0000000140), 0x0, 0x8005, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

1m5.466316512s ago: executing program 3 (id=2216):
openat$dsp(0xffffffffffffff9c, 0x0, 0x28c9c1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000040)={0x22, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0xfffffffffffffe02}}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffd, 0x0, 0x0)
syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x400, 0x9, 0x1, 0x5}, {0x9, 0x5, 0xc, 0x2, 0x400, 0x7f, 0x2, 0x7f}, {0x9, 0x5, 0x80, 0x3, 0x400, 0xe, 0x56, 0x9}}}}}}]}}, 0x0)
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b8609000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

1m4.8098486s ago: executing program 7 (id=2222):
r0 = gettid() (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async, rerun: 64)
getpid() (async, rerun: 64)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async)
read$msr(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008840) (async)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async)
write$dsp(r1, &(0x7f0000000080)="99", 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
close(r1) (async)
syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00')

1m4.685195209s ago: executing program 3 (id=2223):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20)
r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8601, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x1d9, 0x0, 0x462}]})
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r6, r7, 0x3, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

1m4.445631961s ago: executing program 6 (id=2225):
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) (async)
r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x48c02) (async)
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433", 0x40}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12210}}, 0x20}}, 0x4000000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x40401d4}, 0x240408d0) (async)
read(r0, 0x0, 0xf5) (async)
r2 = syz_io_uring_setup(0x3ee6, &(0x7f0000000000)={0x0, 0xa80c, 0x4, 0x3, 0x326}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f00000001c0)={r0}, 0x1)

1m4.44459811s ago: executing program 3 (id=2226):
syz_clone(0x83200400, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x2, 0x4000010, 0xffffffffffffffff, 0x6a855000)
r0 = userfaultfd(0x80001)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900050073797a310000000008000540000000020900020073797a310000000008000a40fffffff17b00098008000140000000020800084000000001140000001100010000000000000000000900000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, 0x0, 0x40)
close(0x3)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x104})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00003ba000/0x2000)=nil, 0x2000}, 0x1})
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180), 0x10)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x101001, 0x3)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8000000000100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)

1m4.130103516s ago: executing program 3 (id=2229):
fspick(0xffffffffffffffff, 0x0, 0xf00)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
syz_open_dev$dri(0x0, 0xbe, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x0)
madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r2 = creat(&(0x7f0000000000)='./file1\x00', 0xf8)
r3 = fanotify_init(0xf00, 0x1)
fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0)
fallocate(r1, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m3.910255828s ago: executing program 3 (id=2230):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x91}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40884}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000200)={0x5, 0x4})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x440b0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000440)={@mcast2, r4}, 0x14)

1m3.761577029s ago: executing program 6 (id=2231):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r0 = syz_open_procfs(0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r1) (async)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000019c0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x24, r2, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async)
read$FUSE(r0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
ptrace(0x10, 0x1) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r4 = getpid() (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) (async)
socket$netlink(0x10, 0x3, 0x14)

1m3.549319936s ago: executing program 6 (id=2233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]})
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r4=>0x0})
r5 = creat(&(0x7f0000000400)='./file0\x00', 0x128)
write(r3, &(0x7f0000000100)="a33234b885651f60386f40a245bc9708e514211aab7c45547bc452f735ffb51843d282156b2f3e32d0aa13a42779d6e3847d9d641b6345262f57a6e99fa58346e5f17afe8e9d744a2cbdd8b9a9039ed806db6ba8638f7787e1ddacd9a19226b93b4fbb35db62215c72b89833e98755877ad49eb71af1f5f3b6cca9e0ae6e1945303cb6ed4b0e2e5a08a88ce3fd190a5708bfbbeb89f28c870134a60178d1b24f5aed340a50947f4508f3f4aa362f29c4730698fbd4d31d07ee95d6be6f4cceb3b4b0101f156a7266", 0xc8)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="b2b2edaa5c8f09"], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1m3.396868512s ago: executing program 6 (id=2234):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x3, 0xa7e, 0x100070}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'fo\x00', 0x3, 0xa7e, 0x100070}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10048, 0xcd, 0x48}}, 0x44) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x538, 0x368, 0x578, 0x368, 0x190, 0x0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'wg0\x00', {}, {0xff}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth1_to_bridge\x00', {0x6}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x32}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x8, @ipv4=@private=0xa010101, 0x4e23}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) (async)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)

1m3.145998942s ago: executing program 4 (id=2235):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
r0 = getpid() (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9e}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @generic={0x50, 0x8, 0x7, 0x8, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0)

1m3.145593487s ago: executing program 6 (id=2236):
timer_create(0x0, 0x0, &(0x7f0000000300)) (async)
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x32, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x671, &(0x7f0000000500)=0x4) (async)
inotify_rm_watch(0xffffffffffffffff, 0x0) (async)
timer_create(0x3, &(0x7f0000000440)={0x0, 0x3a, 0xc, @thr={&(0x7f0000000140)="f1e53bf9ca28ea06f9d52a249eb2e4e60d7517430156094ee11fbcf53ade518d92c9bd7e0d300ed96053e0c999bbe2e1a6ab1e17c7b84ad00af7d761e3a0c3834fc5e469acde230c4b6943a05705b7048c", &(0x7f0000000340)="3fd42098cf950dfd5444865982ef6e3cf8b713380fe9ddb96ef59ffe0947b78fc9139b8fdaf5ace8e7f5ad031c91f3d0198f36a4ae9b51eabe2c6c06df43a0bec5d55a5e8a578828d313231bad542855103d3e66c11f2f2164045dda9c6a0037cb0f25b2830d602658fced45d5163736abdf4077c0ee9e683fcbe036e0d490060db4cec53e2a71beb35c0f0d7696965a412c417dc4d76e3c83141d2bb17a4be5f9c5497d2d3fcb03af07baa89a397fab0a1e6518f990852334602171b15cf2a08eb7b9a33ddd63ddc654a1dfdfab425d0ce89bc8dc69dc8c2b8a03bcf00ad8d65f82ada06b38a40e36d06ad5781ae519d3921fe9ccfab80cec"}}, &(0x7f0000000480)=<r0=>0x0)
timer_delete(r0)
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
timer_gettime(0x0, &(0x7f0000000280))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2b, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x800000000001003, 0x0, 0x0, 0x0) (async)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x24000810) (async)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) (async)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x80201, 0x0)
readv(r4, &(0x7f00000021c0)=[{&(0x7f00000010c0)=""/3, 0x3}, {0x0}, {0x0}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x4)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) (async)
fsopen(0x0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xda\\', 0x0, 0x0) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0)

1m3.09346438s ago: executing program 8 (id=2237):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async)
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000140)=0x2)

1m3.083749247s ago: executing program 3 (id=2238):
syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x8010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2})
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x400, 0x4, 0x0, 0x3d, 0x0, 'syz1\x00', 0x0})
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0)
ioctl$SNDCTL_DSP_POST(r8, 0x5008, 0x0)
unshare(0x20000400)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18)
setxattr$trusted_overlay_origin(0x0, 0x0, &(0x7f0000000080), 0x2, 0x1)

1m2.156459435s ago: executing program 7 (id=2239):
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1m1.889468858s ago: executing program 8 (id=2240):
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x4008054)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x11})
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getqdisc={0x28, 0x26, 0x25, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0xa, 0xfff3}, {0xc, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x80)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x2, @vbi={0x5, 0x1, 0x6b, 0x31364d59, [0x6, 0x5], [0xa, 0x7], 0x108}})
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1}, 0xc, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}})
mprotect(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsmount(r6, 0x0, 0x6)

1m1.369690753s ago: executing program 4 (id=2241):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setpgid(0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180)=0x1007ff, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_clone3(&(0x7f00000041c0)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async)
pipe(&(0x7f0000000300)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setpgid(0x0, 0x0) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180)=0x1007ff, 0x4) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
syz_clone3(&(0x7f00000041c0)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)

1m1.113946084s ago: executing program 8 (id=2242):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000007006113500000000000bfa000000000000007000000ee0016055e15010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000150600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
pipe2$watch_queue(0x0, 0x80)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)

1m0.886506907s ago: executing program 4 (id=2243):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x28)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000980)={0x0, &(0x7f00000007c0)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x3})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @empty, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0xcc840)
ioctl$KVM_X86_SET_MSR_FILTER(r0, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x90, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000000000000000000033f753e3e75514d9497d269cd7c81fbce99738e872c265b5813e7113dc3fbbbb4023b9a35b3047a9296427429f31a35c439d19830352e053cd738b3286df343491e8051a19c56449b46d17c5de"], 0x9}, 0x1, 0x0, 0x0, 0x100000c7}, 0x4000004)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000040}, 0x4000)
r4 = socket$alg(0x26, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x2000c040)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000740)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m0.039512871s ago: executing program 4 (id=2244):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x3, [0x80000000, 0x3, 0x3ff, 0x5, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x1, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000002, 0x99, 0x20000000, 0x20, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0xe758, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0xf], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x1, 0xfffffffe, 0x2000079, 0x400, 0x0, 0x8001, 0x10000, 0x40000, 0x20007, 0xc0800000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7db, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0xed5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x400, 0x200000, 0x80000000, 0x0, 0x0, 0x475, 0x0, 0x0, 0x0, 0x80, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x8002, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffffc, 0x8003, 0x3, 0xfffffffc, 0x4, 0x800, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x200000, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000680)={0x5, 0x6, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000006c0)={0x0, 0x80000001, 0xb, 0x1, 0x2, [0x0, 0x0, 0x0, r2], [0x1, 0xffff82e6, 0xfffffffd, 0x8], [0x0, 0x62a, 0x7, 0x9], [0xb6, 0x3, 0x2, 0x10]})
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
lsm_list_modules(&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000500)=0x18, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES8=r6], 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x63)
r7 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r7, &(0x7f0000000880)={0x28, 0x0, 0x2711, @host}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])
write$uinput_user_dev(r5, &(0x7f0000000900)={'syz1\x00', {0x2, 0xff, 0x7, 0xd}, 0x32, [0x5, 0x2, 0x5, 0xffffffff, 0x53dcc959, 0x4, 0x2, 0x80000000, 0x4, 0x5, 0x3ff, 0xcfe, 0x9, 0xfffffff8, 0x1, 0x1, 0xa35, 0x8, 0x7fffffff, 0xa, 0x4, 0x9, 0x3, 0x6, 0x4, 0x2, 0x1ff, 0xb0, 0x7, 0xffff5db1, 0x7fffffff, 0x1, 0x81, 0x9, 0x568, 0x1, 0xc, 0x3, 0x7, 0x8, 0x1, 0xa000, 0xc, 0x4, 0xffff, 0xfffffff9, 0x5, 0x9e8, 0x40, 0xfffffefe, 0x4, 0x9d37, 0x2, 0xf, 0x7, 0xb40a, 0x3, 0x9, 0x6, 0xf5b, 0x7, 0x9, 0x80000001, 0xceb3], [0x6, 0x1, 0x3, 0x8, 0x2, 0x962, 0x7ff, 0x1, 0x7f, 0xe5e, 0xffe00000, 0x73, 0xffffffff, 0x6, 0x5, 0x1000, 0xe3ee, 0xa, 0xfffffffa, 0xfffeffff, 0x3, 0x1, 0x1000000, 0xfffffff7, 0xd2aa, 0x1, 0x9, 0x800, 0x3, 0x401, 0x9, 0xa2e, 0x4, 0xc, 0x5, 0x5, 0x2, 0x3, 0xffff, 0x2, 0x800, 0x0, 0xc, 0x1, 0x0, 0x6, 0x2, 0x80, 0x9, 0x1, 0x1, 0x5c4, 0x71, 0x9, 0x5, 0x6, 0xdb, 0x8, 0x8, 0x2b5, 0x200ce, 0xc9b, 0xff1, 0xff], [0x1, 0x0, 0x4, 0x10001, 0x1, 0xfaf, 0x80000001, 0xc3, 0x2, 0x6, 0x400, 0x6c, 0x7f, 0x400, 0x1, 0x80000001, 0x7, 0x72acdd62, 0x19e5, 0xf, 0x6, 0x10001, 0xffffffff, 0xb, 0x2b, 0x1, 0x30, 0x40, 0x1, 0xc616, 0x101, 0x9, 0x2, 0xff, 0x80, 0x0, 0x9, 0x2, 0x7, 0x5, 0x8, 0x0, 0x6, 0x1a01, 0x5, 0x0, 0xd4, 0x7fffffff, 0x699b, 0x1, 0x7, 0x40, 0x0, 0x2, 0xd, 0x1, 0x1, 0x3ff, 0x9, 0x2, 0x2, 0x2bd0, 0x4, 0x3], [0x0, 0x4, 0xfffff000, 0x5, 0x0, 0x2, 0x8, 0x8, 0x9, 0x3, 0x8, 0x899a, 0x4, 0x2, 0x3, 0xc079, 0x9, 0x88, 0x7f, 0x2, 0x6, 0xfff, 0x7, 0x80000, 0x4, 0x8, 0x8, 0xf578, 0x4, 0x10, 0x1000, 0x8, 0x9, 0x9, 0x100, 0xdd51, 0x1, 0x8000, 0x4, 0x0, 0x6, 0x404f, 0xffffffc0, 0xfffffff8, 0x3c268d70, 0x0, 0x1, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, 0x5, 0x5ee, 0x4, 0x4, 0x3ff, 0x5, 0xffff, 0x5492, 0x1, 0x4]}, 0x45c)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)

59.555961528s ago: executing program 6 (id=2245):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x81, 0x0, 0xfffff00c}, {0x6, 0x80, 0x0, 0x1}]}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$urandom(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000080)=0x7, 0x4)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000003c000000060a010400000000000000000100000008000b40fffffffc200004801c0001800b00010065787468647200000c0002800800034000000000140000001100010008000000000000000700000a"], 0xb0}}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000005c001280110001006272696467655f736c6176650000000044000580050005000000000005002000010000000500"], 0x7c}}, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r11)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg2\x00'})

59.34431224s ago: executing program 8 (id=2246):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ<P\xc9\xfd-d\xb5Y\x1d\x87\xf4)F\xefw\xe0X\xb0\xa4\x99O\x8c\xb1\xcav\xc2ce\x94\x1c\xe0Ep\xb6\xed\xe3S\xb7fY\x8d\x13\xb6\xe2\x92\xe4Q\xe43 \xb2\x8b\xda\x00\x84\x03\xdd\xd9\xf6w\xad\x83\xcdE\x1e(:Q\x8a\xca*\xb0\xd6\xba\xa4\x183\xec\xc1\xfdf&\xd9\xe7\xff\xd5\n+\xcc\x01\x93s\x01#\xec\x95\x00'/1196, 0x2)
fcntl$addseals(r1, 0x409, 0xc) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) (async)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080))

58.781687631s ago: executing program 8 (id=2247):
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x0)
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000000)={0x6, 0x3})
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000b00)=[{0x401, 0x9c01, 0x6f, &(0x7f0000000700)="4f0359fda33566036f592cd0d2a646099cfec2a01320f5103733d7af4591ed8c4d592c1e54303b98e4825f5a4ef4e8a3dacf0b052dc8e4837e75b67753411f5576fa76f2fb1332b6e2ac5e1882445976d108cff0923ca0563b20ae4f4b548e505ef71307278744ac04ea889727105e"}], 0x1})

58.090118689s ago: executing program 4 (id=2248):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
r5 = fsmount(r4, 0x0, 0x82)
fchdir(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r6, &(0x7f0000000240)=""/182, 0x74) (async)
lseek(r6, 0xfffffffffffffffe, 0x1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000100)={r1}) (async)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00e4ca5fa9647fd328cb42a9526a1e2b0000", @ANYRES16=r7, @ANYBLOB="10002dbd7000fedbdf250300000006000b001e00000014000600fe8000000000000000000000000000aa14000600fc02000000000000000000000000000114000600ff020000000000000000000000000001080004000000000014000600000000000000000000000000000000010800010029272c00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}}, 0x24) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

57.761840957s ago: executing program 4 (id=2249):
r0 = socket(0x1e, 0x2, 0x0)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000600)={&(0x7f0000000580)=[{&(0x7f0000000140)="46f8c8162afddc7bd2faad98a95b59ef6f10502b6da28a4e0e765aabb25468532fd4ffbcd906ddef2ee7f8f740108a2626c0c6751adb8a34408f6bf97e2b17060e6557826344c12ed616aa6233597d1a534677079f1ac6dffd12f0951d34edc12776db58b01bd45b09cb38e90469ce98daafec0811b45bfb44ffb6873d7edb3542616627249d96a94056adb0029c12ec0122305f", 0x94}, {&(0x7f0000000200)="9527c626b5080130b0842032f17534450c21bd1e3b7878e99e10378df7c2b06aa5b680b4562c2feb76e24e15f2d259d2fe", 0x31}, {&(0x7f0000000240)="0c5ae09f6ec0fdfdd9ef1df63b32fd9360097ba354ab94c7ffaf1be3423df44612cab66ed2e4187d2598aa685478a52a6d318b1f58d4b376f5b0103ea9176015aeea4ba20ed0c8f6da8e519af18c1189a9269ad86da08d7a07068ad2f4e1acf9108582552b8f3216c55e53e7e2643c648ee79d1b0ffa8b42f4e18ae750b78c0cde240fa3f728aa499ddafaf502468e41990f5c6935f77c5d4899ca5303dc6e1fcf323581bae91e1293406dabcdbd56bf9979517cec0e", 0xb6}, {&(0x7f0000000300)="fbe7b52b3ee56de4e4cd6050187ba585426195652adf8bdc705be422c42cacf207f349910169831500d28b3f92c5b8299dd6b6c5cd367a7eb0e532e6c8db9cf647fcc1a424081536f56148532435606fa4ff99566408254bc158173d8bd7807164a87b221e2d22741d5f4c4256f33188f8e2ec2d5cf9604e0423a0269443c46c0656d610", 0x84}, {&(0x7f00000003c0)="107451950e2c368f9d144b4d857f9380b8a318736be4dd4c4d42509f67dcec043566e0d9232e27fdeadf10a151a867ebab5741c6eaad6ea9641f9b84bd984a1492d4a6ff2bdf4f566276544127251c46f7454aa3eaeff0c1739ab676c7fdf327ebf4694cd84547a7caea2318617a3619d1239b89b08ee9daec9a1e5dd9b4b54d00a90378a3add40aef5f861bf6baa9deeb0ffbd46fb56ffd09c903906c7cd441be35ed7537693c334b0ccdd346a4f2ffa14aed94b3b56d1e68457132c090061f7fe87f7e0c95b5e3adaaa2f705a3da", 0xcf}, {&(0x7f00000004c0)="d0968bb58a5c850d3ba8d9ac12b928e8d3441860bb370d09963da2e844e32b764e0fd16289e4a7bc3eef0eeb7a35d8c6edc2b05d223a871c71fb8d90a4f6fc3f5fc7785d412962f6e74a59d5369fdb9843873469e1b63c6a388bd265704d0db00a3584b7f626ac05c253df45ee7ab562c614ab032a93410e87effd63c2b7461df3ffd4df56440672b4fe59873bca3142e85973b2e5cb50c535a803d8879c4d86cdd7ec66c04eae54bd18fa0e74479e5478c618e2a4", 0xb5}], 0x6, 0xa, 0x0, 0x8001, 0x2, 0x8001, 0x7, 0x2}) (async)
syz_usb_connect$uac2(0x2, 0x89, &(0x7f0000000680)=ANY=[@ANYBLOB="2816d1922b393dfc700cde9d174ccd28f69cb8e7bc8ff8614cf460904c121e75ba2597f3d601d042a06e2d5c8fe275e338441f1a3cf7ce819f352ebf584710d82a89c2a765b1606c42bdef4aca890ee14097f7ab60827fc014bc60746db9fd2acb6469503911397e5194829e351968ae52115ab22c3f8365fcd694b4fd369d1c1682748bb85e2be2fb24e1bc55d19e01489dc0f933d14a19bc6b08f159e9b7c25eabefe1bd2ca79b262ae606200aefd462dc261f9b3d47d57b20a2f52e27c9d60d845667c14dcdea60f2acbdba3e4ac0866f6fd709177eb3853eb146", @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESDEC=r0], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

56.340789635s ago: executing program 8 (id=2250):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x4b)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000024ec0)=[{0x0, 0x0, &(0x7f00000194c0)=[{&(0x7f000001f040)="e43af73f703724212ecbdb454f03912f8760fe03aa9c11b67a189e383d7316ba58d3bb91bf152b2a4a7f106bd07b38adf35c2d8ff117c09e63e3238eb45bad83309cbe1bd314d3ced29a116facb246e39e27eb260322e2f7a6020e5cc1a36e3152537ed419ec03c7a51a18306d32098dcae7744ed7ffc84accc19b8c2f8cc1722797b10e3e30ef4162701574a4822f3a35a188a42ec80204fdc20f8f310b893259fa3805ecab02a17ff5c71919f865be680166e208b0a5502640c5d63986f3b9df47edb1253a371f6d20dc0471c2192993e5eda2f57fdaf783f9a68cc82b", 0xde}, {&(0x7f0000019200)="4565eb3539a4519ebb8cec3872f09a497796ee1ea8dffc3689c6cdd5db38be290be278bee0287b7886f6a7d9c21dfc7936f7a1d8afbd99b143be9b73fadbb069b0a31fe02f0d71d1dce3b28039e3015e5f0b6fa3df6b0562da3220d80c9d221e2ae4378a55ddbd29af936a2ad89eaf3ba3a384ba24a267ddca6d78af4762a6eae237fce9ba044b7cedff3a18147a0afe225b40fcc0856f7b8541106b5d8191a7f2be9b9da15bc66c54530a4f9b1e130dc45595fb48627de0a67b263a1bdbee66da2b0c3970ab805388ff57de6792b045b37b648b9a70", 0xd6}, {&(0x7f0000019300)="c9652501f43e8e5abd198c06a98c235b8b0f6617d0e0ba719ab49e8768801965c937e0b7b4", 0x25}, {&(0x7f0000019340)="f2b057ac3c2bb409db982c30eef3dcee9b0f5127c32407173cc75b07d5f3773def5f2506e0e5c1", 0x27}, {&(0x7f0000019400)}], 0x5, &(0x7f0000019540)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x20040041}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60040080}], 0x3, 0x40801)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000019080)=[{&(0x7f0000025080)=""/82, 0xffffff02}], 0x1}, 0x10042)

0s ago: executing program 36 (id=2239):
syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

usb 3-1: USB disconnect, device number 89
[  510.203218][ T5830] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71
[  510.238145][ T5830] usb 8-1: USB disconnect, device number 21
[  510.285290][T12906] bridge: RTM_NEWNEIGH with invalid state 0x1
[  510.293696][T12907] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1731'.
[  510.447907][T12912] lo speed is unknown, defaulting to 1000
[  510.521974][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1734'.
[  510.537259][T12917] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.544639][ T5727] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  510.555257][T12917] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.701293][ T5726] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  510.710193][ T5727] usb 7-1: Using ep0 maxpacket: 8
[  510.717268][ T5727] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  510.733259][ T5727] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  510.744880][ T5727] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  510.761933][ T5727] usb 7-1: config 250 has no interface number 0
[  510.776027][ T5727] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  510.788169][ T5727] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  510.798703][ T5727] usb 7-1: config 250 interface 228 altsetting 255 has an endpoint descriptor with address 0xA2, changing to 0x82
[  510.810907][ T5727] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 100
[  510.821411][ T5727] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  510.851092][ T5727] usb 7-1: config 250 interface 228 has no altsetting 0
[  510.859773][ T5727] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  510.872809][ T5726] usb 5-1: Using ep0 maxpacket: 8
[  510.883197][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  510.892136][ T5727] usb 7-1: Product: syz
[  510.900288][ T5727] usb 7-1: SerialNumber: syz
[  510.905057][ T5726] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  510.919862][ T5727] hub 7-1:250.228: bad descriptor, ignoring hub
[  510.927411][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  510.941060][ T5727] hub 7-1:250.228: probe with driver hub failed with error -5
[  510.949506][ T5726] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  510.960390][ T5726] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  510.979280][ T5726] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.005334][ T5726] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  511.018224][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.049863][ T5726] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  511.138720][ T5727] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  511.299795][   T24] usb 8-1: new low-speed USB device number 22 using dummy_hcd
[  511.375071][T12930] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1738'.
[  511.465971][   T24] usb 8-1: device descriptor read/64, error -71
[  511.495925][T12655] Bluetooth: hci3: Frame reassembly failed (-84)
[  511.642073][ T5727] usb 7-1: USB disconnect, device number 15
[  511.653473][ T5727] usblp0: removed
[  511.769891][   T24] usb 8-1: new low-speed USB device number 23 using dummy_hcd
[  512.036995][   T24] usb 8-1: device descriptor read/64, error -71
[  512.133280][ T5727] usb 5-1: USB disconnect, device number 108
[  512.241789][   T24] usb usb8-port1: attempt power cycle
[  512.614067][   T24] usb 8-1: new low-speed USB device number 24 using dummy_hcd
[  512.657186][   T24] usb 8-1: device descriptor read/8, error -71
[  512.776453][   T29] audit: type=1400 audit(1779655609.356:1135): avc:  denied  { create } for  pid=12960 comm="syz.3.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  512.956113][   T24] usb 8-1: new low-speed USB device number 25 using dummy_hcd
[  513.119902][   T24] usb 8-1: device descriptor read/8, error -71
[  513.256045][   T24] usb usb8-port1: unable to enumerate USB device
[  513.344886][T12977] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12978] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12977]
[  513.364010][T12977] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  513.372314][T12977] overlayfs: missing 'lowerdir'
[  513.405069][ T5743] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  513.513603][T12985] netlink: 'syz.6.1752': attribute type 1 has an invalid length.
[  513.560599][T12985] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  513.570963][ T5743] usb 5-1: device descriptor read/64, error -71
[  513.578029][T12985] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  513.601912][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1752'.
[  513.625705][T12987] Bluetooth: MGMT ver 1.23
[  513.673035][ T5620] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  513.679575][ T5615] Bluetooth: hci3: command 0x1003 tx timeout
[  513.832466][ T5743] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  513.854691][T12991] input: syz0 as /devices/virtual/input/input53
[  513.971453][ T5743] usb 5-1: device descriptor read/64, error -71
[  513.978502][T12994] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1753'.
[  514.100579][ T5743] usb usb5-port1: attempt power cycle
[  514.189346][T12994] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  514.387948][   T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  514.536942][ T5743] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  514.581971][ T5743] usb 5-1: device descriptor read/8, error -71
[  514.591646][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  514.668484][T13011] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  515.011322][   T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  515.030429][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.047677][   T24] usb 7-1: config 0 descriptor??
[  515.232107][ T5743] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  515.277257][ T5743] usb 5-1: device descriptor read/8, error -71
[  515.403566][ T5743] usb usb5-port1: unable to enumerate USB device
[  515.749982][T13017] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  516.307191][   T29] audit: type=1400 audit(1779655612.659:1136): avc:  denied  { listen } for  pid=13018 comm="syz.2.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  517.783486][T13031] hfsplus: unable to find HFS+ superblock
[  517.816469][   T24] usbhid 7-1:0.0: can't add hid device: -71
[  517.845670][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  517.889735][   T24] usb 7-1: USB disconnect, device number 16
[  518.243421][T13048] Mount JFS Failure: -5
[  519.304005][   T24] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  519.583485][   T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  519.604896][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'.
[  519.627167][   T24] usb 4-1: config 0 has no interface number 0
[  519.659468][   T24] usb 4-1: config 0 interface 41 has no altsetting 0
[  519.692854][   T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  519.712905][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.737773][   T24] usb 4-1: Product: syz
[  519.753934][   T24] usb 4-1: Manufacturer: syz
[  519.780969][T13065] lo speed is unknown, defaulting to 1000
[  519.814489][   T24] usb 4-1: SerialNumber: syz
[  519.834766][   T24] usb 4-1: config 0 descriptor??
[  520.075708][T13058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1772'.
[  520.249018][T13074] netlink: 'syz.7.1768': attribute type 1 has an invalid length.
[  520.257070][T13074] netlink: 760 bytes leftover after parsing attributes in process `syz.7.1768'.
[  521.003557][T13096] 
ÿ: renamed from dummy0 (while UP)
[  521.014436][T13093] batadv_slave_0: entered promiscuous mode
[  521.016185][T13096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1781'.
[  521.020761][T13092] batadv_slave_0: left promiscuous mode
[  521.036338][ T5830] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  521.075340][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'.
[  521.165905][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'.
[  521.207195][ T5830] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  521.233439][ T5830] usb 7-1: config 0 has no interface number 0
[  521.248335][ T5830] usb 7-1: config 0 interface 41 has no altsetting 0
[  521.255880][T13103] xt_hashlimit: size too large, truncated to 1048576
[  521.286622][ T5830] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  521.302255][ T5830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.326979][ T5830] usb 7-1: Product: syz
[  521.333556][ T5830] usb 7-1: Manufacturer: syz
[  521.338722][   T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  521.355528][ T5830] usb 7-1: SerialNumber: syz
[  521.427700][ T5830] usb 7-1: config 0 descriptor??
[  521.435865][   T24] usb 4-1: USB disconnect, device number 87
[  521.594928][T13113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1785'.
[  521.611795][T13113] netlink: 'syz.4.1785': attribute type 1 has an invalid length.
[  523.551939][   T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  523.585994][T13126] xt_l2tp: missing protocol rule (udp|l2tpip)
[  523.752130][   T24] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  523.767892][   T24] usb 8-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  523.777363][   T24] usb 8-1: Product: syz
[  523.793207][   T24] usb 8-1: config 0 descriptor??
[  523.828310][   T24] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  523.886338][   T24] usb 8-1: Detected FT232H
[  523.918244][ T5830] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  524.268725][ T5830] usb 7-1: USB disconnect, device number 17
[  524.738722][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  524.774846][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  524.789329][   T24] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  524.841785][   T24] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  524.889193][   T24] usb 8-1: USB disconnect, device number 26
[  524.937161][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  524.975116][   T24] ftdi_sio 8-1:0.0: device disconnected
[  525.272223][T13151] Scaler: =================  START STATUS  =================
[  525.279846][T13151] Scaler: ==================  END STATUS  ==================
[  525.367890][T13161] netlink: 'syz.2.1797': attribute type 40 has an invalid length.
[  525.397258][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  525.862129][   T24] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  526.491794][T13151] syz.3.1795 (13151): drop_caches: 2
[  526.546867][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  526.580727][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  526.603390][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  526.649532][   T24] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  526.692049][   T24] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  526.757888][   T24] usb 7-1: Manufacturer: syz
[  526.793607][   T24] usb 7-1: config 0 descriptor??
[  526.829343][T13156] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  526.904885][   T24] igorplugusb 7-1:0.0: endpoint incorrect
[  527.093010][   T24] usb 7-1: USB disconnect, device number 18
[  528.030867][ T5743] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  528.102298][T13186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  528.338798][T13187] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  528.538159][ T5743] usb 8-1: device descriptor read/64, error -71
[  528.678416][    T9] libceph: connect (1)[c::]:6789 error -101
[  528.686933][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  528.833458][T13206] overlayfs: missing 'workdir'
[  528.886898][ T5743] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  528.966512][    T9] libceph: connect (1)[c::]:6789 error -101
[  528.981465][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  529.029316][ T5743] usb 8-1: device descriptor read/64, error -71
[  529.156691][ T5743] usb usb8-port1: attempt power cycle
[  529.454222][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  529.470893][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  529.530051][ T5743] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  529.542455][   T10] libceph: connect (1)[c::]:6789 error -101
[  529.559023][ T5743] usb 8-1: device descriptor read/8, error -71
[  529.568096][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  529.638534][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  529.651135][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  529.666142][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  530.163227][T13233] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.170412][T13233] bridge0: port 2(bridge_slave_1) entered listening state
[  530.177764][T13233] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.184914][T13233] bridge0: port 1(bridge_slave_0) entered listening state
[  530.218935][T13233] macsec0: left promiscuous mode
[  530.224139][T13233] macsec0: left allmulticast mode
[  530.230029][T13233] veth1_macvtap: left allmulticast mode
[  530.237657][T13233] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  530.250869][T13233] bridge2: left allmulticast mode
[  530.265104][ T5743] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  530.291688][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  530.300034][ T5743] usb 8-1: device descriptor read/8, error -71
[  530.306407][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  530.313804][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  530.366985][T13200] ceph: No mds server is up or the cluster is laggy
[  530.432826][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  530.445196][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  530.488952][ T5743] usb usb8-port1: unable to enumerate USB device
[  530.782926][T13249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  531.628964][T13263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'.
[  532.222952][    T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  532.736609][    T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  532.793375][ T5615] Bluetooth: hci2: command tx timeout
[  532.807624][    T9] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  532.838878][T13225] lo speed is unknown, defaulting to 1000
[  533.143748][    T9] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  533.153657][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.162346][    T9] usb 8-1: Product: syz
[  533.227382][T13286] F2FS-fs: Conflicting test_dummy_encryption options
[  534.116293][    T9] usb 8-1: Manufacturer: syz
[  534.120964][    T9] usb 8-1: SerialNumber: syz
[  534.203489][    T9] cdc_ncm 8-1:1.0: skipping garbage
[  534.958745][ T5615] Bluetooth: hci2: command tx timeout
[  535.035321][T13225] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.052274][T13225] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.072672][T13225] bridge_slave_0: entered allmulticast mode
[  535.089093][T13225] bridge_slave_0: entered promiscuous mode
[  535.099725][T13225] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.107005][T13225] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.114368][T13225] bridge_slave_1: entered allmulticast mode
[  535.123464][T13225] bridge_slave_1: entered promiscuous mode
[  535.176617][T13225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.189246][T13225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.238496][T13225] team0: Port device team_slave_0 added
[  535.266672][T13225] team0: Port device team_slave_1 added
[  535.312001][T13225] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.319080][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.345633][T13225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.359553][T13225] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.366858][T13225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  535.402043][T13225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.444186][T13225] hsr_slave_0: entered promiscuous mode
[  535.450929][T13225] hsr_slave_1: entered promiscuous mode
[  535.573747][T13312] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  535.853345][T13225] debugfs: 'hsr0' already exists in 'hsr'
[  535.860806][T13225] Cannot create hsr debugfs directory
[  535.873663][    T9] cdc_ncm 8-1:1.0: bind() failure
[  535.894341][    T9] usbtest 8-1:1.1: probe with driver usbtest failed with error -71
[  535.919714][    T9] usb 8-1: USB disconnect, device number 31
[  535.986493][  T804] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  536.188014][  T804] usb 5-1: Using ep0 maxpacket: 32
[  536.206725][  T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.230614][  T804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  536.257680][  T804] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  536.273716][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.281794][  T804] usb 5-1: Product: syz
[  536.289953][  T804] usb 5-1: Manufacturer: syz
[  536.324940][  T804] usb 5-1: SerialNumber: syz
[  536.631543][T13225] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  536.656261][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  536.676367][T13225] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  536.704117][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  536.726934][T13225] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  536.742720][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1842'.
[  536.764009][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  536.786995][T13225] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  536.811489][T13225] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  537.827437][ T5615] Bluetooth: hci2: command tx timeout
[  538.169499][T13225] 8021q: adding VLAN 0 to HW filter on device bond0
[  538.197974][T13225] 8021q: adding VLAN 0 to HW filter on device team0
[  538.213231][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.220378][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  538.241999][ T9774] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.249124][ T9774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.812724][   T29] audit: type=1400 audit(1779655633.714:1137): avc:  denied  { setattr } for  pid=13385 comm="syz.7.1854" name="NETLINK" dev="sockfs" ino=45968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  539.740852][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.909224][  T804] usb 5-1: interface 1 not found
[  540.007798][ T5615] Bluetooth: hci2: command tx timeout
[  540.018174][  T804] usb 5-1: USB disconnect, device number 113
[  540.077154][ T5743] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  540.188460][T13225] veth0_vlan: entered promiscuous mode
[  540.201555][T13225] veth1_vlan: entered promiscuous mode
[  540.249722][T13225] veth0_macvtap: entered promiscuous mode
[  540.251465][ T5743] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  540.271664][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.279693][ T5743] usb 4-1: Product: syz
[  540.282113][T13225] veth1_macvtap: entered promiscuous mode
[  540.284530][ T5743] usb 4-1: Manufacturer: syz
[  540.308828][ T5743] usb 4-1: SerialNumber: syz
[  540.309532][T13225] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.329039][ T5743] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  540.330007][T13225] batman_adv: batadv0: Interface activated: batadv_slave_1
[  540.347556][T13429] binder: BINDER_SET_CONTEXT_MGR already set
[  540.353654][ T5734] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  540.356569][T13429] binder: 13428:13429 ioctl 4018620d 200000000040 returned -16
[  540.380585][ T9774] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  540.390416][ T9774] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  540.405781][ T9774] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  540.431923][ T9774] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.666950][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.686391][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.037725][ T5743] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  541.047761][   T10] usb 4-1: USB disconnect, device number 88
[  541.052056][ T3392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.062878][ T3392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.231327][ T5743] usb 5-1: Using ep0 maxpacket: 8
[  541.237693][ T5743] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  541.246234][ T5743] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  541.257061][ T5743] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  541.312038][ T5743] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  541.322133][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.337017][ T5743] usbtmc 5-1:16.0: bulk endpoints not found
[  541.445162][ T5830] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  541.630929][ T5734] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  541.672536][ T5734] ath9k_htc: Failed to initialize the device
[  541.674898][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  541.690451][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  541.702840][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.724661][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.743840][ T5830] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.771073][ T5830] usb 9-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  541.782469][   T24] usb 5-1: USB disconnect, device number 114
[  541.802009][ T5830] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.815873][ T5830] usb 9-1: config 0 descriptor??
[  543.800039][T13475] binder: BINDER_SET_CONTEXT_MGR already set
[  543.806099][T13475] binder: 13469:13475 ioctl 4018620d 200000004a80 returned -16
[  544.163435][T13479] syzkaller0: entered promiscuous mode
[  544.185727][T13479] syzkaller0: entered allmulticast mode
[  544.220562][T13483] FAULT_INJECTION: forcing a failure.
[  544.220562][T13483] name failslab, interval 1, probability 0, space 0, times 0
[  544.234437][T13483] CPU: 0 UID: 0 PID: 13483 Comm: syz.3.1878 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  544.234465][T13483] Tainted: [L]=SOFTLOCKUP
[  544.234471][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  544.234480][T13483] Call Trace:
[  544.234487][T13483]  <TASK>
[  544.234494][T13483]  dump_stack_lvl+0x100/0x190
[  544.234523][T13483]  should_fail_ex.cold+0x5/0xa
[  544.234546][T13483]  should_failslab+0xc2/0x120
[  544.234566][T13483]  kmem_cache_alloc_node_noprof+0x81/0x6f0
[  544.234594][T13483]  ? __alloc_skb+0x140/0x710
[  544.234618][T13483]  __alloc_skb+0x140/0x710
[  544.234634][T13483]  ? __alloc_skb+0x5b7/0x710
[  544.234651][T13483]  ? __pfx___alloc_skb+0x10/0x10
[  544.234668][T13483]  ? igmp_group_added+0x724/0x9a0
[  544.234689][T13483]  ? igmp_group_added+0x1d9/0x9a0
[  544.234713][T13483]  inet_ifmcaddr_notify+0xc7/0x1b0
[  544.234737][T13483]  ? __pfx_inet_ifmcaddr_notify+0x10/0x10
[  544.234765][T13483]  ? __local_bh_enable_ip+0x9e/0x120
[  544.234795][T13483]  ____ip_mc_inc_group+0x802/0x10c0
[  544.234821][T13483]  ? __pfx_____ip_mc_inc_group+0x10/0x10
[  544.234851][T13483]  __ip_mc_join_group+0x451/0x5e0
[  544.234880][T13483]  do_ip_setsockopt+0x2f3f/0x3310
[  544.234903][T13483]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  544.234922][T13483]  ? __pfx_sock_has_perm+0x10/0x10
[  544.234946][T13483]  ? selinux_netlbl_socket_setsockopt+0x134/0x470
[  544.234983][T13483]  ip_setsockopt+0x5a/0xf0
[  544.235003][T13483]  tcp_setsockopt+0xa7/0x100
[  544.235025][T13483]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  544.235058][T13483]  do_sock_setsockopt+0xf3/0x1d0
[  544.235084][T13483]  __sys_setsockopt+0x195/0x220
[  544.235108][T13483]  __x64_sys_setsockopt+0xbd/0x160
[  544.235125][T13483]  ? do_syscall_64+0x90/0xf80
[  544.235151][T13483]  ? lockdep_hardirqs_on+0x78/0x100
[  544.235176][T13483]  do_syscall_64+0x10b/0xf80
[  544.235201][T13483]  ? clear_bhb_loop+0x40/0x90
[  544.235223][T13483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.235241][T13483] RIP: 0033:0x7fbba3d9ce59
[  544.235257][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  544.235272][T13483] RSP: 002b:00007fbba4b7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  544.235291][T13483] RAX: ffffffffffffffda RBX: 00007fbba4015fa0 RCX: 00007fbba3d9ce59
[  544.235302][T13483] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003
[  544.235312][T13483] RBP: 00007fbba4b7b090 R08: 000000000000000c R09: 0000000000000000
[  544.235323][T13483] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  544.235333][T13483] R13: 00007fbba4016038 R14: 00007fbba4015fa0 R15: 00007ffc4d857948
[  544.235358][T13483]  </TASK>
[  544.526541][T13478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  544.533899][ T5830] usbhid 9-1:0.0: can't add hid device: -71
[  544.533988][ T5830] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  544.541685][ T5830] usb 9-1: USB disconnect, device number 2
[  544.557826][T13472] tipc: Resetting bearer <eth:syzkaller0>
[  544.586668][   T24] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  544.596704][T13472] tipc: Disabling bearer <eth:syzkaller0>
[  544.639565][T13484] tmpfs: Bad value for 'huge'
[  544.767451][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  544.780507][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  544.793003][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  544.804169][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  544.816094][   T24] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  544.825936][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.834060][   T24] usb 8-1: Product: syz
[  544.838444][   T24] usb 8-1: Manufacturer: syz
[  544.843129][   T24] usb 8-1: SerialNumber: syz
[  544.851546][   T24] usb 8-1: config 0 descriptor??
[  544.918286][   T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  545.351082][   T24] adutux 8-1:0.0: Could not retrieve serial number
[  545.410722][   T24] adutux 8-1:0.0: probe with driver adutux failed with error -5
[  545.741593][   T10] usb 4-1: Using ep0 maxpacket: 32
[  546.902073][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[  546.913065][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.921228][   T10] usb 4-1: Product: syz
[  546.925443][   T10] usb 4-1: Manufacturer: syz
[  546.930119][   T10] usb 4-1: SerialNumber: syz
[  547.068793][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1884'.
[  547.090517][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1884'.
[  547.221338][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  547.237201][   T10] usb 4-1: invalid MIDI out EP 0
[  547.774966][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  547.776454][    T9] usb 8-1: USB disconnect, device number 32
[  547.799005][   T10] usb 4-1: USB disconnect, device number 89
[  547.870993][T13514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=13514 comm=syz.8.1886
[  547.876143][ T5622] udevd[5622]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  547.988980][T13517] lo speed is unknown, defaulting to 1000
[  548.196330][T13520] FAULT_INJECTION: forcing a failure.
[  548.196330][T13520] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  548.254014][T13520] CPU: 0 UID: 0 PID: 13520 Comm: syz.8.1890 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  548.254041][T13520] Tainted: [L]=SOFTLOCKUP
[  548.254046][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  548.254055][T13520] Call Trace:
[  548.254060][T13520]  <TASK>
[  548.254066][T13520]  dump_stack_lvl+0x100/0x190
[  548.254089][T13520]  should_fail_ex.cold+0x5/0xa
[  548.254113][T13520]  _copy_from_iter+0x1f4/0x1690
[  548.254140][T13520]  ? __pfx__copy_from_iter+0x10/0x10
[  548.254162][T13520]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  548.254185][T13520]  copy_page_from_iter+0x238/0x300
[  548.254209][T13520]  tun_build_skb.constprop.0+0x2ea/0x18f0
[  548.254238][T13520]  ? __pfx_tun_build_skb.constprop.0+0x10/0x10
[  548.254259][T13520]  ? unwind_get_return_address+0x59/0xa0
[  548.254282][T13520]  ? arch_stack_walk+0xa6/0xf0
[  548.254315][T13520]  ? _kstrtoull+0x13c/0x1f0
[  548.254331][T13520]  ? __pfx__kstrtoull+0x10/0x10
[  548.254351][T13520]  tun_get_user+0x16d6/0x3c20
[  548.254381][T13520]  ? __pfx_tun_get_user+0x10/0x10
[  548.254403][T13520]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  548.254427][T13520]  ? find_held_lock+0x2b/0x80
[  548.254441][T13520]  ? tun_get+0x191/0x370
[  548.254458][T13520]  ? tun_get+0x191/0x370
[  548.254482][T13520]  tun_chr_write_iter+0xdc/0x200
[  548.254505][T13520]  vfs_write+0x6ac/0x1070
[  548.254522][T13520]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  548.254545][T13520]  ? __pfx_vfs_write+0x10/0x10
[  548.254559][T13520]  ? find_held_lock+0x2b/0x80
[  548.254586][T13520]  ksys_write+0x12a/0x250
[  548.254601][T13520]  ? __pfx_ksys_write+0x10/0x10
[  548.254618][T13520]  ? rcu_is_watching+0x12/0xc0
[  548.254643][T13520]  do_syscall_64+0x10b/0xf80
[  548.254663][T13520]  ? clear_bhb_loop+0x40/0x90
[  548.254680][T13520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.254694][T13520] RIP: 0033:0x7f9c9175d68e
[  548.254707][T13520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  548.254720][T13520] RSP: 002b:00007f9c9260afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  548.254735][T13520] RAX: ffffffffffffffda RBX: 00007f9c9260b6c0 RCX: 00007f9c9175d68e
[  548.254744][T13520] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8
[  548.254753][T13520] RBP: 00007f9c9260b090 R08: 0000000000000000 R09: 0000000000000000
[  548.254762][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.254779][T13520] R13: 00007f9c91a16038 R14: 00007f9c91a15fa0 R15: 00007ffdd23eea28
[  548.254799][T13520]  </TASK>
[  548.806419][T13535] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1893'.
[  549.318743][T13549] ip6erspan0: entered allmulticast mode
[  549.376938][T13553] x_tables: duplicate underflow at hook 4
[  549.620167][   T24] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[  550.155846][   T24] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  550.164487][   T24] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  550.174007][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  550.194693][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  550.211264][   T24] usb 4-1: config 1 has no interface number 0
[  550.225523][   T24] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  550.236217][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.285026][ T5726] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[  550.325483][   T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  550.510550][ T5726] usb 8-1: unable to get BOS descriptor or descriptor too short
[  550.530018][   T24] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  550.584767][ T5726] usb 8-1: not running at top speed; connect to a high speed hub
[  550.598001][   T24] snd_usb_pod 4-1:1.1: invalid control EP
[  550.609550][   T24] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  550.617451][ T5726] usb 8-1: config 1 has an invalid interface number: 162 but max is 0
[  550.626551][ T5726] usb 8-1: config 1 has no interface number 0
[  550.636028][ T5726] usb 8-1: config 1 interface 162 has no altsetting 0
[  550.643348][   T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  550.655047][ T5726] usb 8-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=70.6b
[  550.664920][ T5726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.679364][   T24] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  550.688178][ T5726] usb 8-1: Product: syz
[  550.695306][ T5726] usb 8-1: Manufacturer: syz
[  550.729902][ T5726] usb 8-1: SerialNumber: syz
[  550.775002][T13564] lo speed is unknown, defaulting to 1000
[  550.990806][   T24] usb 4-1: USB disconnect, device number 90
[  551.007497][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.027071][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.071723][ T5726] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e
[  551.565238][ T5726] gspca_sn9c20x: Write register 1000 failed -71
[  551.603758][ T5726] gspca_sn9c20x: Device initialization failed
[  551.626230][ T5726] gspca_sn9c20x 8-1:1.162: probe with driver gspca_sn9c20x failed with error -71
[  551.659206][ T5726] usb 8-1: USB disconnect, device number 33
[  552.052415][T13584] batman_adv: batadv0: Adding interface: dummy0
[  552.067260][T13584] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  552.095857][T13589] input: syz1 as /devices/virtual/input/input57
[  552.165336][T13584] batman_adv: batadv0: Interface activated: dummy0
[  552.184697][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'.
[  552.262084][T13584] batadv0: mtu less than device minimum
[  552.269570][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.280831][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.292011][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.303254][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.314280][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.325173][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.335966][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.346863][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.357672][T13584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  552.523640][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'.
[  552.665473][    T9] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[  552.830167][T13611] FAULT_INJECTION: forcing a failure.
[  552.830167][T13611] name failslab, interval 1, probability 0, space 0, times 0
[  552.844799][T13611] CPU: 0 UID: 0 PID: 13611 Comm: syz.6.1914 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  552.844828][T13611] Tainted: [L]=SOFTLOCKUP
[  552.844835][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  552.844846][T13611] Call Trace:
[  552.844854][T13611]  <TASK>
[  552.844861][T13611]  dump_stack_lvl+0x100/0x190
[  552.844890][T13611]  should_fail_ex.cold+0x5/0xa
[  552.844916][T13611]  should_failslab+0xc2/0x120
[  552.844937][T13611]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  552.844964][T13611]  ? dst_alloc+0x99/0x1a0
[  552.844987][T13611]  dst_alloc+0x99/0x1a0
[  552.845007][T13611]  rt_dst_alloc+0x35/0x3a0
[  552.845036][T13611]  ip_route_input_rcu.part.0+0x5e0/0xe20
[  552.845062][T13611]  ? __pfx_ip_route_input_rcu.part.0+0x10/0x10
[  552.845092][T13611]  ip_route_input_noref+0x1c3/0x2e0
[  552.845115][T13611]  ? __pfx_ip_route_input_noref+0x10/0x10
[  552.845141][T13611]  ? __pfx_ip_rcv_finish+0x10/0x10
[  552.845165][T13611]  ? __pfx_nf_hook.constprop.0+0x10/0x10
[  552.845192][T13611]  ip_rcv_finish_core+0x459/0x2c30
[  552.845223][T13611]  ip_rcv+0x1c0/0x3c0
[  552.845246][T13611]  ? __pfx_ip_rcv+0x10/0x10
[  552.845274][T13611]  __netif_receive_skb_one_core+0x197/0x1e0
[  552.845303][T13611]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  552.845333][T13611]  ? lock_acquire+0x1b1/0x370
[  552.845364][T13611]  __netif_receive_skb+0x1f/0x120
[  552.845393][T13611]  netif_receive_skb+0x13b/0x7f0
[  552.845419][T13611]  ? tun_build_skb.constprop.0+0x9b5/0x18f0
[  552.845447][T13611]  ? __pfx_netif_receive_skb+0x10/0x10
[  552.845484][T13611]  tun_rx_batched.isra.0+0x3f6/0x750
[  552.845512][T13611]  ? __pfx_tun_rx_batched.isra.0+0x10/0x10
[  552.845545][T13611]  ? rcu_is_watching+0x12/0xc0
[  552.845573][T13611]  ? tun_get_user+0x1cc8/0x3c20
[  552.845602][T13611]  tun_get_user+0x1e31/0x3c20
[  552.845641][T13611]  ? __pfx_tun_get_user+0x10/0x10
[  552.845670][T13611]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  552.845700][T13611]  ? find_held_lock+0x2b/0x80
[  552.845718][T13611]  ? tun_get+0x191/0x370
[  552.845741][T13611]  ? tun_get+0x191/0x370
[  552.845771][T13611]  tun_chr_write_iter+0xdc/0x200
[  552.845800][T13611]  vfs_write+0x6ac/0x1070
[  552.845823][T13611]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  552.845851][T13611]  ? __pfx_vfs_write+0x10/0x10
[  552.845870][T13611]  ? find_held_lock+0x2b/0x80
[  552.845904][T13611]  ksys_write+0x12a/0x250
[  552.845924][T13611]  ? __pfx_ksys_write+0x10/0x10
[  552.845943][T13611]  ? trace_irq_enable.constprop.0+0x31/0x160
[  552.845971][T13611]  ? rcu_is_watching+0x12/0xc0
[  552.846002][T13611]  do_syscall_64+0x10b/0xf80
[  552.846028][T13611]  ? clear_bhb_loop+0x40/0x90
[  552.846051][T13611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.846070][T13611] RIP: 0033:0x7fc53f15d68e
[  552.846085][T13611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  552.846103][T13611] RSP: 002b:00007fc540098fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  552.846121][T13611] RAX: ffffffffffffffda RBX: 00007fc5400996c0 RCX: 00007fc53f15d68e
[  552.846133][T13611] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8
[  552.846144][T13611] RBP: 00007fc540099090 R08: 0000000000000000 R09: 0000000000000000
[  552.846156][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.846167][T13611] R13: 00007fc53f416128 R14: 00007fc53f416090 R15: 00007ffcfc1f2798
[  552.846193][T13611]  </TASK>
[  553.535991][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.552534][    T9] usb 8-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  553.561762][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.577924][    T9] usb 8-1: Product: syz
[  553.582206][    T9] usb 8-1: Manufacturer: syz
[  553.587993][    T9] usb 8-1: SerialNumber: syz
[  553.597894][    T9] usb 8-1: config 0 descriptor??
[  553.894544][    T9] cdc_subset 8-1:0.0: probe with driver cdc_subset failed with error -71
[  553.919889][    T9] usb 8-1: USB disconnect, device number 34
[  554.213752][   T29] audit: type=1400 audit(1779655648.126:1138): avc:  denied  { write } for  pid=13621 comm="syz.6.1919" path="socket:[48662]" dev="sockfs" ino=48662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  554.351364][T13625] syz.4.1920 (13625): drop_caches: 2
[  554.372318][T13628] syz.4.1920 (13628): drop_caches: 2
[  554.383695][T13625] syz.4.1920 (13625): drop_caches: 2
[  554.455911][ T5830] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  554.802802][ T5830] usb 4-1: Using ep0 maxpacket: 8
[  554.813749][ T5830] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  554.824311][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  555.361900][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  555.377518][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  555.398704][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  555.412071][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  555.421132][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.514785][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1926'.
[  555.549216][   T29] audit: type=1400 audit(1779655649.380:1139): avc:  denied  { write } for  pid=13648 comm="syz.7.1928" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  555.551605][T13649] nvme_fabrics: unknown parameter or missing value 'a' in ctrl creation request
[  555.667770][ T5830] usb 4-1: usb_control_msg returned -32
[  555.676941][ T5830] usbtmc 4-1:16.0: can't read capabilities
[  555.705496][T13647] 8021q: adding VLAN 0 to HW filter on device bond1
[  555.715828][T13647] 8021q: adding VLAN 0 to HW filter on device bond3
[  555.722574][   T10] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[  555.734627][T13647] 8021q: adding VLAN 0 to HW filter on device bond4
[  555.748102][    T9] lo speed is unknown, defaulting to 1000
[  555.756531][    T9] syz0: Port: 1 Link ACTIVE
[  555.896391][   T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  555.907784][   T10] usb 5-1: config 0 has no interface number 0
[  555.920910][   T10] usb 5-1: config 0 interface 41 has no altsetting 0
[  555.938768][   T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  555.956845][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.994655][   T10] usb 5-1: Product: syz
[  555.999053][   T10] usb 5-1: Manufacturer: syz
[  556.006228][   T10] usb 5-1: SerialNumber: syz
[  556.020764][ T5830] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  556.030017][   T10] usb 5-1: config 0 descriptor??
[  556.115985][T13665] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1932'.
[  556.428543][ T5830] usb 9-1: Using ep0 maxpacket: 16
[  556.443036][ T5830] usb 9-1: unable to get BOS descriptor or descriptor too short
[  556.452031][ T5830] usb 9-1: config 9 has an invalid interface number: 236 but max is 0
[  556.463597][ T5830] usb 9-1: config 9 has no interface number 0
[  556.474094][ T5830] usb 9-1: config 9 interface 236 altsetting 9 bulk endpoint 0xA has invalid maxpacket 1023
[  556.485091][ T5830] usb 9-1: config 9 interface 236 has no altsetting 0
[  556.494329][ T5830] usb 9-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=b9.3b
[  556.511396][T13669] usbtmc 4-1:16.0: usb_control_msg returned -32
[  556.517709][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.538694][ T5830] usb 9-1: Product: syz
[  556.546465][ T5830] usb 9-1: Manufacturer: syz
[  556.554235][ T5830] usb 9-1: SerialNumber: syz
[  556.566755][T13655] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  556.825258][   T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  556.825720][ T5830] usb 9-1: USB disconnect, device number 3
[  556.892115][   T10] usb 5-1: USB disconnect, device number 115
[  557.227093][T13685] syzkaller0: entered promiscuous mode
[  557.233575][T13685] syzkaller0: entered allmulticast mode
[  557.261955][T13685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.276172][T13684] tipc: Resetting bearer <eth:syzkaller0>
[  557.302090][T13684] tipc: Disabling bearer <eth:syzkaller0>
[  557.580714][T13698] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1941'.
[  558.808600][ T5713] usb 4-1: USB disconnect, device number 91
[  558.886437][ T5735] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  559.073842][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  559.279957][    T9] usb 9-1: Using ep0 maxpacket: 16
[  559.289872][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  559.299939][ T5735] usb 5-1: Using ep0 maxpacket: 16
[  559.307104][    T9] usb 9-1: config 42 has an invalid interface number: 178 but max is 0
[  559.316416][    T9] usb 9-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config
[  559.327192][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  559.338496][    T9] usb 9-1: config 42 has no interface number 0
[  559.344876][    T9] usb 9-1: config 42 interface 178 has no altsetting 0
[  559.354477][    T9] usb 9-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5
[  559.364109][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.372983][ T5735] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  559.382690][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.390944][    T9] usb 9-1: Product: syz
[  559.395405][    T9] usb 9-1: Manufacturer: syz
[  559.400439][ T5735] usb 5-1: Product: syz
[  559.404851][    T9] usb 9-1: SerialNumber: syz
[  559.410490][ T5735] usb 5-1: Manufacturer: syz
[  559.416646][ T5735] usb 5-1: SerialNumber: syz
[  559.445046][ T5735] usb 5-1: config 0 descriptor??
[  559.453699][ T5735] hub 5-1:0.0: bad descriptor, ignoring hub
[  559.459734][ T5735] hub 5-1:0.0: probe with driver hub failed with error -5
[  559.470325][T13726] syzkaller0: entered promiscuous mode
[  559.470498][ T5735] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  559.491503][T13726] syzkaller0: entered allmulticast mode
[  559.533126][T13726] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  559.541858][T13725] tipc: Resetting bearer <eth:syzkaller0>
[  559.598108][T13725] tipc: Disabling bearer <eth:syzkaller0>
[  559.611279][ T5726] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  559.761074][ T5726] usb 4-1: device descriptor read/64, error -71
[  559.915715][T13737] vlan2: entered allmulticast mode
[  559.942527][ T5713] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  560.038713][ T5726] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  560.124191][ T5713] usb 8-1: Using ep0 maxpacket: 8
[  560.133220][ T5713] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  560.144002][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.152120][ T5713] usb 8-1: Product: syz
[  560.156388][ T5713] usb 8-1: Manufacturer: syz
[  560.161037][ T5713] usb 8-1: SerialNumber: syz
[  560.224600][ T5726] usb 4-1: device descriptor read/64, error -71
[  560.242666][ T5713] usb 8-1: config 0 descriptor??
[  560.243126][    T9] uvcvideo 9-1:42.178: probe with driver uvcvideo failed with error -22
[  560.252060][ T5713] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  560.293559][   T24] usb 5-1: USB disconnect, device number 116
[  560.294242][    T9] usb 9-1: USB disconnect, device number 4
[  560.353494][ T5726] usb usb4-port1: attempt power cycle
[  560.723774][ T5726] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  560.763941][T13750] can: request_module (can-proto-0) failed.
[  560.767028][ T5726] usb 4-1: device descriptor read/8, error -71
[  560.808840][ T5713] gspca_sonixj: reg_w1 err -110
[  560.815278][ T5713] sonixj 8-1:0.0: probe with driver sonixj failed with error -110
[  561.013264][   T24] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  561.450476][ T5726] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  561.458122][   T24] usb 7-1: device descriptor read/64, error -71
[  561.480899][T13767] ip6erspan0: entered allmulticast mode
[  561.493820][ T5726] usb 4-1: device descriptor read/8, error -71
[  561.631770][ T5726] usb usb4-port1: unable to enumerate USB device
[  561.716415][   T24] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  561.748703][    T9] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  561.759158][ T5830] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  561.866297][   T24] usb 7-1: device descriptor read/64, error -71
[  561.920633][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.932704][    T9] usb 5-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  561.940764][ T5830] usb 9-1: Using ep0 maxpacket: 8
[  561.941808][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.948657][ T5830] usb 9-1: config 1 has an invalid interface number: 220 but max is 2
[  561.954878][    T9] usb 5-1: Product: syz
[  561.963421][ T5830] usb 9-1: config 1 has no interface number 2
[  561.967420][    T9] usb 5-1: Manufacturer: syz
[  561.967437][    T9] usb 5-1: SerialNumber: syz
[  561.973843][ T5830] usb 9-1: config 1 interface 220 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  561.990877][    T9] usb 5-1: config 0 descriptor??
[  562.003924][   T24] usb usb7-port1: attempt power cycle
[  562.011480][ T5830] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  562.020567][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  562.028596][ T5830] usb 9-1: Product: syz
[  562.033337][ T5830] usb 9-1: Manufacturer: syz
[  562.038071][ T5830] usb 9-1: SerialNumber: syz
[  562.219053][    T9] cdc_subset 5-1:0.0: probe with driver cdc_subset failed with error -71
[  562.233182][    T9] usb 5-1: USB disconnect, device number 117
[  562.381908][   T24] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  562.422794][   T24] usb 7-1: device descriptor read/8, error -71
[  562.486799][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  562.497826][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  562.678158][   T24] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[  562.701907][   T24] usb 7-1: device descriptor read/8, error -71
[  562.709250][ T5830] usb 9-1: clock source 0 is not valid, cannot use
[  562.774338][ T5726] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  562.816379][T13774] xt_hashlimit: size too large, truncated to 1048576
[  562.823393][   T24] usb usb7-port1: unable to enumerate USB device
[  562.907970][ T5713] usb 8-1: USB disconnect, device number 35
[  562.915435][ T5726] usb 4-1: device descriptor read/64, error -71
[  562.943750][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.969578][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.987733][ T5830] usb 9-1: 1:1: cannot get freq (v2/v3): err -71
[  562.999240][ T5830] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  563.136628][ T5830] usb 9-1: USB disconnect, device number 5
[  563.753679][T10023] udevd[10023]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  563.779043][ T5726] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  563.786724][   T24] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  563.823857][T13782] syzkaller0: entered promiscuous mode
[  563.829411][T13782] syzkaller0: entered allmulticast mode
[  563.852557][T13782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  563.868753][T13781] tipc: Resetting bearer <eth:syzkaller0>
[  563.887209][T13781] tipc: Disabling bearer <eth:syzkaller0>
[  563.939637][ T5726] usb 4-1: device descriptor read/64, error -71
[  563.960566][   T24] usb 5-1: Using ep0 maxpacket: 16
[  563.972935][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  563.991195][   T24] usb 5-1: config 1 has an invalid interface number: 78 but max is 0
[  564.011823][   T24] usb 5-1: config 1 has no interface number 0
[  564.019550][   T24] usb 5-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64
[  564.029787][   T24] usb 5-1: config 1 interface 78 has no altsetting 0
[  564.034899][T13786] syz.6.1970 (13786): drop_caches: 2
[  564.038697][   T24] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57
[  564.050475][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'.
[  564.064344][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.072197][T13786] geneve1: entered promiscuous mode
[  564.083101][ T5726] usb usb4-port1: attempt power cycle
[  564.094201][   T24] usb 5-1: Product: syz
[  564.098675][   T24] usb 5-1: Manufacturer: syz
[  564.104250][   T24] usb 5-1: SerialNumber: syz
[  564.121165][T13776] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  564.149989][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'.
[  564.473602][   T24] spcp8x5 5-1:1.78: SPCP8x5 converter detected
[  564.482966][   T24] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  564.494516][   T24] usb 5-1: USB disconnect, device number 118
[  564.506780][   T24] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  565.020654][    T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  565.020665][ T5726] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  565.035813][ T5734] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  565.047634][   T24] spcp8x5 5-1:1.78: device disconnected
[  565.055742][ T5726] usb 4-1: device descriptor read/8, error -71
[  565.189416][ T5734] usb 7-1: device descriptor read/64, error -71
[  565.212601][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  565.220720][    T9] usb 9-1: not running at top speed; connect to a high speed hub
[  565.229358][    T9] usb 9-1: config 1 has an invalid interface number: 188 but max is 0
[  565.237696][    T9] usb 9-1: config 1 has no interface number 0
[  565.244084][    T9] usb 9-1: config 1 interface 188 has no altsetting 0
[  565.252285][    T9] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=6e.45
[  565.261652][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.269936][    T9] usb 9-1: Product: syz
[  565.274092][    T9] usb 9-1: Manufacturer: syz
[  565.279431][    T9] usb 9-1: SerialNumber: syz
[  565.317735][ T5830] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  565.331159][ T5726] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  565.360714][ T5726] usb 4-1: device descriptor read/8, error -71
[  565.445918][ T5734] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  565.478552][ T5726] usb usb4-port1: unable to enumerate USB device
[  565.508397][    T9] radio-si470x 9-1:1.188: could not find interrupt in endpoint
[  565.511405][ T5830] usb 8-1: config 0 has no interfaces?
[  565.517736][    T9] radio-si470x 9-1:1.188: probe with driver radio-si470x failed with error -5
[  565.529648][ T5830] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  565.539777][ T5830] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.549024][ T5830] usb 8-1: Product: syz
[  565.563751][ T5830] usb 8-1: Manufacturer: syz
[  565.569652][ T5830] usb 8-1: SerialNumber: syz
[  565.575960][    T9] radio-raremono 9-1:1.188: this is not Thanko's Raremono.
[  565.582061][ T5830] usb 8-1: config 0 descriptor??
[  565.583458][    T9] usbhid 9-1:1.188: couldn't find an input interrupt endpoint
[  565.606106][ T5734] usb 7-1: device descriptor read/64, error -71
[  565.634444][    T9] usb 9-1: USB disconnect, device number 6
[  565.790966][ T5734] usb usb7-port1: attempt power cycle
[  565.816851][   T29] audit: type=1400 audit(1779655658.981:1140): avc:  denied  { search } for  pid=13806 comm="syz.3.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.363879][   T29] audit: type=1400 audit(1779655658.990:1141): avc:  denied  { search } for  pid=13806 comm="syz.3.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.399207][   T29] audit: type=1400 audit(1779655658.990:1142): avc:  denied  { mounton } for  pid=13806 comm="syz.3.1976" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.422375][   T29] audit: type=1400 audit(1779655658.990:1143): avc:  denied  { read } for  pid=13806 comm="syz.3.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.445027][   T29] audit: type=1400 audit(1779655658.990:1144): avc:  denied  { read } for  pid=13806 comm="syz.3.1976" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.467235][   T29] audit: type=1400 audit(1779655658.990:1145): avc:  denied  { read open } for  pid=13806 comm="syz.3.1976" path="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.490574][   T29] audit: type=1400 audit(1779655658.990:1146): avc:  denied  { read } for  pid=13806 comm="syz.3.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.533462][   T29] audit: type=1400 audit(1779655658.990:1147): avc:  denied  { read } for  pid=13806 comm="syz.3.1976" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  566.557878][   T29] audit: type=1400 audit(1779655659.645:1148): avc:  denied  { unmount } for  pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  566.724295][ T5734] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  566.765165][ T5734] usb 7-1: device descriptor read/8, error -71
[  567.476793][ T5734] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  567.614474][   T24] usb 8-1: USB disconnect, device number 36
[  567.714127][ T5734] usb 7-1: device not accepting address 26, error -71
[  567.714354][ T5734] usb usb7-port1: unable to enumerate USB device
[  567.793869][T13832] netlink: 'syz.4.1983': attribute type 29 has an invalid length.
[  568.085495][ T5830] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  568.126258][T13841] sit0: entered promiscuous mode
[  568.138706][   T24] usb 8-1: new full-speed USB device number 37 using dummy_hcd
[  568.148450][T13841] netlink: 'syz.8.1986': attribute type 1 has an invalid length.
[  568.188594][T13841] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1986'.
[  568.268466][ T5830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.283424][T13846] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  568.313782][ T5830] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.332712][ T5830] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  568.346478][T13846] CIFS mount error: No usable UNC path provided in device string!
[  568.346478][T13846] 
[  568.357830][ T5830] usb 5-1: config 0 interface 0 has no altsetting 0
[  568.365762][   T24] usb 8-1: config 32 has an invalid descriptor of length 250, skipping remainder of the config
[  568.381045][ T5830] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  568.393904][   T24] usb 8-1: config 32 has 0 interfaces, different from the descriptor's value: 1
[  568.407474][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.423373][T13846] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  568.424594][   T24] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  568.434653][   T29] audit: type=1400 audit(1779655661.405:1149): avc:  denied  { watch_mount } for  pid=13849 comm="syz.8.1989" path="/33" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  568.482744][ T5830] usb 5-1: config 0 descriptor??
[  568.493794][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.534240][   T24] usb 8-1: Product: syz
[  568.544331][   T24] usb 8-1: Manufacturer: syz
[  568.552948][   T24] usb 8-1: SerialNumber: syz
[  568.706252][T13859] syzkaller0: entered promiscuous mode
[  568.712222][T13859] syzkaller0: entered allmulticast mode
[  568.737171][T13859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  568.895535][T13830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.910591][T13830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.944529][   T24] usb 8-1: USB disconnect, device number 37
[  568.954585][ T5830] hid (null): report_id 1207967084 is invalid
[  568.965694][ T5830] hid (null): unknown global tag 0xe
[  568.989502][ T5830] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0015/input/input58
[  569.064170][ T5830] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0015/input/input59
[  569.122782][T11374] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  569.198805][ T5830] kye 0003:0458:5012.0015: input,hiddev0,hidraw0: USB HID v7f.fd Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0
[  569.305083][T11374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.319116][    T9] usb 5-1: USB disconnect, device number 119
[  569.324413][T11374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.343163][T11374] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.353454][T11374] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  569.363072][T11374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.376205][T11374] usb 4-1: config 0 descriptor??
[  569.431788][   T24] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  569.615267][   T24] usb 8-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  569.649899][   T24] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  569.674924][   T24] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  569.689641][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.698084][   T24] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  569.699194][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.707683][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.728787][T13864] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  569.753356][T13862] kAFS: unable to lookup cell ''
[  569.816482][ T5713] tipc: Node number set to 4262694933
[  570.014237][T11374] hid-rmi 0003:0461:4E72.0016: item fetching failed at offset 0/11
[  570.026548][T11374] hid-rmi 0003:0461:4E72.0016: parse failed
[  570.033855][T11374] hid-rmi 0003:0461:4E72.0016: probe with driver hid-rmi failed with error -22
[  570.308811][ T5713] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  570.501206][ T5713] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  570.509818][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.520816][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.534040][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.541486][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.550974][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.561954][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.569368][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.578309][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.589209][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.596872][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.605767][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.616789][T11374] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  570.624456][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.633115][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.642114][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.653281][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.661514][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.670477][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.681568][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.688932][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.699247][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.710678][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.718138][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  570.727275][ T5713] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  570.738496][ T5713] usb 5-1: config 0 interface 0 has no altsetting 0
[  570.746764][ T5713] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  570.764870][ T5713] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  570.774518][ T5713] usb 5-1: Product: syz
[  570.780892][ T5713] usb 5-1: Manufacturer: syz
[  570.785710][ T5713] usb 5-1: SerialNumber: syz
[  570.791867][T11374] usb 9-1: Using ep0 maxpacket: 16
[  570.801790][T11374] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  570.811158][T11374] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.817299][T13890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  570.820449][ T5713] usb 5-1: config 0 descriptor??
[  570.832540][T11374] usb 9-1: Product: syz
[  570.836969][T11374] usb 9-1: Manufacturer: syz
[  570.841850][T11374] usb 9-1: SerialNumber: syz
[  570.851462][ T5713] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  570.865809][T11374] usb 9-1: config 0 descriptor??
[  570.888067][T11374] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  570.906794][T11374] usb 9-1: Detected FT-X
[  571.042697][T13894] x_tables: duplicate underflow at hook 1
[  571.291366][T11374] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  571.298530][T11374] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  571.306124][T11374] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71
[  571.315646][T11374] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  571.327707][T11374] usb 9-1: USB disconnect, device number 7
[  571.345882][T11374] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  571.356542][T11374] ftdi_sio 9-1:0.0: device disconnected
[  571.869315][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  571.869331][   T29] audit: type=1804 audit(1779655664.652:1151): pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2006" name="bus" dev="ramfs" ino=50572 res=1 errno=0
[  571.917269][   T29] audit: type=1804 audit(1779655664.689:1152): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.6.2006" name="bus" dev="ramfs" ino=50572 res=1 errno=0
[  572.201236][T13912] lo speed is unknown, defaulting to 1000
[  572.267211][   T24] aiptek 8-1:17.0: Aiptek using 400 ms programming speed
[  572.304999][   T24] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input60
[  572.370580][   T24] usb 8-1: USB disconnect, device number 38
[  572.376525][    C1] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  572.409651][T13924] netlink: 'syz.8.2013': attribute type 7 has an invalid length.
[  572.427100][T13924] netlink: 'syz.8.2013': attribute type 8 has an invalid length.
[  572.459043][T13919] netlink: 'syz.8.2013': attribute type 7 has an invalid length.
[  572.466883][T13919] netlink: 'syz.8.2013': attribute type 8 has an invalid length.
[  572.614635][T13915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13915 comm=syz.6.2011
[  573.004281][T13926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  573.046025][T13929] syzkaller0: entered promiscuous mode
[  573.051733][T13929] syzkaller0: entered allmulticast mode
[  573.064236][T13925] tipc: Resetting bearer <eth:syzkaller0>
[  573.085209][T13925] tipc: Disabling bearer <eth:syzkaller0>
[  573.240939][    C1] usb 5-1: yurex_control_callback - control failed: -2
[  573.283365][   T29] audit: type=1400 audit(1779655665.981:1153): avc:  denied  { setopt } for  pid=13938 comm="syz.8.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  573.287116][   T24] usb 5-1: USB disconnect, device number 120
[  573.332460][   T24] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  573.407087][T13943] sit0: left promiscuous mode
[  573.472821][T13941] can0: slcan on ttyS3.
[  573.482983][ T5713] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  573.490967][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'.
[  573.522585][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'.
[  573.653876][   T29] audit: type=1404 audit(1779655666.318:1154): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  573.674780][ T5713] usb 8-1: Using ep0 maxpacket: 16
[  573.722000][   T29] audit: type=1400 audit(1779655666.374:1155): avc:  denied  { read } for  pid=13940 comm="syz.4.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[  573.788867][   T29] audit: type=1400 audit(1779655666.374:1156): avc:  denied  { ioctl } for  pid=13936 comm="syz.7.2017" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  573.850892][   T29] audit: type=1400 audit(1779655666.449:1158): avc:  denied  { search } for  pid=13954 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  573.909457][   T29] audit: type=1400 audit(1779655666.449:1157): avc:  denied  { read write } for  pid=11193 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  573.960487][   T29] audit: type=1400 audit(1779655666.505:1159): avc:  denied  { bpf } for  pid=13936 comm="syz.7.2017" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[  574.006662][   T29] audit: type=1400 audit(1779655666.505:1160): avc:  denied  { search } for  pid=13959 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  575.780571][T13996] syzkaller0: left promiscuous mode
[  576.035240][T14000] ip6erspan0: entered allmulticast mode
[  576.123485][T14001] ip6erspan0: entered allmulticast mode
[  576.756369][T13937] can0 (unregistered): slcan off ttyS3.
[  576.785619][ T5713] usb 8-1: device descriptor read/all, error -71
[  577.236225][   T29] kauditd_printk_skb: 197 callbacks suppressed
[  577.236237][   T29] audit: type=1400 audit(1779655925.677:1358): avc:  denied  { search } for  pid=14033 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.310534][   T29] audit: type=1400 audit(1779655925.751:1359): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.370358][   T29] audit: type=1400 audit(1779655925.751:1360): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.429204][   T29] audit: type=1400 audit(1779655925.751:1361): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.478494][   T29] audit: type=1400 audit(1779655925.751:1362): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.561339][   T29] audit: type=1400 audit(1779655925.770:1363): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.641573][T14051] audit: audit_backlog=65 > audit_backlog_limit=64
[  577.648669][   T29] audit: type=1400 audit(1779655925.770:1364): avc:  denied  { search } for  pid=14035 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0
[  577.685160][T14051] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  577.686262][T14039] audit: audit_backlog=65 > audit_backlog_limit=64
[  577.807488][T14057] syzkaller0: entered promiscuous mode
[  577.889492][T14063] syzkaller0: entered promiscuous mode
[  577.910151][T14063] syzkaller0: entered allmulticast mode
[  578.566893][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2054'.
[  578.808535][T14078] bond1: entered promiscuous mode
[  578.846636][T14078] 8021q: adding VLAN 0 to HW filter on device bond1
[  580.294406][T14104] syzkaller0: entered promiscuous mode
[  580.315436][T14104] syzkaller0: entered allmulticast mode
[  581.480119][T14135] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  581.659828][T14142] syzkaller0: entered promiscuous mode
[  581.680349][T14142] syzkaller0: entered allmulticast mode
[  582.517120][T14153] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22
[  582.550486][T14153] netdevsim netdevsim7: Direct firmware load for . failed with error -22
[  582.582637][   T29] kauditd_printk_skb: 6661 callbacks suppressed
[  582.582655][   T29] audit: type=1400 audit(1779655930.648:7891): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  582.702080][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  582.709844][   T29] audit: type=1400 audit(1779655930.648:7892): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  582.744531][ T5276] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64
[  582.762992][ T5612] audit: audit_backlog=65 > audit_backlog_limit=64
[  582.770017][ T5276] audit: backlog limit exceeded
[  582.775200][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  582.787320][   T29] audit: type=1400 audit(1779655930.648:7893): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  582.788620][ T5612] audit: audit_lost=48 audit_rate_limit=0 audit_backlog_limit=64
[  582.818814][ T5276] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64
[  583.028826][T14175] netlink: 'syz.4.2086': attribute type 10 has an invalid length.
[  583.062885][T14175] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  583.267668][T14178] serio: Serial port ptm0
[  583.467534][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2081'.
[  583.793309][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2092'.
[  584.015185][T14211] xt_CT: You must specify a L4 protocol and not use inversions on it
[  584.040920][T14211] xt_CT: You must specify a L4 protocol and not use inversions on it
[  584.357842][T14221] lo speed is unknown, defaulting to 1000
[  584.595266][T14233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=14233 comm=syz.7.2101
[  584.656329][T14228] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2101'.
[  584.682799][T14230] wireguard0: entered promiscuous mode
[  584.707110][T14228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2101'.
[  584.731340][T14230] wireguard0: entered allmulticast mode
[  584.819131][T14237] netlink: 'syz.3.2103': attribute type 1 has an invalid length.
[  584.923850][T14237] 8021q: adding VLAN 0 to HW filter on device bond2
[  585.085735][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2106'.
[  585.146843][T14243] bond2: (slave geneve3): making interface the new active one
[  585.208133][T14243] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  585.459625][T14257] ip6tnl0: left promiscuous mode
[  585.471143][T14257] bridge0: port 1(
1¾x9ÿ) entered blocking state
[  585.477616][T14257] bridge0: port 1(
1¾x9ÿ) entered forwarding state
[  585.541582][    C1] net_ratelimit: 10 callbacks suppressed
[  585.541599][    C1] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  585.566693][T14257] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  585.614530][T14257] bridge1: left promiscuous mode
[  585.644470][T14257] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.671716][ T9774] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.678859][ T9774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.747021][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  586.053842][T14279] netlink: 'syz.3.2118': attribute type 19 has an invalid length.
[  586.115481][ T9774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  586.124928][T14279] netlink: 'syz.3.2118': attribute type 19 has an invalid length.
[  586.137302][ T9774] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  586.149144][ T9774] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  586.178740][ T9774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  586.204433][ T1121] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  586.214805][ T5726] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  586.677552][    C1] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  586.854995][    C1] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  586.866479][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  586.987918][T14302] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  587.104731][T14305] bridge0: port 3(veth0_to_bridge) entered blocking state
[  587.142007][T14305] bridge0: port 3(veth0_to_bridge) entered disabled state
[  587.158564][T14305] veth0_to_bridge: entered allmulticast mode
[  587.227593][T14305] veth0_to_bridge: entered promiscuous mode
[  587.234142][T14305] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  587.247285][T14305] bridge0: port 3(veth0_to_bridge) entered blocking state
[  587.254562][T14305] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  587.375202][ T1121] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  587.434198][ T1121] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  587.822932][T14332] FAULT_INJECTION: forcing a failure.
[  587.822932][T14332] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  587.848035][T14332] CPU: 1 UID: 0 PID: 14332 Comm: syz.3.2135 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  587.848057][T14332] Tainted: [L]=SOFTLOCKUP
[  587.848061][T14332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  587.848067][T14332] Call Trace:
[  587.848071][T14332]  <TASK>
[  587.848076][T14332]  dump_stack_lvl+0x100/0x190
[  587.848093][T14332]  should_fail_ex.cold+0x5/0xa
[  587.848108][T14332]  _copy_to_user+0x32/0xd0
[  587.848127][T14332]  simple_read_from_buffer+0xcb/0x170
[  587.848142][T14332]  proc_fail_nth_read+0x1af/0x230
[  587.848155][T14332]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  587.848168][T14332]  ? rw_verify_area+0xce/0x6d0
[  587.848178][T14332]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  587.848190][T14332]  vfs_read+0x1e4/0xb30
[  587.848204][T14332]  ? __pfx_vfs_read+0x10/0x10
[  587.848215][T14332]  ? __fget_files+0x215/0x3d0
[  587.848232][T14332]  ? __fget_files+0x21f/0x3d0
[  587.848249][T14332]  ksys_read+0x12a/0x250
[  587.848261][T14332]  ? __pfx_ksys_read+0x10/0x10
[  587.848273][T14332]  ? rcu_is_watching+0x12/0xc0
[  587.848292][T14332]  do_syscall_64+0x10b/0xf80
[  587.848310][T14332]  ? clear_bhb_loop+0x40/0x90
[  587.848323][T14332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.848334][T14332] RIP: 0033:0x7fbba3d5d68e
[  587.848344][T14332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  587.848354][T14332] RSP: 002b:00007fbba1ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  587.848365][T14332] RAX: ffffffffffffffda RBX: 00007fbba1ff66c0 RCX: 00007fbba3d5d68e
[  587.848372][T14332] RDX: 000000000000000f RSI: 00007fbba1ff60a0 RDI: 0000000000000005
[  587.848378][T14332] RBP: 00007fbba1ff6090 R08: 0000000000000000 R09: 0000000000000000
[  587.848385][T14332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.848391][T14332] R13: 00007fbba4016128 R14: 00007fbba4016090 R15: 00007ffc4d857948
[  587.848405][T14332]  </TASK>
[  588.065201][   T29] kauditd_printk_skb: 7551 callbacks suppressed
[  588.065217][   T29] audit: type=1400 audit(1779655935.817:15335): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  588.094867][   T29] audit: type=1400 audit(1779655935.817:15336): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  588.117024][T11374] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  588.132253][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  588.139808][T14334] audit: audit_backlog=65 > audit_backlog_limit=64
[  588.153751][T13225] audit: audit_backlog=65 > audit_backlog_limit=64
[  588.160426][T13225] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64
[  588.173628][ T5276] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64
[  588.174622][T13225] audit: backlog limit exceeded
[  588.184151][T14334] audit: audit_lost=88 audit_rate_limit=0 audit_backlog_limit=64
[  588.203063][   T29] audit: type=1400 audit(1779655935.817:15337): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  589.202410][T14365] lo speed is unknown, defaulting to 1000
[  591.034450][T14405] PKCS7: Unknown OID: [4] 0.0
[  591.058085][T14405] PKCS7: Only support pkcs7_signedData type
[  591.086211][T14405] xt_policy: output policy not valid in PREROUTING and INPUT
[  591.971821][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  593.421612][   T29] kauditd_printk_skb: 10811 callbacks suppressed
[  593.421629][   T29] audit: type=1400 audit(1779655940.828:24713): avc:  denied  { read write } for  pid=14436 comm="syz.8.2172" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0
[  593.509773][   T29] audit: type=1400 audit(1779655940.828:24714): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  593.554199][T14434] lo speed is unknown, defaulting to 1000
[  593.569381][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  593.588067][ T5276] audit: audit_lost=567 audit_rate_limit=0 audit_backlog_limit=64
[  593.617941][   T29] audit: type=1400 audit(1779655940.828:24715): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  593.621250][ T5276] audit: backlog limit exceeded
[  593.720992][   T29] audit: type=1400 audit(1779655940.828:24716): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  593.798936][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  593.810522][   T29] audit: type=1400 audit(1779655940.828:24717): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  593.875217][ T5276] audit: audit_lost=568 audit_rate_limit=0 audit_backlog_limit=64
[  594.293566][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2176'.
[  594.495805][T14455] netlink: 'syz.7.2178': attribute type 2 has an invalid length.
[  594.495805][T14454] netlink: 'syz.7.2178': attribute type 2 has an invalid length.
[  594.495826][T14454] netlink: 'syz.7.2178': attribute type 11 has an invalid length.
[  594.522768][T14454] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2178'.
[  594.565161][T14455] netlink: 'syz.7.2178': attribute type 11 has an invalid length.
[  594.619184][T14455] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2178'.
[  594.623293][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  594.635464][    C0] bridge0: topology change detected, propagating
[  594.645243][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  594.652504][    C0] bridge0: topology change detected, propagating
[  595.774773][T14480] wireguard0: left promiscuous mode
[  595.975424][T14486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2188'.
[  596.602950][T14509] netdevsim netdevsim7: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  596.674097][    C0] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  597.040715][T14526] Cannot find map_set index 135 as target
[  598.768830][   T29] kauditd_printk_skb: 8642 callbacks suppressed
[  598.768847][   T29] audit: type=1400 audit(1779655945.825:33359): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  598.793369][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  598.816894][T14547] audit: audit_backlog=65 > audit_backlog_limit=64
[  598.825482][T13225] audit: audit_backlog=65 > audit_backlog_limit=64
[  598.829578][ T5276] audit: audit_lost=569 audit_rate_limit=0 audit_backlog_limit=64
[  598.854897][T13225] audit: audit_lost=570 audit_rate_limit=0 audit_backlog_limit=64
[  598.858395][T14545] audit: audit_backlog=65 > audit_backlog_limit=64
[  598.878721][T14547] audit: audit_lost=571 audit_rate_limit=0 audit_backlog_limit=64
[  598.886831][ T5276] audit: backlog limit exceeded
[  598.893988][   T29] audit: type=1400 audit(1779655945.825:33360): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  599.027245][T14548] lo speed is unknown, defaulting to 1000
[  600.728555][    C1] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  600.787982][ T5830] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  601.311756][    C1] bridge0: received packet on 
1¾x9ÿ with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  601.460787][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  601.803313][ T5830] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  602.061635][T14620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14620 comm=syz.3.2230
[  602.079704][T14620] netlink: 'syz.3.2230': attribute type 1 has an invalid length.
[  602.140600][T14620] bond3: entered promiscuous mode
[  602.154961][T14620] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.233739][T14625] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[11193] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[14625]
[  602.485910][T14620] 8021q: adding VLAN 0 to HW filter on device bond3
[  602.498039][T14620] bond3: (slave vti0): The slave device specified does not support setting the MAC address
[  602.610133][T14620] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  602.629129][ T5830] IPVS: starting estimator thread 0...
[  602.659316][T14620] bond3: (slave vti0): making interface the new active one
[  602.676512][T14620] vti0: entered promiscuous mode
[  602.715408][T14620] bond3: (slave vti0): Enslaving as an active interface with an up link
[  602.801163][T14636] IPVS: using max 83 ests per chain, 199200 per kthread
[  603.519074][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.531735][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.544643][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.557118][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.569523][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.581906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.594302][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.606733][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.619260][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  603.631737][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  604.125057][   T29] kauditd_printk_skb: 12705 callbacks suppressed
[  604.125074][   T29] audit: type=1400 audit(1779655950.851:43017): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  604.189416][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  604.204656][T14655] audit: audit_backlog=65 > audit_backlog_limit=64
[  604.234860][ T5276] audit: audit_lost=1588 audit_rate_limit=0 audit_backlog_limit=64
[  604.243271][T14655] audit: audit_lost=1589 audit_rate_limit=0 audit_backlog_limit=64
[  604.268405][ T5276] audit: backlog limit exceeded
[  604.280962][T14655] audit: backlog limit exceeded
[  604.288494][   T29] audit: type=1400 audit(1779655950.851:43018): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  604.314615][ T5276] audit: audit_backlog=65 > audit_backlog_limit=64
[  604.322184][T14656] audit: audit_backlog=65 > audit_backlog_limit=64
[  606.197296][T14676] trusted_key: encrypted_key: insufficient parameters specified
[  606.261433][T14677] trusted_key: encrypted_key: insufficient parameters specified
[  608.865993][    C1] net_ratelimit: 11520 callbacks suppressed
[  608.866008][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  608.884494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  608.896916][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  608.909371][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  608.921683][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  608.934011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  608.946272][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  608.958606][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  608.971117][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  608.983498][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  609.698951][   T29] kauditd_printk_skb: 2568 callbacks suppressed
[  609.698969][   T29] audit: type=1400 audit(1779655955.829:44995): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  610.694562][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2245'.
[  613.504161][    C1] sched: DL replenish lagged too much
[  614.219728][    C0] net_ratelimit: 26214 callbacks suppressed
[  614.219749][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  614.219755][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  614.220308][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  614.226015][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  614.238161][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  614.249856][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  614.261981][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  614.273867][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  614.286076][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  614.297687][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.573533][    C0] net_ratelimit: 25610 callbacks suppressed
[  619.573553][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.573898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  619.579795][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.591855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  619.603688][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.615964][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  619.628199][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.640184][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  619.652066][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  619.664249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  619.930081][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  621.655734][   T29] audit: type=1400 audit(1779655956.596:44996): avc:  denied  { module_request } for  pid=14690 comm="syz.6.2245" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[  624.927170][    C1] net_ratelimit: 25726 callbacks suppressed
[  624.927190][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  624.927265][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  624.933657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  624.945310][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  624.957504][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  624.969409][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  624.981579][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  624.993326][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  625.005462][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  625.017327][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.280924][    C0] net_ratelimit: 25813 callbacks suppressed
[  630.280946][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.281236][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  630.287231][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.299346][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  630.311240][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.323336][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  630.334990][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.347248][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  630.359048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  630.371242][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  631.673198][   T29] audit: type=1400 audit(1779655956.999:44997): avc:  denied  { create } for  pid=14690 comm="syz.6.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  635.634684][    C1] net_ratelimit: 25750 callbacks suppressed
[  635.634705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  635.634716][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  635.635045][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  635.641262][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  635.652888][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  635.665008][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  635.676916][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  635.689079][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  635.700709][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  635.712811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  637.519182][   T29] audit: type=1400 audit(1779655958.749:44998): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  640.988306][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  640.988306][    C1] net_ratelimit: 25619 callbacks suppressed
[  640.988331][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  641.000636][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.006855][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  641.018486][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.030528][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  641.042331][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.054601][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  641.066275][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  641.078372][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  646.341881][    C0] net_ratelimit: 25513 callbacks suppressed
[  646.341902][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  646.342386][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  646.348157][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  646.360303][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  646.372113][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  646.384880][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  646.396602][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  646.408746][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  646.420330][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  646.432559][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  651.216414][   T29] audit: type=1400 audit(1779655963.914:44999): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  651.695754][    C0] net_ratelimit: 25873 callbacks suppressed
[  651.695774][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  651.695979][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  651.701958][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  651.714301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  651.726011][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  651.738024][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  651.749854][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  651.762085][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  651.773778][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  651.785828][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.049510][    C1] net_ratelimit: 25739 callbacks suppressed
[  657.049514][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.049529][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  657.050009][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.055659][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.068057][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  657.079940][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.091945][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  657.103634][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  657.115915][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  657.127691][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  658.241062][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  662.403058][    C1] net_ratelimit: 26123 callbacks suppressed
[  662.403078][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  662.403213][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.409468][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  662.421351][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.433584][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  662.445026][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.457276][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  662.469059][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.481306][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  662.492847][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  662.592520][   T29] audit: type=1400 audit(1779655971.794:45000): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  665.045794][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  667.756814][    C0] net_ratelimit: 24861 callbacks suppressed
[  667.756835][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.757040][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  667.763043][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.775191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  667.786758][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.798984][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  667.810761][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.822908][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  667.834440][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  667.846677][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  673.110517][    C0] net_ratelimit: 23257 callbacks suppressed
[  673.110537][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  673.111187][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  673.116685][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  673.129046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  673.140618][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  673.153837][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  673.164823][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  673.177190][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  673.188763][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  673.201440][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  678.464195][    C0] net_ratelimit: 26034 callbacks suppressed
[  678.464215][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  678.464432][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  678.470346][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  678.482731][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  678.494303][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  678.506742][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  678.518057][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  678.530047][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  678.542058][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  678.554215][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  683.817818][    C0] net_ratelimit: 26150 callbacks suppressed
[  683.817839][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.817945][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  683.824078][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.836174][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  683.848043][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.860091][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  683.871653][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.884082][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  683.895459][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  683.907413][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  689.171683][    C0] net_ratelimit: 26255 callbacks suppressed
[  689.171704][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  689.172016][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  689.177827][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  689.190380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  689.201840][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  689.213665][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  689.225597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  689.237964][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  689.249649][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  689.261836][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  694.525263][    C0] net_ratelimit: 26581 callbacks suppressed
[  694.525285][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  694.525293][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  694.526075][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  694.531425][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  694.543311][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  694.555379][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  694.567551][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  694.579158][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  694.591359][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  694.602965][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  699.878936][    C1] net_ratelimit: 26219 callbacks suppressed
[  699.878955][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  699.879037][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  699.885379][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  699.897216][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  699.909551][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  699.921096][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  699.933529][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  699.944967][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  699.956775][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  699.968774][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.232722][    C0] net_ratelimit: 27122 callbacks suppressed
[  705.232743][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.233110][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  705.238882][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.251297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  705.262707][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.275462][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  705.286685][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.298559][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  705.310564][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  705.322906][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  710.586364][    C0] net_ratelimit: 27108 callbacks suppressed
[  710.586386][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  710.586400][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  710.592587][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  710.604472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  710.616452][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  710.628793][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  710.640339][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  710.652552][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  710.664202][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  710.676623][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  715.940302][    C0] net_ratelimit: 26352 callbacks suppressed
[  715.940313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  715.940322][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  715.940615][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  715.947084][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  715.958454][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  715.970306][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  715.982284][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  715.994587][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.006245][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.018830][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  719.402305][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  719.409270][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14670/1:b..l
[  719.417988][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=80785, q=1640 ncpus=2)
[  719.425791][    C1] task:syz.7.2239      state:R  running task     stack:26424 pid:14670 tgid:14657 ppid:11211  task_flags:0x40044c flags:0x00080001
[  719.440912][    C1] Call Trace:
[  719.444201][    C1]  <TASK>
[  719.447131][    C1]  __schedule+0x1295/0x67a0
[  719.451663][    C1]  ? __pfx___schedule+0x10/0x10
[  719.456598][    C1]  ? find_held_lock+0x2b/0x80
[  719.461271][    C1]  ? preempt_schedule_thunk+0x16/0x30
[  719.466637][    C1]  preempt_schedule_common+0x42/0xc0
[  719.471923][    C1]  preempt_schedule_thunk+0x16/0x30
[  719.477117][    C1]  _raw_spin_unlock+0x3e/0x50
[  719.481796][    C1]  __zap_vma_range+0x1791/0x4ba0
[  719.486749][    C1]  ? __pfx___zap_vma_range+0x10/0x10
[  719.492034][    C1]  ? find_held_lock+0x2b/0x80
[  719.496709][    C1]  unmap_vmas+0x299/0x5f0
[  719.501083][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  719.505930][    C1]  ? mas_next_slot+0x10a3/0x1960
[  719.510883][    C1]  exit_mmap+0x1ef/0xa10
[  719.515128][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  719.519889][    C1]  ? rcu_is_watching+0x12/0xc0
[  719.524658][    C1]  ? uprobe_clear_state+0x5f/0x260
[  719.529774][    C1]  ? uprobe_clear_state+0x5f/0x260
[  719.534894][    C1]  ? __lock_acquire+0x4a5/0x2630
[  719.539840][    C1]  ? arch_uprobe_clear_state+0x107/0x150
[  719.545475][    C1]  __mmput+0x12a/0x410
[  719.549549][    C1]  mmput+0x67/0x80
[  719.553275][    C1]  do_exit+0x8b2/0x2af0
[  719.557427][    C1]  ? lock_acquire+0x1b1/0x370
[  719.562106][    C1]  ? find_held_lock+0x2b/0x80
[  719.566781][    C1]  ? __pfx_do_exit+0x10/0x10
[  719.571368][    C1]  ? find_held_lock+0x2b/0x80
[  719.576038][    C1]  ? get_signal+0x7e5/0x2210
[  719.580630][    C1]  do_group_exit+0xd5/0x2a0
[  719.585150][    C1]  get_signal+0x20ff/0x2210
[  719.589667][    C1]  ? __pfx_get_signal+0x10/0x10
[  719.594542][    C1]  ? __pfx___file_ref_put+0x10/0x10
[  719.599739][    C1]  ? inet_stream_connect+0x79/0xa0
[  719.604850][    C1]  arch_do_signal_or_restart+0x91/0x7e0
[  719.610401][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  719.616556][    C1]  ? __pfx___sys_connect+0x10/0x10
[  719.621668][    C1]  ? rcu_is_watching+0x12/0xc0
[  719.626438][    C1]  exit_to_user_mode_loop+0x8b/0x4f0
[  719.631723][    C1]  ? rcu_is_watching+0x12/0xc0
[  719.636491][    C1]  do_syscall_64+0x706/0xf80
[  719.641090][    C1]  ? clear_bhb_loop+0x40/0x90
[  719.645767][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.651655][    C1] RIP: 0033:0x7f436659ce59
[  719.656061][    C1] RSP: 002b:00007f43647b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  719.664465][    C1] RAX: fffffffffffffe00 RBX: 00007f4366816180 RCX: 00007f436659ce59
[  719.672431][    C1] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005
[  719.680397][    C1] RBP: 00007f4366632d6f R08: 0000000000000000 R09: 0000000000000000
[  719.688363][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  719.696354][    C1] R13: 00007f4366816218 R14: 00007f4366816180 R15: 00007ffca1e3e568
[  719.704347][    C1]  </TASK>
[  719.707358][    C1] rcu: rcu_preempt kthread starved for 508 jiffies! g80785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  719.718387][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  719.728366][    C1] rcu: RCU grace-period kthread stack dump:
[  719.734245][    C1] task:rcu_preempt     state:R  running task     stack:28904 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  719.747828][    C1] Call Trace:
[  719.751099][    C1]  <TASK>
[  719.754023][    C1]  __schedule+0x1295/0x67a0
[  719.758543][    C1]  ? __pfx___schedule+0x10/0x10
[  719.763389][    C1]  ? find_held_lock+0x2b/0x80
[  719.768061][    C1]  ? schedule+0x2bf/0x390
[  719.772390][    C1]  schedule+0xdd/0x390
[  719.776459][    C1]  schedule_timeout+0x127/0x280
[  719.781333][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  719.786726][    C1]  ? __pfx_process_timeout+0x10/0x10
[  719.792027][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  719.797835][    C1]  ? prepare_to_swait_event+0xdf/0x4a0
[  719.803295][    C1]  rcu_gp_fqs_loop+0x1a9/0x900
[  719.808058][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  719.813339][    C1]  ? prepare_to_swait_event+0xae/0x4a0
[  719.818795][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  719.823731][    C1]  ? __pfx_rcu_gp_cleanup+0x10/0x10
[  719.828923][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  719.834738][    C1]  rcu_gp_kthread+0x179/0x230
[  719.839410][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  719.844605][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  719.850412][    C1]  ? __kthread_parkme+0x18c/0x230
[  719.855434][    C1]  ? kthread+0x13a/0x450
[  719.859673][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  719.860584][   T29] audit: type=1400 audit(1779655982.780:45001): avc:  denied  { read } for  pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0
[  719.864861][    C1]  kthread+0x370/0x450
[  719.864883][    C1]  ? __pfx_kthread+0x10/0x10
[  719.864904][    C1]  ret_from_fork+0x72b/0xd50
[  719.864928][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  719.864949][    C1]  ? __switch_to+0x800/0x1100
[  719.864974][    C1]  ? __pfx_kthread+0x10/0x10
[  719.864995][    C1]  ret_from_fork_asm+0x1a/0x30
[  719.865031][    C1]  </TASK>
[  719.865040][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  719.865048][    C1] Sending NMI from CPU 1 to CPUs 0:
[  719.865070][    C0] NMI backtrace for cpu 0
[  719.865084][    C0] CPU: 0 UID: 0 PID: 29 Comm: kauditd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  719.865103][    C0] Tainted: [L]=SOFTLOCKUP
[  719.865107][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  719.865116][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x70
[  719.865134][    C0] Code: 8b 05 45 ae 02 12 48 8b 34 24 65 48 8b 15 21 ae 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 11 b9 85 09 <8b> 82 d4 16 00 00 85 c0 74 f1 8b 82 b0 16 00 00 83 f8 02 75 e6 48
[  719.865147][    C0] RSP: 0018:ffffc90000006a88 EFLAGS: 00000246
[  719.865159][    C0] RAX: 0000000080000301 RBX: ffff888091b41140 RCX: ffffffff89632662
[  719.865169][    C0] RDX: ffff88801eed4a00 RSI: ffffffff89630cd3 RDI: ffff88801eed4a00
[  719.865178][    C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  719.865186][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[  719.865195][    C0] R13: 0000000000000020 R14: ffff88802c682000 R15: ffff888091b411c4
[  719.865204][    C0] FS:  0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000
[  719.865219][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  719.865228][    C0] CR2: 000020000000e000 CR3: 000000000e596000 CR4: 00000000003526f0
[  719.865236][    C0] Call Trace:
[  719.865241][    C0]  <IRQ>
[  719.865246][    C0]  __dev_queue_xmit+0x4e3/0x4950
[  719.865267][    C0]  ? irq_exit_rcu+0x9/0x30
[  719.865286][    C0]  ? sysvec_apic_timer_interrupt+0xa3/0xc0
[  719.865306][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  719.865321][    C0]  ? vprintk_emit+0x553/0x6b0
[  719.865334][    C0]  ? _printk+0xcf/0x110
[  719.865347][    C0]  ? kauditd_hold_skb.cold+0x3f/0x4e
[  719.865361][    C0]  ? kthread+0x370/0x450
[  719.865375][    C0]  ? ret_from_fork+0x72b/0xd50
[  719.865391][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  719.865413][    C0]  ? rcu_is_watching+0x12/0xc0
[  719.865433][    C0]  ? kasan_quarantine_put+0x104/0x240
[  719.865453][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  719.865476][    C0]  ? __skb_ext_put+0x107/0x2f0
[  719.865497][    C0]  br_dev_queue_push_xmit+0x361/0x530
[  719.865519][    C0]  br_nf_dev_queue_xmit+0x73b/0x2730
[  719.865536][    C0]  ? find_held_lock+0x2b/0x80
[  719.865549][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  719.865563][    C0]  ? br_nf_post_routing+0xafb/0x16a0
[  719.865580][    C0]  br_nf_post_routing+0xcbb/0x16a0
[  719.865595][    C0]  ? __pfx_br_nf_post_routing+0x10/0x10
[  719.865611][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  719.865625][    C0]  ? lock_acquire+0x1b1/0x370
[  719.865644][    C0]  nf_hook_slow+0xbf/0x220
[  719.865671][    C0]  br_forward_finish+0x261/0x4d0
[  719.865691][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  719.865712][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  719.865733][    C0]  ? nf_hook_slow+0x167/0x220
[  719.865751][    C0]  br_nf_hook_thresh+0x30d/0x420
[  719.865765][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  719.865786][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  719.865800][    C0]  ? lock_acquire+0x1b1/0x370
[  719.865817][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  719.865836][    C0]  ? net_generic+0xea/0x2a0
[  719.865851][    C0]  br_nf_forward_finish+0x693/0xb30
[  719.865865][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  719.865886][    C0]  br_nf_forward_ip.part.0+0x61e/0x820
[  719.865904][    C0]  br_nf_forward+0xfe5/0x19f0
[  719.865920][    C0]  nf_hook_slow+0xbf/0x220
[  719.865939][    C0]  __br_forward+0x2f7/0x970
[  719.865951][    C0]  ? __pfx___br_forward+0x10/0x10
[  719.865963][    C0]  ? __asan_memcpy+0x3c/0x60
[  719.865982][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  719.866001][    C0]  ? __skb_clone+0x570/0x760
[  719.866023][    C0]  maybe_deliver+0xf0/0x180
[  719.866036][    C0]  br_flood+0x193/0x650
[  719.866051][    C0]  br_handle_frame_finish+0xff4/0x1f60
[  719.866068][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  719.866083][    C0]  ? rcu_is_watching+0x12/0xc0
[  719.866102][    C0]  ? __local_bh_enable_ip+0x9e/0x120
[  719.866122][    C0]  ? ip6t_do_table+0xc1d/0x1c90
[  719.866141][    C0]  ? __pfx_ip6t_do_table+0x10/0x10
[  719.866159][    C0]  ? nf_hook_slow+0x167/0x220
[  719.866177][    C0]  br_nf_hook_thresh+0x30d/0x420
[  719.866191][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  719.866207][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  719.866222][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  719.866238][    C0]  ? __pfx_nf_nat_ipv6_in+0x10/0x10
[  719.866253][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  719.866268][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  719.866284][    C0]  br_nf_pre_routing_finish_ipv6+0x659/0xdd0
[  719.866300][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  719.866317][    C0]  br_nf_pre_routing_ipv6+0x39c/0x8b0
[  719.866332][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  719.866347][    C0]  ? lock_acquire+0x1b1/0x370
[  719.866365][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  719.866380][    C0]  ? net_generic+0xea/0x2a0
[  719.866396][    C0]  br_nf_pre_routing+0x90f/0x1560
[  719.866412][    C0]  br_handle_frame+0xcdd/0x1520
[  719.866428][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  719.866444][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  719.866461][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  719.866475][    C0]  __netif_receive_skb_core.constprop.0+0x6c5/0x3530
[  719.866499][    C0]  ? kmem_cache_free+0x127/0x6c0
[  719.866518][    C0]  ? skb_release_data+0x6ca/0x8e0
[  719.866533][    C0]  ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10
[  719.866554][    C0]  ? kfree_skbmem+0x19f/0x210
[  719.866571][    C0]  ? sk_skb_reason_drop+0x114/0x1b0
[  719.866586][    C0]  ? ip6_mc_input+0x51a/0xf50
[  719.866604][    C0]  ? __lock_acquire+0x4a5/0x2630
[  719.866623][    C0]  ? process_backlog+0x32a/0x1580
[  719.866641][    C0]  __netif_receive_skb_one_core+0xb0/0x1e0
[  719.866665][    C0]  ? __pfx___netif_receive_skb_one_core+0x10/0x10
[  719.866685][    C0]  ? lock_acquire+0x1b1/0x370
[  719.866702][    C0]  ? process_backlog+0x32a/0x1580
[  719.866721][    C0]  ? process_backlog+0x32a/0x1580
[  719.866739][    C0]  __netif_receive_skb+0x1f/0x120
[  719.866759][    C0]  process_backlog+0x37a/0x1580
[  719.866780][    C0]  __napi_poll.constprop.0+0xaf/0x450
[  719.866800][    C0]  net_rx_action+0xa40/0xf20
[  719.866823][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  719.866842][    C0]  ? rcu_is_watching+0x12/0xc0
[  719.866861][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[  719.866880][    C0]  ? tmigr_handle_remote+0x132/0x380
[  719.866898][    C0]  ? run_timer_base+0x121/0x190
[  719.866913][    C0]  ? __pfx_run_timer_base+0x10/0x10
[  719.866928][    C0]  ? rcu_is_watching+0x12/0xc0
[  719.866948][    C0]  handle_softirqs+0x1ea/0xa00
[  719.866968][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  719.866986][    C0]  ? _raw_spin_unlock+0x28/0x50
[  719.867003][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x740
[  719.867018][    C0]  __irq_exit_rcu+0x162/0x210
[  719.867036][    C0]  irq_exit_rcu+0x9/0x30
[  719.867053][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  719.867071][    C0]  </IRQ>
[  719.867075][    C0]  <TASK>
[  719.867081][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  719.867095][    C0] RIP: 0010:vprintk_emit+0x553/0x6b0
[  719.867109][    C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 08 61 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 d6 5b 21 00 48 85 ed 0f 85 27 01 00 00 <e8> e8 60 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00
[  719.867120][    C0] RSP: 0018:ffffc90000a57b78 EFLAGS: 00000293
[  719.867131][    C0] RAX: 0000000000000000 RBX: 00000000000000d8 RCX: ffffffff81e7520a
[  719.867139][    C0] RDX: ffff88801eed4a00 RSI: ffffffff81e75214 RDI: ffff88801eed4a00
[  719.867148][    C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
[  719.867156][    C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff9200014af71
[  719.867164][    C0] R13: 0000000000000200 R14: ffff88803219ca00 R15: ffffc90000a57c40
[  719.867176][    C0]  ? vprintk_emit+0x66a/0x6b0
[  719.867189][    C0]  ? vprintk_emit+0x674/0x6b0
[  719.867203][    C0]  ? vprintk_emit+0x674/0x6b0
[  719.867216][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  719.867229][    C0]  ? find_held_lock+0x2b/0x80
[  719.867242][    C0]  ? ___ratelimit+0x77b/0xad0
[  719.867260][    C0]  ? __pfx_kauditd_send_multicast_skb+0x10/0x10
[  719.867280][    C0]  _printk+0xcf/0x110
[  719.867292][    C0]  ? __pfx__printk+0x10/0x10
[  719.867304][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  719.867323][    C0]  ? __pfx____ratelimit+0x10/0x10
[  719.867340][    C0]  ? kauditd_hold_skb+0x1c7/0x210
[  719.867353][    C0]  kauditd_hold_skb.cold+0x3f/0x4e
[  719.867368][    C0]  ? __pfx_kauditd_hold_skb+0x10/0x10
[  719.867380][    C0]  kauditd_send_queue+0x232/0x2e0
[  719.867398][    C0]  ? __pfx_kauditd_hold_skb+0x10/0x10
[  719.867413][    C0]  kauditd_thread+0x645/0xb30
[  719.867425][    C0]  ? __pfx_kauditd_thread+0x10/0x10
[  719.867437][    C0]  ? rcu_is_watching+0x12/0xc0
[  719.867456][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  719.867474][    C0]  ? __kthread_parkme+0x18c/0x230
[  719.867489][    C0]  ? kthread+0x13a/0x450
[  719.867503][    C0]  ? __pfx_kauditd_thread+0x10/0x10
[  719.867515][    C0]  kthread+0x370/0x450
[  719.867530][    C0]  ? __pfx_kthread+0x10/0x10
[  719.867546][    C0]  ret_from_fork+0x72b/0xd50
[  719.867562][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  719.867579][    C0]  ? __switch_to+0x800/0x1100
[  719.867599][    C0]  ? __pfx_kthread+0x10/0x10
[  719.867615][    C0]  ret_from_fork_asm+0x1a/0x30
[  719.867639][    C0]  </TASK>
[  721.294001][    C0] net_ratelimit: 23609 callbacks suppressed
[  721.294019][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.294256][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.294862][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  721.303470][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.305371][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  721.309929][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.314610][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.319380][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.324962][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.329513][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.647565][    C0] net_ratelimit: 25173 callbacks suppressed
[  726.647586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.647657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  726.653754][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.665722][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.677681][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.690028][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.701536][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.713817][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)
[  726.725366][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.737792][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:66:f2:31:3f:63:e5, vlan:0)