last executing test programs:

50.267252913s ago: executing program 1 (id=24):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840)
socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RLCREATE(r2, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x4}, 0x9}}, 0x18)
close(r2)

49.037695652s ago: executing program 1 (id=34):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}, @end, @cipso={0x86, 0x2f, 0x0, [{0x7, 0xa, "7abae6bc49b82b74"}, {0x7, 0x3, 'v'}, {0x0, 0xe, "525cb14847e021e2acc2faac"}, {0x7, 0xe, "f568248ce403dce1501b15ab"}]}]}}}], 0x48}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

48.966903962s ago: executing program 1 (id=35):
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) (async, rerun: 64)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000000)=0x2, 0x8) (rerun: 64)
fallocate(0xffffffffffffffff, 0x80, 0x5, 0x967) (async)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x201, 0xa, 0x1, 0x0, 0xfd})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0xa})
r1 = socket(0x8000000010, 0x2, 0xfffffffb)
write(r1, &(0x7f00000002c0)="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", 0xfc)

48.960606518s ago: executing program 1 (id=36):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xbc, &(0x7f0000000500)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x10004, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40}, @in6={0xa, 0x4e20, 0xfffffbaf, @loopback, 0x7f}, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x10}, @in6={0xa, 0x4e20, 0x8000, @remote, 0x7fff}, @in={0x2, 0x4e1c, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e21, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}]}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7)
close_range(r3, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)

48.747791574s ago: executing program 1 (id=37):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500003d87ad64e26e0c1727e9f4d77d61f445a92a4ed618e3db05d000f68fc371dbb17b0c840e21075e3a32f6ea0c5cc2684f6b3a8cc7508d21ea6e3a0b43b35107a947b34534c5bee5a51d53ac3fe6aaabd10f"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500003d87ad64e26e0c1727e9f4d77d61f445a92a4ed618e3db05d000f68fc371dbb17b0c840e21075e3a32f6ea0c5cc2684f6b3a8cc7508d21ea6e3a0b43b35107a947b34534c5bee5a51d53ac3fe6aaabd10f"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'GPL\x00\xb74j\xd1p`Sc(1\r\v}e\xf6M\x1e\xe8\xc1\x97\xc9\xe53\xdc\xbcO\xd5\"\xc3\x05\xcf\b\xe09\xc9p\x03\xe43*\xbf!\x91-{R\xd20D\x03\xab\xcc\x1bw\xadq\xb2\x90\xea\xd0\xeb%\xc39\x8e\xb6\xa3\xb5\x1c\xea91\x03\xd3\x17\xb2\xb4\x12'}, {0x20, '\xe6[\xfc\x80\x16=-\xaf\x89\xd6.\xa3jh`\x95\x039\x83\xf2\x96\x1c\xc1\x1b)\xb4\xb8\xd3\x1a\x1a\x04^Y\xf7\xad\xd2\x0f\xa2\xed\x8a\xaa\xa4)\xd3\a\x1d\x9bMw;_u\x94\xaf?\xb7y\xa9I\xbbJ\xfa\x9d\xd8`4\tx\xc2\x83XP3\x9f\x03#a\xaa\xb7\t\x00C\xb7\xa8\xf2F\xa4\xb9'}, {0x20, '{&*'}, {0x20, 'fuse\x00'}]}, 0x59) (async)
write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'GPL\x00\xb74j\xd1p`Sc(1\r\v}e\xf6M\x1e\xe8\xc1\x97\xc9\xe53\xdc\xbcO\xd5\"\xc3\x05\xcf\b\xe09\xc9p\x03\xe43*\xbf!\x91-{R\xd20D\x03\xab\xcc\x1bw\xadq\xb2\x90\xea\xd0\xeb%\xc39\x8e\xb6\xa3\xb5\x1c\xea91\x03\xd3\x17\xb2\xb4\x12'}, {0x20, '\xe6[\xfc\x80\x16=-\xaf\x89\xd6.\xa3jh`\x95\x039\x83\xf2\x96\x1c\xc1\x1b)\xb4\xb8\xd3\x1a\x1a\x04^Y\xf7\xad\xd2\x0f\xa2\xed\x8a\xaa\xa4)\xd3\a\x1d\x9bMw;_u\x94\xaf?\xb7y\xa9I\xbbJ\xfa\x9d\xd8`4\tx\xc2\x83XP3\x9f\x03#a\xaa\xb7\t\x00C\xb7\xa8\xf2F\xa4\xb9'}, {0x20, '{&*'}, {0x20, 'fuse\x00'}]}, 0x59)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6)
r3 = socket(0x15, 0x5, 0x0)
connect$netrom(r3, &(0x7f0000000000)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
getsockname$packet(r3, 0x0, &(0x7f0000000440)) (async)
getsockname$packet(r3, 0x0, &(0x7f0000000440))
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00")
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") (async)
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7")
socket(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) (async)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881)
r8 = dup(r7)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x8, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r8, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0x5}}, 0x34000)
read$FUSE(r6, &(0x7f0000002b80)={0x2020}, 0x2020) (async)
read$FUSE(r6, &(0x7f0000002b80)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_GETXATTR(r5, &(0x7f0000000040)={0x18, 0x0, r9, {0x7}}, 0x18)

48.337952785s ago: executing program 1 (id=40):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x4a268b3c, 0x10003)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200100, 0xa2)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1)
pwrite64(r1, &(0x7f0000000200)="7288188466db464aaaf987d0fc5f98b6dc8b8a52ba682b4b27544d5af4be0b02700a9bf9b46567d26a68e07f50192d844a8ce76d08a5bd6b9a661377415328ef327fa055faf6c106e74be1a7df9b1975a041bf36b76a7a67f931584858dd113a0b3b877c6ea3aa54e568e8adbb17c05af3a75b6acb0fd213be31daa25d1702c6b61dff39a2ff", 0x86, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) (async)
syz_open_dev$admmidi(&(0x7f0000000000), 0x4a268b3c, 0x10003) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200100, 0xa2) (async)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1) (async)
pwrite64(r1, &(0x7f0000000200)="7288188466db464aaaf987d0fc5f98b6dc8b8a52ba682b4b27544d5af4be0b02700a9bf9b46567d26a68e07f50192d844a8ce76d08a5bd6b9a661377415328ef327fa055faf6c106e74be1a7df9b1975a041bf36b76a7a67f931584858dd113a0b3b877c6ea3aa54e568e8adbb17c05af3a75b6acb0fd213be31daa25d1702c6b61dff39a2ff", 0x86, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async)

48.287713969s ago: executing program 32 (id=40):
r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}})
r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x4a268b3c, 0x10003)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200100, 0xa2)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1)
pwrite64(r1, &(0x7f0000000200)="7288188466db464aaaf987d0fc5f98b6dc8b8a52ba682b4b27544d5af4be0b02700a9bf9b46567d26a68e07f50192d844a8ce76d08a5bd6b9a661377415328ef327fa055faf6c106e74be1a7df9b1975a041bf36b76a7a67f931584858dd113a0b3b877c6ea3aa54e568e8adbb17c05af3a75b6acb0fd213be31daa25d1702c6b61dff39a2ff", 0x86, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) (async)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000001c0)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x1000, 0xd}}) (async)
syz_open_dev$admmidi(&(0x7f0000000000), 0x4a268b3c, 0x10003) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200100, 0xa2) (async)
write$6lowpan_enable(r2, &(0x7f0000000080)='0', 0x1) (async)
pwrite64(r1, &(0x7f0000000200)="7288188466db464aaaf987d0fc5f98b6dc8b8a52ba682b4b27544d5af4be0b02700a9bf9b46567d26a68e07f50192d844a8ce76d08a5bd6b9a661377415328ef327fa055faf6c106e74be1a7df9b1975a041bf36b76a7a67f931584858dd113a0b3b877c6ea3aa54e568e8adbb17c05af3a75b6acb0fd213be31daa25d1702c6b61dff39a2ff", 0x86, 0x6) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) (async)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async)

44.855858455s ago: executing program 3 (id=96):
r0 = msgget$private(0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) (async)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x3, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], <r4=>0x0}, 0x40) (async)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r5, r3, 0x15, 0x4, 0x0, @void, @value=r3, @void, @void, r4}, 0x20) (async)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x20) (async)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) (async)
msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) (async)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) (async)
getsockname(r2, &(0x7f00000001c0)=@ethernet={0x0, @local}, &(0x7f0000000240)=0x80)

44.79713886s ago: executing program 3 (id=98):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r3, 0x0, <r4=>0x0})
r5 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r4})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000dbdf1b7526993a8f6ae98a250a00000ad000e5003372e8"], 0xe4}, 0x1, 0x0, 0x0, 0x8801}, 0x50)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000600"/86], 0x210)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r9, 0xae9a)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4a8542, 0x0)
r11 = syz_open_dev$usbfs(&(0x7f0000000140), 0x3, 0x400000)
ioctl$USBDEVFS_SETINTERFACE(r11, 0x80085504, &(0x7f0000000280)={0x9, 0x80})
ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000001c0)=0xf)
fcntl$dupfd(r10, 0x0, r10)

44.61803164s ago: executing program 3 (id=100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd2d, 0x0, 0xa, 0x2}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0xd4, 0x18, 0x4, 0x70bd27, 0x25dfdbfc, {0xa, 0x14, 0x34, 0x1, 0xfd, 0x3, 0xff, 0x6, 0x1800}, [@RTA_MARK={0x8, 0x10, 0x72}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_METRICS={0xa8, 0x8, 0x0, 0x1, "3242256cbc8c5ef71944202de8559d925fabe865ed65169e3a87f13527d52e76785882ab9d34f57989525cdeb0e83952d060592fa0ca1561acb6ebe798aa26a936a0a5a04343224f28f081c4f4f05d030950299abeda3d8de489c459ec321e8124cbf8aee0ae0dc7a0f87d00675a04ec0b73b18de05275dda6581748a4f30141e0ee788b009b71552bbae005234c5e3ab8106f42edf632f34394b4a3845f524f5c7fc692"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802)

44.547359927s ago: executing program 3 (id=102):
r0 = inotify_init()
unshare(0x400)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r1, 0x0, 0x61, 0x6, &(0x7f0000000300)={0x2, 0x4e24, @private=0xa010102}, 0x10)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a3100000000080003400000000109000100"], 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000004140)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0xa4)
syz_emit_ethernet(0xf87, &(0x7f0000002140)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2580a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendfile(r3, r0, &(0x7f0000000080)=0x927d, 0xfffffffffffffff8)
r4 = syz_open_dev$evdev(&(0x7f0000001040), 0x3215, 0x101000)
syz_usb_disconnect(r4)
syz_usb_connect(0x6, 0x36, &(0x7f0000001080)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r4, 0xc0085504, &(0x7f0000000200)=0xb)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', <r6=>0x0, 0x1, 0x10, 0x488, 0x2, {{0x16, 0x4, 0x1, 0x10, 0x58, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, {[@cipso={0x86, 0x17, 0x2, [{0x2, 0x11, "702b6560c6cadf314b4869289f2256"}]}, @rr={0x7, 0xf, 0x82, [@broadcast, @local, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x6, [{@multicast1}, {@multicast1, 0x4f3f3034}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xd39c}]}]}}}}})
sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_delneigh={0x38, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x8, 0x10, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FDB_EXT_ATTRS={0x8, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800)
ioctl$KDSETMODE(r3, 0x4b45, 0x4)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x143142, 0x0)
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="c0", 0x1}], 0x1, 0x5)

43.782407462s ago: executing program 3 (id=113):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="d4ff3d", @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d309d23a443ee13303030303030ff3030303034303030302c757365725f69643d", @ANYRESOCT=r1, @ANYBLOB=',group_id=', @ANYRESOCT=r1])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0xfff, 0x83520, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)
ioctl$FIBMAP(r3, 0x401070ca, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r4=>0xffffffffffffffff})
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x101, {0xb, 0x200, 0x5, 0x100, 0x5, 0x4}})
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f19e8eb1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b40c9e2de8cd9c81f9139a5db8532d322dd474956c0be6bdd54c6040622893c0000af0a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf443", 0xbf}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r5, 0x0, 0x0)
ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x2, 0x5003)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r6, 0x0)
connect$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000080)=""/104, 0x68})
getsockopt$sock_buf(r4, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140))
sysinfo(&(0x7f0000000000)=""/196)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000002fc0)={0x8, @multicast})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

43.467088032s ago: executing program 3 (id=115):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000580)=0x5)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="a905000200027464000100ddb4d278347e20f64a2f0ca99752420000000000000000c757970e227e39f34b33", 0x2c}], 0x1}}], 0x1, 0x24004044)
sendto$inet6(r2, &(0x7f0000000480)="d4e8b7aef1f2f082929cc74eaacf0c7358bc3e1f58cb0fe87f4e6afb0a648520786fec4953563be6c8e1fa5e75971aa1d2d2742d40a82d3995077bfd7fda3053d823e4eb992198cba0feeced0845126241ebfca3a382faa857afeadc9bf7beadb122ddd1010106d766f6ef2e8e19f3d1d05dcdfa1f5dffa8b6fccff17e0351afd9661521326f7d35c2484c88241f79bff1511288b350e00997bef57894e32abdd2ed29d9621c52e7171a54c3", 0xac, 0x880, &(0x7f0000000540)={0xa, 0x4e24, 0x5, @mcast2, 0x3}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000005c0)='scalable', 0x8)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x40080)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x28}}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
sendto$inet6(r0, &(0x7f0000000200)="3a9ae88666f25c81f83777080e4478beb3cfdbc20dc326af86e7b4789b55041f645f7adcb6ccedb4bef5ff346284d863ab275651258bd8454e06f38b00c00590893e8f47b44e91395b6c359c59eb69f36423b03d020eef354fb13f012bc51d2ca1bb3be109abdbe82fa709414a7fee4cfbb284e4531385d85ac244f796418b5dac0397aa03b6be6b656c5a5e6e77cb12003cc044f5d411a9fea9d424b6bffd91", 0xa0, 0x40081, 0x0, 0x0)

43.384889028s ago: executing program 33 (id=115):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000580)=0x5)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="a905000200027464000100ddb4d278347e20f64a2f0ca99752420000000000000000c757970e227e39f34b33", 0x2c}], 0x1}}], 0x1, 0x24004044)
sendto$inet6(r2, &(0x7f0000000480)="d4e8b7aef1f2f082929cc74eaacf0c7358bc3e1f58cb0fe87f4e6afb0a648520786fec4953563be6c8e1fa5e75971aa1d2d2742d40a82d3995077bfd7fda3053d823e4eb992198cba0feeced0845126241ebfca3a382faa857afeadc9bf7beadb122ddd1010106d766f6ef2e8e19f3d1d05dcdfa1f5dffa8b6fccff17e0351afd9661521326f7d35c2484c88241f79bff1511288b350e00997bef57894e32abdd2ed29d9621c52e7171a54c3", 0xac, 0x880, &(0x7f0000000540)={0xa, 0x4e24, 0x5, @mcast2, 0x3}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000005c0)='scalable', 0x8)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x64, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x40080)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x28}}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4)
sendto$inet6(r0, &(0x7f0000000200)="3a9ae88666f25c81f83777080e4478beb3cfdbc20dc326af86e7b4789b55041f645f7adcb6ccedb4bef5ff346284d863ab275651258bd8454e06f38b00c00590893e8f47b44e91395b6c359c59eb69f36423b03d020eef354fb13f012bc51d2ca1bb3be109abdbe82fa709414a7fee4cfbb284e4531385d85ac244f796418b5dac0397aa03b6be6b656c5a5e6e77cb12003cc044f5d411a9fea9d424b6bffd91", 0xa0, 0x40081, 0x0, 0x0)

2.457624093s ago: executing program 5 (id=713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000d0429be7000fcdbdf25f300f385", @ANYRES32=0x0, @ANYBLOB="1000000000000000200012800b000100627269646765"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0xfc}], 0x1, 0x100, 0x0)

2.456881577s ago: executing program 5 (id=714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))
r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x0, 0xb8, 0x2, &(0x7f00000004c0)={0xfa, "f4e1a230be8f46463fb1a5f1b46f44eaa25e485b747a07678118bc00"}})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r2], 0x40}}, 0x240040b4)

2.206822097s ago: executing program 5 (id=717):
r0 = syz_io_uring_setup(0x716c, &(0x7f00000002c0)={0x0, 0x4009839, 0x0, 0x2, 0x7b}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127})
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}})
r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r6 = getpid()
r7 = gettid()
rt_tgsigqueueinfo(r6, r7, 0x1c, &(0x7f0000009680)={0x11, 0x5, 0x41})
r8 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8)
read(r8, &(0x7f0000000740)=""/377, 0x179)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0, &(0x7f0000000480)})
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/194, 0xc2}], 0x3)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, r0, 0x35, {0x9, 0x81}, 0x1}, 0x1)

2.114740815s ago: executing program 2 (id=719):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
poll(&(0x7f0000000040)=[{r2, 0x1a5}], 0x1, 0xc8c4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macsec0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1d991db235b7040008000a00", @ANYRES32=r4, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)

1.965732921s ago: executing program 2 (id=721):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket(0x40000000015, 0x5, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042"})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVdn:Dd', 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e1f, 0x3, 'rr\x00', 0x11, 0x10000004, 0x8}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e1f, 0x3, 'rr\x00', 0x11, 0x10000004, 0x8}, 0x2c)
fanotify_init(0x60, 0x0)
socket$kcm(0xa, 0x2, 0x0) (async)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0xffffffffffffff80)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x4, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94)

1.917525532s ago: executing program 2 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0x3, 0x2, {0x1, @pix_mp={0xcf6, 0x101c00, 0x3432564e, 0x5, 0x8, [{0x2a302c, 0x10000}, {0x1, 0xfffffffc}, {0x5, 0x9}, {0x7fff0, 0x10001}, {0x2, 0xffffffff}, {0x6, 0x5}, {0xe, 0x8}, {0x8, 0x10000}], 0x7f, 0x6, 0x2, 0x1}}, 0x82})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4c20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000003c0)={0x3, 0xebe, 0x1, {0x1, @pix_mp={0x6, 0x8, 0x47504a50, 0x9, 0x6, [{0x2776463d, 0x7}, {0xfffffffc, 0x7f}, {0xffffffff, 0xffff}, {0x1, 0x42}, {0x7, 0x310cb2b8}, {0x7fffffff, 0x80}, {0x610, 0xfffffffc}, {0x7f, 0x6}], 0xa0, 0x7f, 0x1, 0x1, 0x5}}, 0x8})
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x20048055}, 0x4011)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)

1.845211115s ago: executing program 2 (id=725):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
pipe2(&(0x7f0000001040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)
pipe2(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
tee(r1, r5, 0xfffffffffffffc01, 0x0) (async)
tee(r1, r5, 0x60000000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.766613563s ago: executing program 2 (id=730):
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040))
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2a615293b57fc4a5})
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140))
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xe, 0x4}, {0xb20, 0x103}}}}, 0x11)
ioctl$CDROMREADTOCHDR(0xffffffffffffffff, 0x5305, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'pimreg\x00'})
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @null]})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe}]}}}]}, 0x38}}, 0x0)

1.70597987s ago: executing program 2 (id=732):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xc, 0x9, {0x7, @udp_ip4_spec={@loopback, @multicast1, 0x4e22, 0x4e21, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x9, 0x2, [0x0, 0x1]}, @sctp_ip4_spec={@broadcast, @remote, 0x4e20, 0x4e20, 0x8}, {0x0, @local, 0x3, 0x7, [0xffff, 0xa]}, 0x3, 0xffffffff}}})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r4, 0x4140aecd, &(0x7f0000000140)={{0xffff1000, 0xffffffff, 0xd, 0x7d, 0x3, 0xb, 0x8, 0x0, 0x0, 0x3, 0x8, 0x2}, {0x8000000, 0xdddd1000, 0xc, 0x6d, 0x0, 0x0, 0xf0, 0x0, 0xa, 0x4, 0x5, 0x10}, {0x4, 0x80a0000, 0x4, 0xf, 0x3, 0x6, 0x1, 0x3, 0x5, 0xe, 0x2, 0x1}, {0x5000, 0x0, 0x3, 0x0, 0x9, 0x62, 0x47, 0xb, 0x9, 0x46, 0x58, 0x1}, {0xc000, 0x1, 0xe, 0xff, 0x0, 0x0, 0x8, 0xe, 0x3e, 0x0, 0x8, 0xd0}, {0x60000, 0xffffffff, 0xe, 0xe2, 0x28, 0xff, 0xa2, 0xca, 0x3, 0xf7, 0x1, 0x6}, {0x0, 0xdddd0000, 0xe, 0xd, 0xb8, 0x8, 0x3, 0x3, 0x4, 0x7c, 0x1f, 0x8}, {0x4, 0xeeee8000, 0xc, 0x7f, 0xa, 0x2, 0x5, 0xc, 0xa, 0x6, 0xf2, 0xd}, {0x40000, 0xb8}, {0xeeef0000, 0x8}, 0xa000000c, 0x0, 0x4, 0x8, 0xb, 0x4000, 0xd000, 0x0, [0x0, 0xd, 0x4, 0x53375e0d]})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x0, @initdev}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r8 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r8, 0x1c4e)
read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020)
r9 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff", 0x6}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x40800)
ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0e, &(0x7f0000000000))
ppoll(&(0x7f0000000100)=[{r10, 0x2820}, {r10, 0x86}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x5]}, 0x8)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20, 0x40e28}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES8=r7, @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r12 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000009, 0x32, 0xffffffffffffffff, 0x261c5000)
ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000002080)="487d5b43619cfa3217e11f16f3305344affe4355b61d1ace1ab742c8050b60e914e16e22ad69b58747915158cf12de492771172ee3f95689fb03c80e9a832464baf041e8a832a29e", 0x0, 0x48)

1.332016477s ago: executing program 5 (id=741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850099c79bcf70bfb0d8000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.270682553s ago: executing program 5 (id=743):
setresuid(0x0, 0xee00, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
syz_emit_ethernet(0xc6, &(0x7f0000000140)=ANY=[@ANYBLOB="ffdb2754851e5773c083f10595791eb6ffffffffff000000000000810047000004d40027bbdacdb4b0d773fdf2587f5d3bd3340b474ebedd0db0fa729435bd7eef00b34fd831ea9b102ae1d163ce3950ad34923c526b4077ab05e8d99f624d4e5e6c3b501c84d3c500380100ac5ef0517aa3afe4ec17e87e953612068d600f61321c53486363d9990b6bcddea1be7e71d026744ea0d6b4454f689cac18a495a8393dba5c2b04c26522bcc5b5e98e8f944a59d16a6dbd18cb25fae69c5eebaeeca3e72de2"], 0x0)
r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=@newtclass={0xcc4, 0x28, 0x500, 0x70bd2d, 0x25dfdc05, {0x0, 0x0, 0x0, r4, {0x9, 0x6}, {0xb, 0xe}, {0x6, 0xfff3}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0xc78, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x8}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0xfffffffc, 0x8000, 0x2, 0x7f, 0x6, 0xfffffaa5, 0x453c, 0x9, 0xf5d4, 0x7, 0x8001, 0x5, 0x9, 0x3, 0x7, 0xfffffffc, 0x0, 0xfff, 0x3c6aac7b, 0x4, 0x8000, 0x5, 0x8, 0x10000, 0x80, 0xd, 0x2, 0x2, 0x2, 0x7, 0xd6, 0x40, 0x100, 0x7fffffff, 0xff, 0x40, 0x8, 0x4, 0x1, 0xca, 0x5, 0x10, 0x5, 0x2, 0x9, 0xaf01, 0x0, 0xfffffffe, 0x8, 0x1ff, 0x8000, 0x0, 0x5, 0x8, 0x0, 0x1, 0x2, 0x7, 0x0, 0x9, 0x1, 0x7, 0x3, 0x2, 0x5, 0x10001, 0x1ff, 0x4, 0x5, 0xf, 0x5, 0x7fff, 0x2, 0x100, 0x1, 0x9, 0x1, 0x8d7c, 0x80, 0x1000, 0x1, 0x401, 0x2, 0x5c95, 0x100, 0x10, 0x8001, 0x2bc, 0x7, 0x8001, 0x0, 0x5, 0x9, 0xffff, 0x2, 0x2, 0x6, 0x7, 0x8, 0x4, 0x523, 0x3, 0x6, 0x3d, 0x6, 0x44f66341, 0xb, 0xd9, 0x3, 0xf88e, 0x3ff, 0xffff140a, 0x1, 0x6, 0x563d, 0xde99, 0xb218, 0x990, 0x7, 0xffffffff, 0x3, 0xfffffffd, 0x1, 0x7, 0xfffffffa, 0x5, 0x0, 0xbe, 0xc, 0x800, 0x3, 0x800, 0x0, 0x2, 0x2, 0xffffff9b, 0x2, 0x7, 0x18000, 0x4, 0x7, 0x41, 0x2, 0xe, 0x4, 0x2, 0x0, 0x6, 0xfffffffb, 0xb6, 0x0, 0x0, 0x7, 0xd, 0x3, 0xe1, 0xfffffffd, 0x3, 0x9, 0x919caed1, 0x4, 0x4, 0x1, 0x9ee, 0xa3f7, 0x6, 0x5, 0x1, 0x3, 0xfffffff7, 0x2, 0x9, 0x8, 0x1, 0x3, 0x3a, 0x5, 0x6, 0x5, 0x10001, 0x5, 0x26, 0x8, 0xdc66, 0x1, 0xfffffff2, 0x2, 0x7fffffff, 0x2, 0x4, 0x10ca1584, 0x5, 0xffffffff, 0xab, 0x4, 0x8, 0x80000000, 0x80000001, 0x3, 0x488, 0x264c8caa, 0xc77, 0x81, 0x6, 0xdb, 0xfffffff7, 0x3, 0x7, 0x29f0, 0x9, 0x7, 0x1, 0xde4d, 0x7, 0x5, 0x7, 0x8000, 0x0, 0x5, 0xfffff920, 0x4, 0x5, 0x0, 0x2, 0x256, 0x0, 0x5, 0x5, 0x8, 0x3, 0x8000, 0x0, 0x9, 0x7, 0x1, 0x5, 0x5, 0x4, 0x183, 0x1000, 0x58b6, 0x5, 0x8000, 0x100, 0x6, 0x2, 0x3, 0x6, 0x1, 0xb40, 0xf, 0x7, 0x2, 0x34ef, 0x4]}, @TCA_HTB_RTAB={0x404, 0x4, [0x1b, 0xa3, 0x7f, 0x3, 0x5c6e, 0x8, 0x3, 0x9, 0x6c4, 0x1, 0xe6d, 0x3, 0x10001, 0x9, 0x4, 0x3ff, 0x80000001, 0x5, 0xc, 0x10001, 0xc3b1, 0x0, 0xfffffff8, 0x0, 0x8aa9, 0x1ff, 0x2, 0x97, 0x40, 0x5, 0x5, 0x3, 0x400, 0x2, 0x7, 0x3, 0xa, 0xfff, 0x7fffffff, 0x3, 0x1, 0x8, 0xba, 0x7, 0x10000, 0xd38, 0xa88, 0xffff8000, 0x9, 0xfffffffe, 0xfd6, 0x3ff, 0x6, 0x8, 0x8, 0xf9, 0x2fc, 0x0, 0x9, 0x9, 0x8000, 0x8001, 0x8, 0x6, 0x8, 0x3, 0xde, 0xebae, 0x1, 0x2, 0x9, 0x5, 0x2, 0x6, 0x800, 0xf, 0xfffffeff, 0x5, 0x401, 0x2, 0x1d5, 0x4, 0x7, 0x8, 0x6, 0xe8, 0xcf3, 0x1, 0xa6, 0x30210357, 0x7, 0x9e4, 0x2, 0x6, 0x421, 0x9, 0x3, 0x9, 0x4, 0xffff0000, 0xd5b, 0x5, 0x5, 0x4, 0x40, 0x7, 0x4, 0x4, 0x3, 0xa3, 0xa, 0x4, 0x2, 0x1, 0xc4, 0x4, 0x9, 0x9, 0x3, 0x6, 0x1, 0x7, 0xc2, 0xe, 0x7, 0x2, 0xd086, 0x3, 0x4, 0x94e, 0x74, 0x3, 0xffffbbd6, 0x1, 0x0, 0x9, 0x2, 0x0, 0x7, 0x62c774f0, 0xb6, 0x7, 0x1, 0x5e7e, 0x695, 0x6, 0x9, 0xfffffbff, 0x6, 0x0, 0x1, 0x4, 0xfffffffa, 0x2, 0x0, 0x2d1c9ac2, 0x9, 0x8, 0x2, 0xff, 0x79, 0x8, 0x4, 0xe, 0x7ff, 0xfffffffd, 0x8, 0x800, 0x9, 0x3, 0x1, 0x81, 0x2, 0x9, 0x9, 0xe5fa, 0x1, 0x7, 0x2, 0x9, 0x2, 0x7, 0x74, 0x3786, 0x100, 0x2f31, 0x3, 0xf3, 0x5, 0xf, 0x0, 0xb43e, 0xc5f2, 0x9, 0x6, 0xa3, 0x40, 0x91fa, 0x9, 0x7, 0xa, 0x100, 0xbf, 0xffffffff, 0xb, 0x80, 0x80, 0xd7, 0x7fffffff, 0x80, 0x47, 0x7, 0x80, 0x8bb, 0x13, 0x1, 0xc, 0x7, 0x1, 0x5, 0xf35b, 0x7, 0x9, 0x7ff, 0x5, 0x401, 0x5, 0x337d, 0xdf, 0x2, 0x75, 0x0, 0x4, 0xc, 0x3, 0x80000001, 0x40, 0x0, 0x5, 0x3, 0x5, 0x5, 0x100, 0x9, 0x6, 0xffffb5a8, 0x9, 0x100, 0x7fffffff, 0x8, 0x6, 0x7fff, 0x8, 0x3, 0x6, 0x7]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x2, 0x7, 0x2, 0x2, 0x1}, {0x9, 0x2, 0x7, 0x6, 0x0, 0x80}, 0x0, 0xe5, 0x27, 0x9, 0xbb1ff21}}, @TCA_HTB_RATE64={0xc, 0x6, 0x8d}, @TCA_HTB_CTAB={0x404, 0x3, [0x10, 0x3, 0x40, 0xfffffc01, 0x7ff, 0x1ff, 0x2, 0xffffffff, 0x2, 0x2, 0x8, 0x4, 0x6, 0x7, 0x80000001, 0x5, 0x1000, 0x6, 0x2, 0xd, 0x4, 0x7ff, 0x8, 0x1, 0x2, 0x2, 0x4, 0x4, 0x0, 0x3ff, 0x63, 0x40000000, 0x80000001, 0x5, 0x90000000, 0xffff0001, 0x6, 0x3, 0x7, 0x8, 0xc0000000, 0x0, 0x80, 0x3, 0x4, 0x2de7, 0xffff7fff, 0xfffffff3, 0x10000, 0x7, 0x0, 0x4, 0x9, 0x3e02, 0x1, 0x1e0a, 0x5, 0x8, 0x0, 0x0, 0x3, 0x5, 0x2, 0x2, 0x8000, 0x8, 0xffffffff, 0x0, 0x4, 0x4, 0x6, 0x1, 0xfffffff8, 0x5, 0xd46, 0x6, 0x7, 0x8, 0x4, 0x7, 0x0, 0x6, 0x6, 0x4, 0x2, 0xfffff2e8, 0xc, 0x7, 0x2, 0x2, 0x800, 0x5, 0x7, 0x800, 0x4, 0x6, 0x0, 0xffffffff, 0xc1da, 0x80000001, 0xab, 0x2, 0x100, 0xfff, 0x7fff, 0xc00, 0x3, 0x9, 0x2, 0x3b3, 0x8000, 0x8, 0xfffffffd, 0x5, 0x4, 0x4, 0x2, 0xfffffff7, 0x0, 0x9, 0xb32c, 0x2, 0x2, 0x5, 0x4, 0x6, 0x8, 0x4, 0xdc3, 0x5, 0xe7d9, 0x5408c20, 0x81, 0x7, 0x9, 0x9, 0x401, 0x1, 0x5, 0xdd, 0x6, 0x3, 0x8, 0x4, 0x8, 0x8, 0xf4, 0x503, 0x1, 0xda2, 0xc, 0x0, 0x2, 0x0, 0x5, 0x87c7, 0xfffff001, 0x2, 0x5, 0x2, 0x8001, 0x0, 0x80000000, 0xc19, 0x0, 0x7, 0x800000, 0x80000000, 0x0, 0x8, 0x9, 0x6, 0xff, 0xeb, 0x10000, 0x1, 0x9, 0x80000001, 0x800, 0xf, 0x80000001, 0x8, 0x1, 0x8, 0x400, 0x7, 0x0, 0x6, 0x4, 0x7, 0x1284, 0xffffffff, 0xfffffffc, 0x80000001, 0xfffffffb, 0x8001, 0x0, 0x5, 0x8000, 0x2, 0x23d, 0xf2b8, 0x5, 0x4, 0x6, 0x6, 0x7, 0x40, 0x6, 0x7, 0x5b, 0xfff, 0x6, 0xac, 0xffffffff, 0xfffffffa, 0x4, 0x2, 0x9, 0x4, 0x8, 0xff, 0xdc4, 0x1, 0x3, 0x9, 0x5, 0x0, 0x6c, 0x0, 0x4, 0x1, 0x7, 0x5, 0x2, 0xffff, 0x100, 0x4a94, 0x0, 0x200, 0x0, 0x8001, 0xffff, 0x3, 0x6, 0x8, 0x9, 0x0, 0xfffffff9, 0x0, 0x1d, 0x2, 0xfffffff7, 0xbc18, 0x2, 0x9]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x9}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0xa}}}]}, 0xcc4}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="7288e62b4dc2397fda80a4695c60e724ea3f13927d2a1ce2806bd50264adfd9d9106ad90c3b96d6fa944fe3bb49415d26a8745e14b3a322bf156", 0x3a, r0)
keyctl$unlink(0x9, r5, r0)
keyctl$clear(0x7, r0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_generic(r1, &(0x7f00000035c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003580)={&(0x7f00000011c0)={0x2398, 0x23, 0x400, 0x70bd2c, 0x25dfdbff, {0x3}, [@generic="bf0ad3cb1ea795480db647b05709222316a2", @generic="8b068357b654e88b59b98aac45d12b164a88a3fbe942fa4518841da904c448ebf736a586a71bde47071a89e2bfdeedfc1aa63cb281df8ae7cb4761db42d204edfd96f8058e1e3905f756509e4e12c0218b7c0efbdd04f751c069ae2af94e280f01aa48e6590cf1ea55b26be01eae54d70f592a2ffbada5d67535238cc26c57d6d301b38c3878caccff9e572978101b97218d046aa287208b62037d9f2998186bd63b8f76c62436fc", @generic="2d7927e277ed790bbe2776b1671b6af24ba29779eddff473e70d9e5e4fc732cc3702fe6ffa4563dbaa37621b7bae05ea7facac3a3c9449dba2e066b2bf6e5bcf8d2191adb9f75f8d576f7f35028d916599b3934a3c6826bda37c251c17b5e79247630e8edbe9e821918175e6968600470a27a90f9a3b7f81446e7c71da87ff079feb22fb450a87f780841b6c2631e33a1f6fa2c43040d23c42746652b83489352fc5058f053b476560290c53109985ffecbf86b06cf2b6ccf8798d8d", @typed={0xc, 0x53, 0x0, 0x0, @str='fscrypt:'}, @nested={0x2143, 0x14b, 0x0, 0x1, [@generic="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", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @nested={0x4, 0x128}, @generic="cce23de45d2274c84b2fd443b822202858b28e8aa0159e61e3786f7f46f1f17129118a02aea7efd8bcb633edb4c69eb569d19ab3e2fb0fa4086b73c4dc478b63c9e635f223d08cec6d26385c97f9391ca9238546c6692ac55806c58e09829173a430d8abcd95ea05fd6021c24aca78e1", @nested={0x4, 0xef}, @generic="a9e522275b7463faf6363e7b134de6b412f96d703313872a09d425bba593d0e5ee925691701ce0fffb2c1720b4c66c959bbb336290ec0f240f9d93834c781e8e102a04dba93521fe300beb5ebac86cb48b731fb7bc0aa7d4c2b5e31aea53715565e682ba11e5bc36e1e30d1c59cecd5e79278f60e1b6d0025aecd3d284cecfbb4454ac7f4bca09735eaeebc1379577c56566e4a17e", @generic="08bb1184ff4369434cb02eada412bc296dc12e149f3cbe1be8eb5ba10966", @generic="3fe89f3b17b292f128c590c477f5223c7772247edcc58d1e4e69f34d8847dddc2b66b420211f1ca6bcdd16ddcb884b6f53ef44486c263dadb7dad86dc92de28f90fe1cd6e3453803f18b45e35a7623419c87aaa8fd19a95672a1a592759d701cb8a531ecc2d3d9c4bf2fc2e99e6ce8906159a79ff0bb0ffe5f056582b91a032b40ca2d224d12ec313e6734e62391a6cd35dc0a573abb73cb910d3854df45666eeaed81451fd07182b3462249f0761c44d4c2a324c00d27775b0306b68289fc71327ea7f84da98c582adffc0f5c0341c79b62a3436534a5637f3560e314d26641417c69c555b3beb3fbfa28d13efc0947b632d81dff67738d4455d9233d7af3fc0bd728e65b296b0b8a2448f7dbd8f0d393f2d1e8110b9d8b319f955f85166215aad0ad84c20d355a018b4e516ffd10290bffaa6d42414874594b68b6f269e92ee7c26e8a3a5e9767be42dc8614b8059f45c3ecd09c81fba1d58c3e27de6a1b2bad104c87ef897c723da894c963018add42f102c8e5fbf083e745768852c932409726e7b121812fb42f38b13317a31f018b618c78ecc6f457f01be4fe150fc9390bd474199dcf6558edb968adb7da3c9cac6601cf2cd3e36aef247936d01a7ff16a906737f4a5fcb9ceed7423978184288852326e64e245478b8c70e81e8113df5b1fae1c61f445d0685bdf95051302712ca03731320a3e32d2b3b6337812bebf2ad01c2b8e55cd5a0ffe67bfdf745cd70a2730f7b3baa2929beb05fec8de33dca766779fb8cd50f237b1eb6068f97510006c0843fc88739c3fa30af6d28e05cb3b90ffeed6858df8a306ef7a731bd7ab5dfc62ab49554683c2604b4326fcec4587e5ff04822f7224676550b61c01a6939ed18e294c7da7cbdc30f51c1040deb544f71123e701a2ad60fd2241119e388530db6f54d75f2ee78e07a57a60fa33af00a73770be24cae6e236fe3e75385165c1b67c71334626d8f9924bde4a27f6f442de52c3a30597a29ab10d18a2b8abe04a112f58f304a45cbf346f2d3d9aacc5f3b6748080511483afc0739479c54e48bc6676e9d8d5bfd7dda0afbedb6b81ed5faee55601a38cf278f5fca7a994579281cef4dc39b5cc285d16b5e948dce58e56b11f7ea04012cc7197fa62010aa5cf3e4aa9dcd45d30d0289794ff32ce3ab68d69315ef6bb3b6e96687448f2dcd5bbfd13adff554a13d24e7c2a2df56618e28286e2bdd4b461d1a80a58271c17cf803858cd110f20baa4c4fcc4d6cc7e1650644b55513782d8a9572a816419206ae9b5ef6453642f76fbf8c9b414abfacd20479f66a9b26fc6ed296b8eba3366997973ec78d4f1b9c69f72205ddda99064fe760e3d6cfab0b963808d5baee0d40539e544a637bf93887fe8103a60e1d5f9430732c251d923b8d494706787d15d9c3826802e614775a8049e93be88a442fe5a1c308014b93d2dac90464d669817082e53607d112ae50e7c16f12bcdc22985c122e906e982356f9b15d13a4d6bcd046de1891f8460e5879e59e17f18e314ea01eeed670bd1192d982b072d991235406757c49a646835ed0d214d9bec5bb09b008c1a3f3c5422a523d1b63b0aa2513e230ab37d96787747fcbcad0921054ff376e6aff886df5f12f155af5c2dcf428f16bc6c8e52d9aa1f184c612154f31feca57ab4dd3bd9f2281902e843273082a62a1caa4ab0fff9f2894e75aeb5b720ac205f73f0fa0364de2d05c3d77ade4f2402d005378ae9a27b969475a96cefbe8a4a31f7678d396140e97d0a524cfe195a291e77879ab0080a46dc3aebc881040d9ce05df0ec85115b8a3b9dd234c1f5a8bf1098a1b35bdf15263fdb24978e8f0c4a0ca5242017c288a92e2409ce866e09d0d35241faed26912ecf85ff78e81792f823560aa0d57469365fcc76f9dd325ca66765d63fe090f00a39dac5080594229f153c1a9c08f52865031ef54581b3431ccf80f678f2214b023a869f83e687e094d52a311ed68b44b993b6100a2baa1e32c1908bcde30f2f3a89eaaf8ffb09f81c80eeca850d1518b680c1aa1330c9dbeab828b33386edc476962c16388e496528b1ff671e6460ca9b94a79ccbcc87a1e4792d85001bbd09a22aca99a4f9f5a0884e25576f0cc24cd2c115dac38d59a83f3a954bccbdb05c39b2311ffd46cb39a2c885203a0977f533b16af41e2e1a7e81885831e2a64cb0cdab987b7bc425f41fcd4d059c63154296b49b8a046c94c9f28fb2dde3b49f4170b96984eba37fb1110396a31a1da5fb259f360cd0d58450b87852b751157d7908c91d551a3bdc8c78d6e77a907d0e3d805086415e200dc27500924d448216713f572eebb86e07746606d66978ad61bc61d474d40a50ebf5c21df4ae92045d299d9a12cff31f15ac0d1f299c5de610a85b41b684c2c53b7150e01b5233bbfa233a041cad06c4cbc96704f76407562b10962cd136b88acd6d6fdc2e95df95ac5d87499dc8a11bbffe889372b364602daf5e5286f769e6880c5df4dc7831192cda9934e26acde27afe22f417d024bfe5ca5f22f6595080edf6564c12352034fc0144a9601fac3fda3bddf479533546847ab69082135acae827c42405d7ef3edfabd60c5e077ac3f6dffae9f6401745f489be7a0cb58304fea9d0888b30542227ecd7608afe8dd5e3203016683e3d627107b4a59b511610e49b9c11789bd66f93357d5c751ed0ed2d58cf1b24b364060abf9f6361fd712678d748b947d0579f3f908be6d3ecbc22e2e31918279583076d94886a110cad267bbc1373f6687deed61ae13507bf8956e8db868cfab85b28e3602658f9612fb908e899e8fb705629a22d4a1ccc551c406a6142990d4d6c6ad965f03d59a8f34c3af2c0181f3f9673906739480216f373dfa48d4cbe62854632e25b5adef69a97bd64b74aa74b5711835c608b392fe89ae515a756b4309a81ff9795eb452ceb33e0beb50a79796ef25027a4802a270c4f6b7075ea7b74e4b18ab16cece62195d36b36198f34c3fdc7a22d3bf09a09fb4e3ea07155a9c539cc185b9e4155a82da85464a988484ae58a133fb34d2016163b050369e91614ffebb229e918e6798b64b61fe881f9086704487a7908e84ca1f1d789dbde5c62eefd9a652fc2f3a4c240729b5b6bd079ab0181755da6c02b4889b2f493fbed86e58b2b576b687765e097195edb19da3f3a719922b75544b1cf362e6fee6f52741db8e50402bef1d7a508352c7f3747a051ca947700030c4dc709f84811e9b57c26a61ceba9efccc4dc2ee42f85a89ef11d80696de67708e5bb66602468afaeafa28221198931c2f1b9b50755f2d5eb94c646de86e032b3e647ab32685127beded99ba2ae7a2b77930e955cc8655262ac8e108c23e54e57b4040fd28d2a31605982e39101503249ea8ae94495ed848bcafa36cd5c04ff6101e807e3315922db7d916904c9cf36617be1ff63ca286ec10553de9689364720603c8243b109dfc2104d5c8d07f586bd6b519f9aa712660fb18516e971c5b9c18179a560a2b1c4aa0edb1c08361bf9f8d63b2c254e060b96c3f679c0a8b4e08647530df0e879ffcc3f46443139861952b6d7470d76283640a9135d4870ead6abadfa88eb4e45a7cccba7bf5e1de2110fb97343c50cbb0852326afcc1fe21b0af561bc4096abc8061fa1a00e08fc6e0d8379ec34efa0d631f05d844b06c365587df32241749eeff2358ff9fabcfc439dba732829df280706754526a03dbf77c426b07ed3ae91424b5e8f3c1f3e77ec445f14bc1748ad8d27cb76a0640f18d8961318470ffeceba1b5264bfacd6347492b4d35c8c6983cd29c4a70e191a94afa5d6eca4c70d9b4a4e3a6b7de9003761d69b534a8b85c403da2c0d7ef8ac9f78f90b9ba8f400bfdbc2c497d9e7188b31a62ee29ce0a092bf90e8f98ef5bbb833c0f0f1240308e381d2095afa8a2a9c19a5911ab0a2dd86a720734438ebfab426e65f4a7afd1e95585992ea6aec27833de7a6eed6c2446ba152077cc2835bcc4a23c574325375807a98e38bd96542c66981690ed3422e48496bf9b6bb32398e50a92a86dcc333d6a5fd83dbebe48b22b272d2ce768519780369f75239317abd2d086a2b02bcaafdc36ed8dfa6e55adcbc4401e99eb1dbf91b316d2685c2eda5e86a90057ace6dd3987821e3a8c20c923507b1be78bc5f1c2d7357b6c2980ad95fb3073f9673018c0fab076e612900bd4c28e6b032615d52c175171b743017652cdd16dc50735e38da19624a369f0dafc41791aa2ff252d8f8886267f4afa7687151b4af60cff632b0777a0f99cb92bf2e4b7f10e760a58fdfa2373744531d8f1e1fb9693efbb36b72c835590d196b431ffdab6944156e44f64361f458f208831f45ff4144d0fd60a6424fc94d55e51b5bc79778468743e649e6c84b17d3f080ceddf6a9edd1d9be451d506e09deda9b138c06af07b435b74aa08eb9a062e3388d7d527b5d3b6963e4c01473482b1f9bde28afae5763786b72e68578abc6c765e7b1a5be2a356d940f3ad30d349ecf4ba37bd48c4a6a7f341588c5b63eaf9571faa2fad40fed5b4f1e530341b18f944e771a263f6975ab188274f02e0e9ee8787162d95593e0f29f9e1004432aa2a803a97bf1d2f3a910eb60a59012be45b7d635e73fe8aa2eb10cf45aed1204cad42c0b3635112bca53c36c851e7818a4503264f53823e7f4fbffce0a0da510549a8f55a97303e4c4cfc735aec5a441a9b8d43c1b99446d44d53a07badb3bdb717d4a294e288c21e573acf19f3bcecef91e28dc5cb8bb8b4f7ad5b84341c2d542700a366fe8b74cbb6870eec8519959f492f17162c6819c26498e00ed9ae9a5c7e61110345c293da1a71ac5fc4ce6f6a3e759bf93ace201dcf3f2f466625eedee8d30e740b08900488da70008e19e4f6e2d2ff4de02a15f7e4115219954a19ab9d247f4cd71715919655ea915a53c832c4cb156e13538fc04636e776b449713596b94bc835c68176fea1dd10b469a161848906e49716ca1517ca953828938e4bad7ecddf795a895093ade705c01bfba1f9433ef1265cb843d46537e73e37fa11951ac5b4bb56a853547cd74d52571e537b9b75c7c85d37742fda9e0a7e90c435f597cebddc5c946b02dddc26a22cfeb82d9fe9beded895c281834147b9ec59a51b83c744b6da01c20df4a87ef8a8615f2c19e19ffc927a30016db4914116eb2b537b2ff2cdc0a970a6b4fc172d1e3ebae5b05670f75910a3b025d5d05c58a3cdbbf4321571be36955b33dd9ccb18a32de7f4c0eedea9e6aea06d2b45066fb6d1a0930abfb7d1a6585358bc5b042f5148de25fb54748debcc28d4a2ecd88fd57a2c81aea068f8c9c647fd644fcd3e06deacf4356624176ad7503e948a4087b28e553fc1c32c5bbd7109582221938b7d87a3cd29fd8cba595f0484931739db33f4e6e1b4e0541df312f45d8d86ea1e21e8991d31f34a1495b87d4e5dd792840248d3b63234e5f797c882e5e4f70caa741fb258f541bb67fe807cd1228bf8c378acfbee524d0ff1953bfeb74b932e3b779fa841d21ac6f559518109d548594aadab07227478cf3bdfc72d75c7a1ec863186b9973ce9861395f7c34630a9cbead5558e874438f9ba7867dd803ec98d484834b049b9fea029732e42b7b811b8f86ccb2d8a5abf7953759c36af59b15f9b0e0001b8aa3728d0930af1346695099f8cd0aaf02941160867053dd53467ba48fa13efc77ae86f881698067644cb75bc1deeb2bb69406eb51cf2b2c03e23a4247e9460558ca1ee4253a2835c71"]}, @generic="221a0115a24befb4ee15ed6b020ef8c0fc4fc833e3de3a48dcd342d05b54b7a2e4e666bacb8b935a5b5e114033e587d2d99ac94bb00cae93171e0d8a9af5229e80386f9c45b7922d64d7e3a6f36572f039df79a9c8356aa1359e89cb294d0db96ef68e716f49aecd585727a0779d29467cea3cd507b00fa1cb7f4631b0bb261e875519451b7f98d4a06dd2d6caa303f5784623118e7cfaeb1fc7f8b5e6ee64b8778e70d8a2eb8022eb36b0", @typed={0x8, 0x1b, 0x0, 0x0, @uid=r6}, @typed={0x6, 0x158, 0x0, 0x0, @str='/\x00'}]}, 0x2398}, 0x1, 0x0, 0x0, 0x840}, 0x80)

1.270043371s ago: executing program 5 (id=744):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)}, {0x0}], 0x6}}], 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x7, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x1, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x0, 0x2, 0x7}, {0xdddd1000, 0x2c}, {0x4, 0x9}, 0x40030000, 0x0, 0x54000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000640)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

767.350247ms ago: executing program 4 (id=749):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01800000", @ANYRES16=r1, @ANYBLOB="00082abd7000fddbdf25310000000c009900b6080000120000000c0099000700000045000000080001007c000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) (async)
r2 = userfaultfd(0x801) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000380)={r4, 0x3b9d, 0x6, 0xb3, 0x2, [], [0x3ff, 0x7f, 0x5, 0x2], [0x12fd, 0x9, 0x7fffffff, 0xb], [0x100000000, 0x9, 0x1ff, 0x9]}) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)

766.278801ms ago: executing program 4 (id=750):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040))
fsetxattr$security_selinux(r0, &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=@deltaction={0xc0, 0x31, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x81, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4c254f5}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040080}, 0xc0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)

685.713437ms ago: executing program 4 (id=752):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00') (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xb, 0x4, 0xa000200000a958, 0x3, 0x3, 0x7ff, 0x100, 0x1, 0x100fff}) (async)
write$cgroup_int(r0, &(0x7f0000000100)=0x6, 0x12) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x96066ccddc7e458b, 0x5}}}}]}, 0x40}}, 0x0)

567.60956ms ago: executing program 0 (id=753):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x8, 0xffff, {<r2=>0xffffffffffffffff}, {0xee01}, 0x8, 0x3})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r3=>0x0)
kcmp(r2, r3, 0x6, r1, r0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r5, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0xff, 0x2}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

567.291929ms ago: executing program 4 (id=754):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x10c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0xef, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x11002, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x9}]}, @void, @void, @val={0x6, 0x2, 0x1fc}, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}, [{0xdd, 0x87, "38bf7a4f0d794a609766c496bf8f55bbc0a3ac68ed00ac576247aaf5404d3235415620c23f0457abee7b1b5ce3bad6cd6dadca408b347579ddcc884119383b93d29dc3e99387abfcfac7de25063a7ffff0828b3491e964044ef3be00cf08d74a8fe7ccf0df0d4673753dadebe6a9a6bfb33c5d47cbb27980bde66a3cdc76a75e9a4cdaf698b28f"}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)

507.50427ms ago: executing program 4 (id=755):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/233)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000300)="a6a7adb551b1", 0x6, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2)
shutdown(r0, 0x1)

507.129928ms ago: executing program 0 (id=756):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
bind$packet(r1, &(0x7f00000002c0)={0x11, 0x1b, r4, 0x1, 0x7, 0x6, @multicast}, 0x14)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0xffe0}, {}, {0x4, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x90)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@can_newroute={0x44, 0x18, 0x1, 0x8ba, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x5, 0x1, 0x0, 0x0, "42ba18f9fe09f486"}, 0x1}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, 0xee01}]}, 0x44}}, 0x880)
r10 = socket(0x10, 0x803, 0x2)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r12, @ANYRES16=r11], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

236.854389ms ago: executing program 0 (id=757):
r0 = semget$private(0x0, 0x4000000009, 0x208)
semop(r0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600800a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40140)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0)
r4 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00')
writev(r5, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x1, 0x3, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
poll(&(0x7f00000001c0)=[{r3, 0x20}, {r1, 0x4044}], 0x2, 0xffffff04)
semctl$SETALL(r0, 0x0, 0x11, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000200)={0x100, r7}, 0x0)
r8 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0)
ioctl$FBIOGETCMAP(r8, 0x4604, &(0x7f0000000480)={0x7ffffffe, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r9 = msgget(0x2, 0x4)
msgsnd(r9, &(0x7f0000000500)={0x3, "f0540f7e336acb8a4cf9bca06aea5fafb8cd07c5162c1c1bf2db55ca35acd3f0ded0b8140724ede490a22772090d47dd0fcd2470344f282d855331f829b666fd100221e1df52d0f71a9bf71044256d80c7552cfe37f505ada43128b805deb068d5199665a0746e70c4"}, 0x71, 0x800)
close(r7)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
close(r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x62e78f16, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94)
kexec_load(0x0, 0x10, &(0x7f00000001c0)=[{0x0}], 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000580)={{0xeb, 0xea}, 'port0\x00', 0x9, 0x180420, 0x800, 0x8001, 0xeab, 0x80000001, 0x0, 0x0, 0x1, 0x48})

137.497959ms ago: executing program 0 (id=758):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/14, 0xe, <r0=>0x0, &(0x7f0000000400)=""/47, 0x2f}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x200, 0x0, 0x2}, 0x10, r0}, 0x94)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x100580)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
close_range(r3, r3, 0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x5, 0x4, {<r6=>r5}, {}, 0x1, 0x80000000})
getpgid(r6)
sched_getattr(r5, 0x0, 0x0, 0x0)
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084523, &(0x7f0000001f40)=""/231)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, &(0x7f0000000100)={'wlan1\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000040)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040880)

77.303285ms ago: executing program 0 (id=759):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x73, 0x6, 0x8, 0xb, 0x10000, 0x81})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000210c0), 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r5, 0x4008af25, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x60, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x1c}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x6, 0x0, {0x2000008, 0x3, 0x0, 0x3fc, 0x0, 0x0, 0x1}, 0x1, 0x9, 0xc}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x60}}, 0x850)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, r3, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3deacb"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "a801a5e96b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f461ddfd4d158b2685c45d27c6"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bb8aaa4ba9ca0fbc6e6aee2b38"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "214af8a74c"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008811}, 0x20000090)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000504)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close(r7)

654.558µs ago: executing program 0 (id=760):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt(r0, 0x0, 0x7, 0x0, 0x0) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x8, 0x0, 0x0, 0xc, 0x2}, @var={0x3, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000001200)=""/234, 0x38, 0xea, 0x0, 0x6, 0x10000}, 0x28) (async)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x101d03, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0) (async)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000000)={'trans=virtio,', {[{@noxattr}, {@posixacl}]}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r5, 0x5, 0x70bd2b, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xd}]}]}, 0x28}}, 0x40840) (async)
r7 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r8, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x404, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}})
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000023, 0x20000, 0xffffff}]}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000001300)="14b73146c46c03fd57c2a71492216187e8e67bf7ff2977a4497290656bb2f7f2ab334f9743ff0311065714b78b2b040f65afa9f800530b4469a5fc9e1f91871ce0f7ce3c34c51421a772dc8865864f042b99521771082725731967d3a2d02107e5eda65c79f64b04bc3a76ec1bda0978c6fea64821e5e93b3ccc82d5ab19c03c71f9cebdea4fe8873eeeedf49b986017a226612d7302b38252dfe158912f25824b9b7cb3db632706e046d17bff467ba4fc70ffff587409f9370de8c0fdb2d95a03ed5cd929cefbc8c5e2ec121370440405d5ce2f584f12c419b9d801b3", &(0x7f0000001400)=@buf="7b82a43fa3f2dbdde6c957072b70ab75e47cf96c0a88e03107de8ee186f7cab0ef29270641f0283f0c2b054ceae1104a011bc1b6817394bdf16386b4e329a159c74c99d2177a8993d07727321b7ff6a6f0a0f4adc4ec266ac1635c921ef48e1f289809433f4802fd067fac112a92eb3388b6a713e0fb8bded21331630c658df9336ced287a4b453722dc93f06bb99e34fa9f3277599d2b151ac51cb1874d98706d461c1564908c83bbac2f5489a55401829e290e4e43e38790f60d0cd5e5a3e4558e2c1581e06b4015a72a72b8525b0858e5f5fba35c53d41706c96a9003d66248ca9ce5", 0x2}, 0x20) (async)
r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r11, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) (async)
r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
syz_usb_disconnect(r12) (async)
syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x7, 0x10, 0xc2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xd}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)}) (async)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r14, r13, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, [@generic={0x9, 0xc, 0x9, 0x7ff, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001500)=""/4096, 0x0, 0x1, '\x00', 0x0, @sock_ops, r1}, 0x94) (async)
r15 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r15, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_disconnect(r15)

0s ago: executing program 4 (id=761):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (rerun: 32)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'netdevsim0\x00', {0x4}, 0xbfa})
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x7, '\x00\x00@\x00'}, @global=@item_4={0x3, 0x1, 0x5, "05a08000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000140)={0x3, 0x200, 0x5}) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x70)
sendto$inet6(r3, &(0x7f0000000180)="da149d", 0x3, 0x51, &(0x7f0000000040)={0xa, 0x4e22, 0x185, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) (async)
listen(r3, 0x100101)
accept4(r3, 0x0, 0x0, 0x80800)

kernel console output (not intermixed with test programs):

ted IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.606143][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.609132][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.612311][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.625601][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.632426][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.651334][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.666765][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.712366][   T72] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.748642][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.757361][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.809784][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.814609][   T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.818439][   T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.819378][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.829570][ T6029] EXT4-fs (nbd3): unable to read superblock
[   65.876651][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.879568][ T6036] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   65.885961][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.896077][ T6036] netlink: 'syz.0.6': attribute type 3 has an invalid length.
[   65.899719][ T6036] netlink: 1504 bytes leftover after parsing attributes in process `syz.0.6'.
[   65.977255][ T6041] gretap1: entered promiscuous mode
[   66.055157][ T6048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.227920][ T6069] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.263787][ T6069] IPv6: NLM_F_REPLACE set, but no existing node found!
[   66.357105][ T6084] capability: warning: `syz.0.17' uses 32-bit capabilities (legacy support in use)
[   66.428851][ T6091] binder: 6077:6091 ioctl c0306201 200000000040 returned -22
[   66.529177][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.631290][   T63] Bluetooth: hci1: command tx timeout
[   66.655900][ T6097] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   66.663891][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   66.667857][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   66.679682][ T6094] Zero length message leads to an empty skb
[   66.701945][   T63] Bluetooth: hci0: command tx timeout
[   66.702218][ T5947] Bluetooth: hci3: command tx timeout
[   66.704460][   T63] Bluetooth: hci2: command tx timeout
[   67.066107][ T6048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.121275][   T71] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   67.283659][   T71] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[   67.287974][   T71] usb 6-1: config 0 interface 0 has no altsetting 0
[   67.293903][ T6122] =======================================================
[   67.293903][ T6122] WARNING: The mand mount option has been deprecated and
[   67.293903][ T6122]          and is ignored by this kernel. Remove the mand
[   67.293903][ T6122]          option from the mount to silence this warning.
[   67.293903][ T6122] =======================================================
[   67.306691][   T71] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   67.310491][   T71] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   67.314065][   T71] usb 6-1: Product: syz
[   67.315945][   T71] usb 6-1: Manufacturer: syz
[   67.317955][   T71] usb 6-1: SerialNumber: syz
[   67.325015][   T71] usb 6-1: config 0 descriptor??
[   67.339880][   T71] usb 6-1: selecting invalid altsetting 0
[   67.348039][ T6125] 9pnet_virtio: no channels available for device syz
[   67.354100][   T40] kauditd_printk_skb: 77 callbacks suppressed
[   67.354115][   T40] audit: type=1400 audit(1773602898.999:169): avc:  denied  { read } for  pid=6123 comm="syz.2.28" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   67.366908][   T40] audit: type=1400 audit(1773602898.999:170): avc:  denied  { open } for  pid=6123 comm="syz.2.28" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   67.377830][   T40] audit: type=1400 audit(1773602898.999:171): avc:  denied  { ioctl } for  pid=6123 comm="syz.2.28" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[   67.405382][   T40] audit: type=1400 audit(1773602899.049:172): avc:  denied  { create } for  pid=6123 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   67.541181][   T24] usb 6-1: USB disconnect, device number 2
[   67.562960][   T40] audit: type=1326 audit(1773602899.209:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.2.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1579c799 code=0x7fc00000
[   67.570054][   T40] audit: type=1326 audit(1773602899.209:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.2.28" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1579c799 code=0x7fc00000
[   67.577595][ T6131] program syz.0.29 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.577695][ T6132] program syz.0.29 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   67.579306][ T6131] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[   67.593817][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.597953][   T40] audit: type=1400 audit(1773602899.209:175): avc:  denied  { read write } for  pid=6130 comm="syz.0.29" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   67.600327][ T6131] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   67.608279][   T40] audit: type=1400 audit(1773602899.209:176): avc:  denied  { open } for  pid=6130 comm="syz.0.29" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   67.621657][   T40] audit: type=1400 audit(1773602899.229:177): avc:  denied  { ioctl } for  pid=6130 comm="syz.0.29" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[   67.631995][   T40] audit: type=1400 audit(1773602899.249:178): avc:  denied  { unmount } for  pid=5940 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   67.913105][ T6149] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   68.159263][ T6005] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.321221][ T6005] usb 5-1: Using ep0 maxpacket: 16
[   68.325646][ T6005] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.330328][ T6005] usb 5-1: config 0 has no interfaces?
[   68.333333][ T6005] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[   68.337412][ T6005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.343621][ T6005] usb 5-1: config 0 descriptor??
[   68.516329][ T6147] syz.2.30 (6147): drop_caches: 2
[   68.552450][ T6005] usb 5-1: USB disconnect, device number 2
[   68.701499][ T5947] Bluetooth: hci1: command tx timeout
[   68.723992][ T6048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.747610][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   68.781161][ T5947] Bluetooth: hci2: command tx timeout
[   68.783587][   T63] Bluetooth: hci3: command tx timeout
[   68.815136][  T195] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.833948][ T6048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.907772][  T195] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.935397][   T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.938585][   T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.941756][   T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.947342][   T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.950130][   T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.971771][   T72] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.995749][   T72] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.999180][   T72] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.016356][  T195] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.040411][   T72] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.107205][ T6193] trusted_key: syz.3.47 sent an empty control message without MSG_MORE.
[   69.139436][  T195] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.175105][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'.
[   69.262758][ T6182] chnl_net:caif_netlink_parms(): no params data found
[   69.285174][ T6219] loop6: detected capacity change from 0 to 524288000
[   69.314821][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'.
[   69.393449][  T195] bridge_slave_1: left allmulticast mode
[   69.396217][  T195] bridge_slave_1: left promiscuous mode
[   69.399601][  T195] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.405409][ T6232] fuse: Bad value for 'user_id'
[   69.407552][ T6232] fuse: Bad value for 'user_id'
[   69.450113][  T195] bridge_slave_0: left allmulticast mode
[   69.452110][  T195] bridge_slave_0: left promiscuous mode
[   69.453997][  T195] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.485038][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.488451][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.492964][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.495814][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.498343][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.501985][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.505256][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.509145][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.516060][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.519421][    T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0
[   69.528436][    T9] hid-generic 0006:0004:0009.0002: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0
[   69.585789][ T6247] fido_id[6247]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   69.674870][  T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   69.681141][  T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   69.687043][  T195] bond0 (unregistering): Released all slaves
[   69.721165][ T5900] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   69.774323][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.777493][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.780921][ T6182] bridge_slave_0: entered allmulticast mode
[   69.785611][ T6182] bridge_slave_0: entered promiscuous mode
[   69.795728][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.798613][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.802174][ T6182] bridge_slave_1: entered allmulticast mode
[   69.805945][ T6182] bridge_slave_1: entered promiscuous mode
[   69.816378][ T6257] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   69.848651][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.855682][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.886935][ T6182] team0: Port device team_slave_0 added
[   69.892045][ T6182] team0: Port device team_slave_1 added
[   69.892238][ T6259] Bluetooth: MGMT ver 1.23
[   69.903113][ T5900] usb 7-1: not running at top speed; connect to a high speed hub
[   69.912394][ T5900] usb 7-1: config 1 interface 0 altsetting 179 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   69.916978][ T5900] usb 7-1: config 1 interface 0 has no altsetting 0
[   69.929378][ T5900] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40
[   69.934763][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.938485][ T5900] usb 7-1: Product: syz
[   69.941603][ T5900] usb 7-1: Manufacturer: syz
[   69.944518][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.947407][ T5900] usb 7-1: SerialNumber: syz
[   69.948455][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.952878][ T6239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   69.960400][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.969762][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.972967][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.983920][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.044072][ T6182] hsr_slave_0: entered promiscuous mode
[   70.047399][ T6182] hsr_slave_1: entered promiscuous mode
[   70.050490][ T6182] debugfs: 'hsr0' already exists in 'hsr'
[   70.053200][ T6182] Cannot create hsr debugfs directory
[   70.090833][  T195] hsr_slave_0: left promiscuous mode
[   70.094932][  T195] hsr_slave_1: left promiscuous mode
[   70.097662][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.100208][  T195] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.103624][  T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.106146][  T195] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.115465][  T195] veth1_macvtap: left promiscuous mode
[   70.117685][  T195] veth0_macvtap: left promiscuous mode
[   70.119695][  T195] veth1_vlan: left promiscuous mode
[   70.122167][  T195] veth0_vlan: left promiscuous mode
[   70.141798][   T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   70.183958][ T5900] usbhid 7-1:1.0: can't add hid device: -71
[   70.186755][ T5900] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[   70.193088][ T5900] usb 7-1: USB disconnect, device number 2
[   70.291244][   T53] usb 8-1: Using ep0 maxpacket: 8
[   70.302881][   T53] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[   70.306427][   T53] usb 8-1: config 179 has no interface number 0
[   70.309035][   T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 63, changing to 9
[   70.317113][   T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   70.318188][  T195] team0 (unregistering): Port device team_slave_1 removed
[   70.329965][  T195] team0 (unregistering): Port device team_slave_0 removed
[   70.331228][   T53] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   70.336589][   T53] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   70.349078][   T53] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   70.353025][   T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.376442][   T53] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input5
[   70.426869][ T5326] input input5: unable to receive magic message: -110
[   70.433475][ T5326] input input5: unable to receive magic message: -32
[   70.439146][ T5326] input input5: unable to receive magic message: -32
[   70.458534][ T5326] input input5: unable to receive magic message: -32
[   70.465492][ T5326] input input5: unable to receive magic message: -32
[   70.472614][ T5326] input input5: unable to receive magic message: -32
[   70.592399][ T6271] netlink: 'syz.0.65': attribute type 11 has an invalid length.
[   70.618186][ T6182] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   70.625821][ T6182] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   70.640027][ T6182] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   70.645013][ T6182] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   70.689966][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.729655][ T6182] 8021q: adding VLAN 0 to HW filter on device team0
[   70.735819][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.739049][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.749636][   T61] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.751972][   T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.760233][ T6284] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[   70.762543][ T6284] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   70.765853][ T6284] vhci_hcd vhci_hcd.0: Device attached
[   70.768785][ T6284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'.
[   70.782363][   T63] Bluetooth: hci1: command tx timeout
[   70.795862][ T6285] vhci_hcd: connection closed
[   70.797168][   T61] vhci_hcd vhci_hcd.2: stop threads
[   70.800632][   T61] vhci_hcd vhci_hcd.2: release socket
[   70.805409][   T61] vhci_hcd vhci_hcd.2: disconnect device
[   70.861387][   T63] Bluetooth: hci2: command tx timeout
[   70.863270][   T63] Bluetooth: hci3: command tx timeout
[   70.893892][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.021308][ T5947] Bluetooth: hci0: command tx timeout
[   71.080125][ T6182] veth0_vlan: entered promiscuous mode
[   71.087315][ T6182] veth1_vlan: entered promiscuous mode
[   71.110719][ T6182] veth0_macvtap: entered promiscuous mode
[   71.117179][ T6182] veth1_macvtap: entered promiscuous mode
[   71.127934][   T53] usb 8-1: USB disconnect, device number 2
[   71.130050][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   71.130729][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.142814][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.150102][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.155854][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.160647][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.165297][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.214448][   T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.217041][   T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.234840][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.238397][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.333396][ T6314] tipc: MTU too low for tipc bearer
[   71.336630][ T6316] tipc: MTU too low for tipc bearer
[   71.380062][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.383095][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.420141][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.430190][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.435428][ T6324] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   71.480459][ T6327] netlink: 'syz.0.71': attribute type 2 has an invalid length.
[   71.503650][ T1259] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.511850][ T1259] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.528429][ T1259] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.534599][ T1259] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.599449][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.603675][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.619164][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.619542][ T6344] iommufd_mock iommufd_mock1: Adding to iommu group 9
[   71.623518][ T1259] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   71.623573][ T1259] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   71.623600][ T1259] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   71.623627][ T1259] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   71.624829][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'.
[   71.628421][ T6343] iommufd_mock iommufd_mock0: Adding to iommu group 10
[   71.682503][ T6349] fuse: Unknown parameter 'group_Id'
[   71.683498][ T6350] fuse: Unknown parameter 'group_Id'
[   71.766184][ T6350] syz.3.77 (6350): drop_caches: 2
[   71.787963][ T6351] syz.3.77 (6351): drop_caches: 2
[   72.133908][ T6397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.211042][ T6405] tipc: MTU too low for tipc bearer
[   72.223145][ T6377] devtmpfs: Bad value for 'usrquota_block_hardlimit'
[   72.320115][ T6420] syzkaller0: entered promiscuous mode
[   72.324023][ T6420] syzkaller0: entered allmulticast mode
[   72.337553][ T6422] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   72.351960][ T6422] iommufd_mock iommufd_mock1: Adding to iommu group 10
[   72.366149][   T40] kauditd_printk_skb: 113 callbacks suppressed
[   72.366165][   T40] audit: type=1400 audit(1773602904.009:292): avc:  denied  { mounton } for  pid=6421 comm="syz.3.98" path="/file0" dev="ramfs" ino=13458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[   72.367802][ T6422] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   72.381433][ T6422] overlayfs: failed to set xattr on upper
[   72.384028][ T6422] overlayfs: ...falling back to redirect_dir=nofollow.
[   72.386624][ T6422] overlayfs: ...falling back to index=off.
[   72.389422][ T6422] overlayfs: ...falling back to uuid=null.
[   72.397546][ T6422] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[   72.466412][   T40] audit: type=1400 audit(1773602904.109:293): avc:  denied  { setopt } for  pid=6424 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   72.533308][   T40] audit: type=1400 audit(1773602904.179:294): avc:  denied  { create } for  pid=6426 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.542465][ T6427] netlink: 'syz.3.100': attribute type 32 has an invalid length.
[   72.547694][   T40] audit: type=1400 audit(1773602904.189:295): avc:  denied  { write } for  pid=6426 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.555228][   T40] audit: type=1400 audit(1773602904.189:296): avc:  denied  { nlmsg_write } for  pid=6426 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   72.577406][   T40] audit: type=1400 audit(1773602904.219:297): avc:  denied  { map_create } for  pid=6428 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[   72.585909][   T40] audit: type=1400 audit(1773602904.219:298): avc:  denied  { create } for  pid=6428 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   72.601907][   T40] audit: type=1400 audit(1773602904.219:299): avc:  denied  { read } for  pid=6428 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   72.610293][   T40] audit: type=1400 audit(1773602904.219:300): avc:  denied  { setopt } for  pid=6428 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   72.619354][   T40] audit: type=1400 audit(1773602904.259:301): avc:  denied  { write } for  pid=6433 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   72.924304][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   73.111181][ T5947] Bluetooth: hci0: command tx timeout
[   73.151246][    T9] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[   73.217460][ T6456] ip6tnl1: entered promiscuous mode
[   73.226914][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fa39800: rx timeout, send abort
[   73.228206][ T6456] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   73.328063][    T9] usb 9-1: not running at top speed; connect to a high speed hub
[   73.379513][    T9] usb 9-1: config 6 has an invalid interface number: 171 but max is 3
[   73.383431][    T9] usb 9-1: config 6 has an invalid interface number: 33 but max is 3
[   73.387228][    T9] usb 9-1: config 6 has an invalid interface number: 10 but max is 3
[   73.390697][    T9] usb 9-1: config 6 has an invalid interface number: 128 but max is 3
[   73.394926][    T9] usb 9-1: config 6 has no interface number 0
[   73.397687][    T9] usb 9-1: config 6 has no interface number 1
[   73.399944][    T9] usb 9-1: config 6 has no interface number 2
[   73.402312][    T9] usb 9-1: config 6 has no interface number 3
[   73.405029][    T9] usb 9-1: config 6 interface 171 altsetting 249 endpoint 0x6 has invalid maxpacket 1088, setting to 64
[   73.409804][    T9] usb 9-1: config 6 interface 171 altsetting 249 endpoint 0xF has invalid maxpacket 1024, setting to 64
[   73.417098][    T9] usb 9-1: config 6 interface 171 altsetting 249 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[   73.427509][    T9] usb 9-1: config 6 interface 171 altsetting 249 endpoint 0x9 has invalid maxpacket 512, setting to 64
[   73.432427][    T9] usb 9-1: config 6 interface 171 altsetting 249 has a duplicate endpoint with address 0x6, skipping
[   73.441331][    T9] usb 9-1: config 6 interface 171 altsetting 249 has a duplicate endpoint with address 0x7, skipping
[   73.445866][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[   73.449900][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   73.455081][    T9] usb 9-1: config 6 interface 33 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   73.459756][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[   73.465692][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x6, skipping
[   73.470346][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   73.472468][ T6466] netlink: 'syz.2.114': attribute type 4 has an invalid length.
[   73.475498][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0x1, skipping
[   73.482937][    T9] usb 9-1: config 6 interface 33 altsetting 9 has a duplicate endpoint with address 0xF, skipping
[   73.487663][    T9] usb 9-1: config 6 interface 10 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[   73.492500][    T9] usb 9-1: config 6 interface 10 altsetting 0 has a duplicate endpoint with address 0x4, skipping
[   73.497012][    T9] usb 9-1: config 6 interface 171 has no altsetting 0
[   73.500048][    T9] usb 9-1: config 6 interface 33 has no altsetting 0
[   73.503402][    T9] usb 9-1: config 6 interface 128 has no altsetting 0
[   73.508443][    T9] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e361, bcdDevice=79.4a
[   73.513205][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.517080][    T9] usb 9-1: Product: ᐉ
[   73.519086][    T9] usb 9-1: Manufacturer: ɲ㼙링￶斴狌꓄獍ᔍ㬯藖斓꧷忴⢍坲ퟮ迾ꨋ鹉䤏衮꺒珫쾫贌ڮ邕䜸䟻뛻꛿㓌㻫郧๳䞘臈謤⠧ꔔ격疮
[   73.525845][    T9] usb 9-1: SerialNumber:  
[   73.530044][    T9] usb 9-1: rejected 1 configuration due to insufficient available bus power
[   73.533546][    T9] usb 9-1: no configuration chosen from 1 choice
[   73.564252][ T6467] netlink: 'syz.2.114': attribute type 5 has an invalid length.
[   73.567076][ T6466] netlink: 'syz.2.114': attribute type 5 has an invalid length.
[   73.630991][   T61] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.730447][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fa39800: abort rx timeout. Force session deactivation
[   73.760019][   T61] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.892495][   T61] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.918782][   T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   73.924848][   T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   73.928458][   T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   73.941338][   T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   73.953186][   T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.968542][ T6480] program syz.2.120 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   73.973340][ T6482] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   73.990538][   T61] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.030111][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[   74.034623][ T1115] ata1.00: irq_stat 0x40000000
[   74.036853][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT
[   74.040267][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 22 nodata 0 out
[   74.040267][ T1115]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[   74.048320][ T1115] ata1.00: status: { DRDY ERR }
[   74.050520][ T1115] ata1.00: error: { ABRT }
[   74.054070][ T1115] ata1.00: device reported invalid CHS sector 0
[   74.218557][ T6476] chnl_net:caif_netlink_parms(): no params data found
[   74.393736][   T61] bridge_slave_1: left allmulticast mode
[   74.395972][   T61] bridge_slave_1: left promiscuous mode
[   74.398803][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.439576][   T61] bridge_slave_0: left allmulticast mode
[   74.454359][   T61] bridge_slave_0: left promiscuous mode
[   74.461183][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.638080][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.642730][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.646494][   T61] bond0 (unregistering): Released all slaves
[   74.670332][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.673647][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.676918][ T6476] bridge_slave_0: entered allmulticast mode
[   74.681189][ T6476] bridge_slave_0: entered promiscuous mode
[   74.686518][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.689836][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.693289][ T6476] bridge_slave_1: entered allmulticast mode
[   74.697416][ T6476] bridge_slave_1: entered promiscuous mode
[   74.733852][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.745469][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.804842][ T6476] team0: Port device team_slave_0 added
[   74.807889][ T6476] team0: Port device team_slave_1 added
[   74.821024][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.823495][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.832673][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.837039][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.839226][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.848598][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.922183][ T6476] hsr_slave_0: entered promiscuous mode
[   74.924536][ T6476] hsr_slave_1: entered promiscuous mode
[   74.926673][ T6476] debugfs: 'hsr0' already exists in 'hsr'
[   74.928509][ T6476] Cannot create hsr debugfs directory
[   74.949366][ T6521] XFS (loop0): SB validate failed with error -5.
[   74.981253][   T61] hsr_slave_0: left promiscuous mode
[   74.987492][   T61] hsr_slave_1: left promiscuous mode
[   74.990415][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.992942][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.998718][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.001332][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.006579][   T61] veth1_macvtap: left promiscuous mode
[   75.008764][   T61] veth0_macvtap: left promiscuous mode
[   75.012324][   T61] veth1_vlan: left promiscuous mode
[   75.014549][   T61] veth0_vlan: left promiscuous mode
[   75.136828][   T61] team0 (unregistering): Port device team_slave_1 removed
[   75.145101][   T61] team0 (unregistering): Port device team_slave_0 removed
[   75.191308][   T63] Bluetooth: hci0: command tx timeout
[   75.349059][ T6476] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   75.356119][ T6476] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   75.366264][ T6476] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   75.373988][ T6476] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   75.383272][ T6542] IPVS: Unknown mcast interface: syzkaller1
[   75.386794][ T6542] SELinux:  policydb magic number 0x2 does not match expected magic number 0xf97cff8c
[   75.390338][ T6542] SELinux: failed to load policy
[   75.438936][ T6553] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[   75.454800][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.466216][ T6476] 8021q: adding VLAN 0 to HW filter on device team0
[   75.471424][  T195] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.473756][  T195] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.481019][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.483414][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.513936][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.534303][ T6557] dummy0: entered promiscuous mode
[   75.538396][ T6557] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   75.545983][ T6557] hsr1: entered allmulticast mode
[   75.548157][ T6557] dummy0: entered allmulticast mode
[   75.550316][ T6557] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   75.694465][ T6566] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[   75.724151][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.898594][    T9] usb 9-1: USB disconnect, device number 2
[   75.906429][ T6476] veth0_vlan: entered promiscuous mode
[   75.915035][ T6476] veth1_vlan: entered promiscuous mode
[   75.936066][ T6476] veth0_macvtap: entered promiscuous mode
[   75.949424][ T6476] veth1_macvtap: entered promiscuous mode
[   75.958283][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.962867][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.979007][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.983649][   T63] Bluetooth: hci1: command tx timeout
[   75.984749][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.988504][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.991478][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.023732][ T6588] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   76.059220][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.065970][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.124625][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.127418][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.137930][ T6593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6593 comm=syz.4.136
[   76.203147][ T6598] [U] V�3��Fپ"S��/��4:�XTZ�W�T��LW��=
[   76.206836][ T6597] [U] J"�E:��"


[   76.287608][ T6606] netlink: 'syz.4.140': attribute type 1 has an invalid length.
[   76.291047][ T6606] netlink: 228 bytes leftover after parsing attributes in process `syz.4.140'.
[   76.314772][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[   76.318357][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[   76.432460][ T6619] dlm: non-version read from control device 9
[   76.564304][ T6628] bond1: option xmit_hash_policy: invalid value (6)
[   76.570348][ T6628] bond1 (unregistering): Released all slaves
[   76.627831][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'.
[   76.630717][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'.
[   76.791679][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.148'.
[   76.981053][ T6649] binder: 6648:6649 ioctl c0306201 2000000004c0 returned -22
[   76.986973][ T6649] fuse: Bad value for 'fd'
[   77.018985][ T6652] netlink: 'syz.0.152': attribute type 2 has an invalid length.
[   77.151451][ T6309] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[   77.271653][   T63] Bluetooth: hci0: command tx timeout
[   77.312924][ T6309] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   77.318746][ T6309] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[   77.322712][ T6309] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.325485][ T6309] usb 9-1: Product: syz
[   77.326890][ T6309] usb 9-1: Manufacturer: syz
[   77.328664][ T6309] usb 9-1: SerialNumber: syz
[   77.333277][ T6309] usb 9-1: config 0 descriptor??
[   77.354698][ T6309] hub 9-1:0.0: bad descriptor, ignoring hub
[   77.354878][ T6672] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   77.357237][ T6309] hub 9-1:0.0: probe with driver hub failed with error -5
[   77.365398][ T6672] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock
[   77.365458][ T6309] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input6
[   77.369347][ T6672] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   77.375943][ T6672] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock
[   77.382215][   T40] kauditd_printk_skb: 53 callbacks suppressed
[   77.382228][   T40] audit: type=1400 audit(1773602909.029:355): avc:  denied  { read } for  pid=5326 comm="acpid" name="mouse2" dev="devtmpfs" ino=2879 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   77.394340][ T6672] netlink: 168 bytes leftover after parsing attributes in process `syz.5.157'.
[   77.396913][   T40] audit: type=1400 audit(1773602909.029:356): avc:  denied  { open } for  pid=5326 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2879 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   77.460257][ T6675] evm: overlay not supported
[   77.501889][   T40] audit: type=1400 audit(1773602909.149:357): avc:  denied  { create } for  pid=6676 comm="syz.5.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   77.509230][ T6677] fuse: Bad value for 'rootmode'
[   77.540136][   T40] audit: type=1400 audit(1773602909.179:358): avc:  denied  { read } for  pid=6643 comm="syz.4.150" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   77.550116][   T40] audit: type=1400 audit(1773602909.179:359): avc:  denied  { open } for  pid=6643 comm="syz.4.150" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[   77.594074][   T40] audit: type=1400 audit(1773602909.229:360): avc:  denied  { bind } for  pid=6643 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   77.606423][   T40] audit: type=1400 audit(1773602909.249:361): avc:  denied  { setopt } for  pid=6643 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   77.987065][   T40] audit: type=1400 audit(1773602909.629:362): avc:  denied  { append } for  pid=6686 comm="syz.0.160" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   78.071848][   T63] Bluetooth: hci1: command tx timeout
[   78.859681][   T40] audit: type=1400 audit(1773602910.499:363): avc:  denied  { create } for  pid=6689 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   78.866342][ T6690] tipc: Failed to remove unknown binding: 66,0,0/0:3010723520/3010723521
[   78.869537][   T40] audit: type=1400 audit(1773602910.499:364): avc:  denied  { bind } for  pid=6689 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   78.872906][ T6690] tipc: Failed to remove unknown binding: 66,0,0/0:3010723520/3010723521
[   78.888516][ T6690] process 'syz.0.161' launched './file1' with NULL argv: empty string added
[   79.247569][ T6707] bridge1: entered promiscuous mode
[   79.249775][ T6707] bridge1: entered allmulticast mode
[   79.253748][ T6707] team0: Port device bridge1 added
[   79.301510][ T6718] ptrace attach of "/syz-executor exec"[5946] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      @              
                                           6   ����                                  ����                       �"[6718]
[   79.372310][ T6723] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   79.380243][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'.
[   79.438997][ T6727] NILFS (nbd5): device size too small
[   79.828351][ T6740] netlink: 'syz.5.176': attribute type 32 has an invalid length.
[   79.830979][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.176'.
[   79.848982][ T6740] bond1: Setting coupled_control to off (0)
[   79.856059][ T6740] warning: `syz.5.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.896721][ T6740] bond2 (unregistering): Released all slaves
[   79.915735][ T6746] syzkaller0: entered promiscuous mode
[   79.918162][ T6746] syzkaller0: entered allmulticast mode
[   79.993500][ T6005] usb 9-1: USB disconnect, device number 3
[   80.141746][   T63] Bluetooth: hci1: command tx timeout
[   80.159123][ T6755] nftables ruleset with unbound chain
[   80.186455][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'.
[   80.191799][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'.
[   80.264484][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.5.180'.
[   80.449297][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.5.191'.
[   80.454342][ T6790] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[   80.556550][ T6779] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   80.559637][ T6779] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.567011][ T6797] ip6t_srh: unknown srh match flags  4000
[   80.567787][ T6779] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.575243][ T6779] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   80.577892][ T6779] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.584649][ T6779] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.588409][ T6779] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   80.590644][ T6779] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   80.598682][ T6779] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   80.604112][ T6779] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   80.606760][ T6779] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.610387][ T6779] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.695458][ T6808] syz.0.197 uses obsolete (PF_INET,SOCK_PACKET)
[   80.710894][ T6806] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   80.777215][ T6813] tmpfs: Unknown parameter '�N���/˵���'
[   81.051193][   T53] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[   81.130992][ T6832] syzkaller1: entered promiscuous mode
[   81.132874][ T6832] syzkaller1: entered allmulticast mode
[   81.181598][   T53] usb 10-1: device descriptor read/64, error -71
[   81.431644][   T53] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   81.561213][   T53] usb 10-1: device descriptor read/64, error -71
[   81.672845][   T53] usb usb10-port1: attempt power cycle
[   81.711592][ T6853] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   81.748942][ T6855] syzkaller1: entered promiscuous mode
[   81.751338][ T6855] syzkaller1: entered allmulticast mode
[   81.761510][ T6855] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[   82.011401][   T53] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[   82.032600][   T53] usb 10-1: device descriptor read/8, error -71
[   82.096215][ T6880] overlay: ./file0 is not a directory
[   82.099717][ T6880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=6880 comm=syz.0.215
[   82.284629][   T53] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[   82.304702][   T53] usb 10-1: device descriptor read/8, error -71
[   82.411424][   T53] usb usb10-port1: unable to enumerate USB device
[   82.461545][   T63] Bluetooth: hci2: command 0x0c1a tx timeout
[   82.463998][   T40] kauditd_printk_skb: 35 callbacks suppressed
[   82.464011][   T40] audit: type=1400 audit(1773602914.109:400): avc:  denied  { nlmsg_read } for  pid=6905 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   82.539206][   T40] audit: type=1400 audit(1773602914.169:401): avc:  denied  { mount } for  pid=6905 comm="syz.4.220" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   82.621212][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[   82.621286][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[   82.623217][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout
[   82.775413][ T6913] __nla_validate_parse: 2 callbacks suppressed
[   82.775425][ T6913] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.222'.
[   82.951191][   T40] audit: type=1400 audit(1773602914.589:402): avc:  denied  { mount } for  pid=6921 comm="syz.2.223" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[   82.961321][   T40] audit: type=1400 audit(1773602914.599:403): avc:  denied  { mounton } for  pid=6921 comm="syz.2.223" path="/55/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[   83.075771][ T6922] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[   83.137312][   T40] audit: type=1400 audit(1773602914.779:404): avc:  denied  { write } for  pid=6932 comm="syz.0.225" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   83.139201][ T6933] 0x0000000000ff-0x000000020102 : ""
[   83.145798][   T40] audit: type=1400 audit(1773602914.779:405): avc:  denied  { open } for  pid=6932 comm="syz.0.225" path="/64/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   83.149101][ T6933] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff01
[   83.156318][   T40] audit: type=1400 audit(1773602914.779:406): avc:  denied  { ioctl } for  pid=6932 comm="syz.0.225" path="/64/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   83.168952][ T6933] ftl_cs: FTL header corrupt!
[   83.341389][   T40] audit: type=1400 audit(1773602914.979:407): avc:  denied  { shutdown } for  pid=6943 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   83.393716][   T40] audit: type=1400 audit(1773602915.039:408): avc:  denied  { create } for  pid=6955 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   83.403177][   T40] audit: type=1400 audit(1773602915.039:409): avc:  denied  { ioctl } for  pid=6955 comm="syz.4.231" path="socket:[16372]" dev="sockfs" ino=16372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[   83.469651][ T6967] netlink: 'syz.4.235': attribute type 1 has an invalid length.
[   83.473190][ T6967] netlink: 88 bytes leftover after parsing attributes in process `syz.4.235'.
[   83.476142][ T6967] netlink: 1 bytes leftover after parsing attributes in process `syz.4.235'.
[   83.478977][ T6967] netlink: 658 bytes leftover after parsing attributes in process `syz.4.235'.
[   83.508456][ T6969] netlink: 'syz.4.236': attribute type 1 has an invalid length.
[   83.511028][ T6969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.236'.
[   83.547484][ T6969] netlink: 'syz.4.236': attribute type 3 has an invalid length.
[   83.550950][ T6969] netlink: 'syz.4.236': attribute type 1 has an invalid length.
[   83.557263][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'.
[   83.611039][ T5947] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28
[   83.765930][ T6979] tipc: Started in network mode
[   83.768200][ T6979] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   83.772500][ T6979] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.812814][ T5947] Bluetooth: hci1: unexpected event for opcode 0x1405
[   83.862940][ T6989] netlink: 'syz.2.244': attribute type 3 has an invalid length.
[   83.866661][ T6989] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   83.870013][ T6989] netlink: 212 bytes leftover after parsing attributes in process `syz.2.244'.
[   83.875643][ T6989] NCSI netlink: No device for ifindex 813332851
[   83.967418][ T6996] iommufd_mock iommufd_mock0: Adding to iommu group 9
[   84.014595][ T7000] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.248'.
[   84.017742][ T7000] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8)
[   84.185965][ T7015] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[   84.188830][ T7015] SELinux: failed to load policy
[   84.429217][ T7037] bond0: entered promiscuous mode
[   84.431684][ T7037] bond_slave_0: entered promiscuous mode
[   84.434300][ T7037] bond_slave_1: entered promiscuous mode
[   84.436898][ T7037] batadv0: entered promiscuous mode
[   84.441370][ T7037] bond0: left promiscuous mode
[   84.442992][ T7037] bond_slave_0: left promiscuous mode
[   84.445552][ T7037] bond_slave_1: left promiscuous mode
[   84.447948][ T7037] batadv0: left promiscuous mode
[   84.477653][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'.
[   84.541932][ T5947] Bluetooth: hci2: command 0x0c1a tx timeout
[   84.664574][ T7055] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   84.667276][ T7055] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   84.670569][ T7055] vhci_hcd vhci_hcd.0: Device attached
[   84.682591][ T7051] bond0: (slave bond_slave_1): Releasing backup interface
[   84.701337][ T5947] Bluetooth: hci3: command 0x0c1a tx timeout
[   84.702595][   T63] Bluetooth: hci0: command 0x0c1a tx timeout
[   84.724798][ T7055] vhci_hcd vhci_hcd.0: port 0 already used
[   84.731794][ T7056] vhci_hcd: connection closed
[   84.732314][   T46] vhci_hcd vhci_hcd.2: stop threads
[   84.736145][   T46] vhci_hcd vhci_hcd.2: release socket
[   84.737987][   T46] vhci_hcd vhci_hcd.2: disconnect device
[   84.779240][ T7062] autofs: Bad value for 'fd'
[   84.791174][   T34] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[   84.952693][   T34] usb 10-1: config 0 has no interfaces?
[   84.957061][   T34] usb 10-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.3e
[   84.961046][   T34] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.964653][   T34] usb 10-1: Product: syz
[   84.966615][   T34] usb 10-1: Manufacturer: syz
[   84.968790][   T34] usb 10-1: SerialNumber: syz
[   84.973968][   T34] usb 10-1: config 0 descriptor??
[   85.041172][ T5900] psmouse serio2: Failed to reset mouse on : -5
[   85.181612][   T34] usb 10-1: USB disconnect, device number 6
qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x86000)
[   85.263963][ T1115] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1
[   85.266836][ T1115] ata1: failed to read log page 10h (errno=-5)
[   85.269600][ T1115] ata1.00: NCQ disabled due to excessive errors
[   85.272883][ T1115] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0
[   85.276234][ T1115] ata1.00: irq_stat 0x40000000
[   85.278397][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED
[   85.281319][ T1115] ata1.00: cmd 61/30:70:86:42:08/04:00:00:00:00/40 tag 14 ncq dma 548864 out
[   85.281319][ T1115]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   85.288987][ T1115] ata1.00: status: { DRDY }
[   85.291187][ T1115] ata1.00: failed command: WRITE FPDMA QUEUED
[   85.293948][ T1115] ata1.00: cmd 61/70:78:c6:46:08/00:00:00:00:00/40 tag 15 ncq dma 57344 out
[   85.293948][ T1115]          res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error)
[   85.302109][ T1115] ata1.00: status: { DRDY }
[   85.305251][ T1115] ata1.00: configured for UDMA/100
[   85.307912][ T1115] ata1: EH complete
[   85.968095][ T7076] syzkaller1: entered promiscuous mode
[   86.283938][ T7092] SELinux: security policydb version 16 (MLS) not backwards compatible
[   86.287650][ T7092] SELinux: failed to load policy
[   86.290480][ T7092] SELinux:  policydb version -1332278822 does not match my version range 15-35
[   86.294414][ T7092] SELinux: failed to load policy
[   86.361173][   T71] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   86.452480][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'.
[   86.491194][   T71] usb 5-1: device descriptor read/64, error -71
[   86.503835][ T7103] netlink: 'syz.2.284': attribute type 21 has an invalid length.
[   86.506616][ T7103] IPv6: NLM_F_CREATE should be specified when creating new route
[   86.553095][   T59] cfg80211: failed to load regulatory.db
[   86.621960][   T63] Bluetooth: hci2: command 0x0c1a tx timeout
[   86.731985][   T71] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   86.762911][ T7116] binder: 7114:7116 ioctl c058534f 2000000000c0 returned -22
[   86.781206][   T63] Bluetooth: hci3: command 0x0c1a tx timeout
[   86.781218][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.861174][   T71] usb 5-1: device descriptor read/64, error -71
[   86.971573][   T71] usb usb5-port1: attempt power cycle
[   87.321560][   T71] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   87.342539][   T71] usb 5-1: device descriptor read/8, error -71
[   87.383973][ T7164] Unknown options in mask b7f2
[   87.490941][   T40] kauditd_printk_skb: 22 callbacks suppressed
[   87.490954][   T40] audit: type=1400 audit(1773602919.129:432): avc:  denied  { write } for  pid=7157 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   87.524222][ T7165] syzkaller0: entered promiscuous mode
[   87.525325][   T40] audit: type=1400 audit(1773602919.169:433): avc:  denied  { ioctl } for  pid=7166 comm="syz.2.299" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   87.526210][ T7165] syzkaller0: entered allmulticast mode
[   87.532235][ T7167] input: syz1 as /devices/virtual/input/input8
[   87.541436][   T40] audit: type=1400 audit(1773602919.189:434): avc:  denied  { ioctl } for  pid=5326 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2906 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   87.585840][   T71] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   87.604017][   T71] usb 5-1: device descriptor read/8, error -71
[   87.724438][   T71] usb usb5-port1: unable to enumerate USB device
[   87.805263][   T40] audit: type=1400 audit(1773602919.449:435): avc:  denied  { append } for  pid=7171 comm="syz.2.301" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   88.580980][ T7185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7185 comm=syz.2.304
[   88.582569][ T7186] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[   88.611155][ T5900] misc userio: Buffer overflowed, userio client isn't keeping up
[   88.627091][ T7185] bond1: (slave bridge1): making interface the new active one
[   88.630041][ T7185] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   88.756846][   T40] audit: type=1400 audit(1773602920.399:436): avc:  denied  { create } for  pid=7190 comm="syz.5.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   88.768153][   T40] audit: type=1400 audit(1773602920.409:437): avc:  denied  { ioctl } for  pid=7190 comm="syz.5.305" path="socket:[17927]" dev="sockfs" ino=17927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[   89.019074][   T40] audit: type=1400 audit(1773602920.659:438): avc:  denied  { bind } for  pid=7206 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   89.026810][   T40] audit: type=1400 audit(1773602920.659:439): avc:  denied  { name_bind } for  pid=7206 comm="syz.2.311" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   89.035237][   T40] audit: type=1400 audit(1773602920.659:440): avc:  denied  { node_bind } for  pid=7206 comm="syz.2.311" saddr=ff01::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   89.049137][ T7208] gretap0: entered promiscuous mode
[   89.051429][ T7208] macsec1: entered promiscuous mode
[   89.188260][ T7210] bond1: entered promiscuous mode
[   89.190147][ T7210] bond1: entered allmulticast mode
[   89.301203][ T6006] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   89.326103][   T40] audit: type=1400 audit(1773602920.969:441): avc:  denied  { connect } for  pid=7212 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   89.461239][ T6006] usb 7-1: Using ep0 maxpacket: 8
[   89.466223][ T6006] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.472004][ T6006] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.481192][ T6006] usb 7-1: config 0 interface 0 has no altsetting 0
[   89.488473][ T6006] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   89.496804][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.508892][ T6006] usb 7-1: config 0 descriptor??
[   89.608139][ T7217] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled
[   89.614945][ T7220] netlink: 'syz.5.316': attribute type 3 has an invalid length.
[   89.618083][ T7220] __nla_validate_parse: 2 callbacks suppressed
[   89.618096][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'.
[   89.624553][ T7217] ftl_cs: FTL header not found.
[   89.716824][ T7224] kvm: kvm [7222]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000007e) = 0xe44
[   89.883268][ T7227] netlink: 'syz.0.318': attribute type 4 has an invalid length.
[   89.886663][ T7227] netlink: 152 bytes leftover after parsing attributes in process `syz.0.318'.
[   89.897735][ T7227] `: renamed from bond0 (while UP)
[   89.905097][ T5900] input: PS/2 Generic Mouse as /devices/serio2/input/input7
[   89.930799][ T6006] hid_parser_main: 7 callbacks suppressed
[   89.930816][ T6006] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   89.941160][ T6006] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   89.944313][ T6006] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   89.947423][ T6006] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   89.950180][ T6006] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[   89.953308][ T6006] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[   89.971217][   T53] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[   90.044026][ T7239] netlink: 'syz.0.321': attribute type 28 has an invalid length.
[   90.121157][ T5900] psmouse serio2: Failed to enable mouse on 
[   90.151168][   T53] usb 10-1: Using ep0 maxpacket: 16
[   90.156451][   T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.160856][   T53] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.164865][   T53] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   90.169983][   T53] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   90.174850][   T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.180579][   T53] usb 10-1: config 0 descriptor??
[   90.963349][ T7250] FAT-fs (sr0): bogus number of reserved sectors
[   90.965679][ T7250] FAT-fs (sr0): Can't find a valid FAT filesystem
[   90.973303][ T6024] IPVS: starting estimator thread 0...
[   91.027711][ T7254] netlink: 'syz.0.325': attribute type 15 has an invalid length.
[   91.071319][ T7251] IPVS: using max 30 ests per chain, 72000 per kthread
[   91.421238][ T6024] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   91.523533][ T7266] qnx4: unable to read the superblock
[   91.541396][ T7263] 9p: Could not find request transport: virtOo
[   91.571169][ T6024] usb 5-1: Using ep0 maxpacket: 8
[   91.574789][ T6024] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   91.579664][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   91.585844][ T6024] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   91.589274][ T6024] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.593954][ T6024] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   91.600860][ T6024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.757844][ T6006] usb 7-1: USB disconnect, device number 3
[   91.813730][ T6024] usb 5-1: GET_CAPABILITIES returned 0
[   91.816500][ T6024] usbtmc 5-1:16.0: can't read capabilities
[   92.019199][ T7256] program syz.0.326 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   92.026640][ T6309] usb 5-1: USB disconnect, device number 7
[   92.096291][ T7290] xt_l2tp: missing protocol rule (udp|l2tpip)
[   92.137799][ T7290] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   92.625819][   T40] kauditd_printk_skb: 9 callbacks suppressed
[   92.625829][   T40] audit: type=1400 audit(1773602924.269:451): avc:  denied  { getopt } for  pid=7317 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   92.675261][   T53] usbhid 10-1:0.0: can't add hid device: -71
[   92.680190][   T53] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[   92.686477][   T53] usb 10-1: USB disconnect, device number 7
[   92.807909][ T7333] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   92.846997][   T40] audit: type=1400 audit(1773602924.489:452): avc:  denied  { setattr } for  pid=7334 comm="syz.5.346" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   92.882512][ T7333] gretap1: entered promiscuous mode
[   92.885925][ T7333] bond0: (slave gretap1): making interface the new active one
[   92.891950][ T7333] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   92.916360][ T7333] macvlan2: entered promiscuous mode
[   92.918121][ T7333] macvlan2: entered allmulticast mode
[   92.920306][ T7333] bond0: entered promiscuous mode
[   92.925836][ T7333] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.928715][ T7333] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   92.934413][ T7333] bond0: left promiscuous mode
[   93.011280][   T40] audit: type=1326 audit(1773602924.649:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.011888][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'.
[   93.021550][   T40] audit: type=1326 audit(1773602924.649:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021594][   T40] audit: type=1326 audit(1773602924.649:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021629][   T40] audit: type=1326 audit(1773602924.649:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021670][   T40] audit: type=1326 audit(1773602924.649:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021707][   T40] audit: type=1326 audit(1773602924.649:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021743][   T40] audit: type=1326 audit(1773602924.649:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.021780][   T40] audit: type=1326 audit(1773602924.649:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7344 comm="syz.5.349" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b959c799 code=0x7fc00000
[   93.041300][ T7347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.350'.
[   93.095509][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'.
[   93.121383][ T7356] overlayfs: conflicting options: nfs_export=on,index=off
[   93.271895][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.5.353'.
[   93.300716][ T7370] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.374015][ T1259] Bluetooth: (null): Too short H5 packet
[   93.376366][ T1259] Bluetooth: (null): Invalid header checksum
[   93.426596][ T7370] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.448315][ T7382] sctp: [Deprecated]: syz.4.360 (pid 7382) Use of int in max_burst socket option deprecated.
[   93.448315][ T7382] Use struct sctp_assoc_value instead
[   93.453644][ T7383] sctp: [Deprecated]: syz.4.360 (pid 7383) Use of int in max_burst socket option deprecated.
[   93.453644][ T7383] Use struct sctp_assoc_value instead
[   93.481937][   T72] Bluetooth: (null): Invalid header checksum
[   93.497432][ T7386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'.
[   93.509699][ T7386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.361'.
[   93.534679][ T7370] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.592590][ T1259] Bluetooth: (null): Invalid header checksum
[   93.615407][ T7370] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.674059][ T7403] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[   93.712873][ T1259] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.716919][ T1259] Bluetooth: (null): Invalid header checksum
[   93.723292][ T1259] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.736051][   T72] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.749040][   T72] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.752415][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'.
[   93.822268][   T61] Bluetooth: (null): Invalid header checksum
[   93.865394][ T7413] team0: Device gtp0 is of different type
[   93.941290][   T61] Bluetooth: (null): Invalid header checksum
[   94.041925][   T61] Bluetooth: (null): Invalid header checksum
[   94.053417][ T7422] ip6gre1: entered promiscuous mode
[   94.055859][ T7422] ip6gre1: entered allmulticast mode
[   94.152039][ T1259] Bluetooth: (null): Invalid header checksum
[   94.721174][   T53] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   94.876933][ T7460] fuse: Unknown parameter '00000000000000000003'
[   94.881789][   T53] usb 5-1: too many configurations: 9, using maximum allowed: 8
[   94.885288][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.888391][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.891884][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.898841][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.902313][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.907151][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.910145][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.913216][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.916788][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.919654][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.922890][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.926398][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.929250][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.932293][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.936280][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.939158][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.942233][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.945984][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.948799][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.951760][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.955203][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.958107][   T53] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[   94.960855][   T53] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   94.964521][   T53] usb 5-1: config 0 interface 0 has no altsetting 0
[   94.968256][   T53] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   94.971024][   T53] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   94.974066][   T53] usb 5-1: Product: syz
[   94.975493][   T53] usb 5-1: Manufacturer: syz
[   94.976971][   T53] usb 5-1: SerialNumber: syz
[   94.984277][   T53] usb 5-1: config 0 descriptor??
[   95.002873][   T53] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[   96.122565][ T7493] capability: warning: `syz.4.392' uses deprecated v2 capabilities in a way that may be insecure
[   96.132287][ T7494] Cannot find add_set index 0 as target
[   96.741698][ T7502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.745477][ T7502] syzkaller0: entered promiscuous mode
[   96.751146][ T7502] syzkaller0: entered allmulticast mode
[   96.767256][ T7502] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.791862][ T7502] tipc: Resetting bearer <eth:syzkaller0>
[   96.796763][ T7502] ip6t_REJECT: ECHOREPLY is not supported
[   96.800371][ T7501] tipc: Resetting bearer <eth:syzkaller0>
[   96.808303][ T7501] tipc: Disabling bearer <eth:syzkaller0>
[   97.150679][ T7508] GUP no longer grows the stack in syz.2.397 (7508): 200000006000-200000008000 (200000004000)
[   97.155617][ T7508] CPU: 2 UID: 0 PID: 7508 Comm: syz.2.397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   97.155636][ T7508] Tainted: [L]=SOFTLOCKUP
[   97.155639][ T7508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   97.155646][ T7508] Call Trace:
[   97.155649][ T7508]  <TASK>
[   97.155654][ T7508]  dump_stack_lvl+0x100/0x190
[   97.155683][ T7508]  gup_vma_lookup.cold+0x83/0x96
[   97.155700][ T7508]  fixup_user_fault+0x253/0x510
[   97.155713][ T7508]  fault_in_user_writeable+0x70/0xe0
[   97.155730][ T7508]  futex_lock_pi+0x682/0x7b0
[   97.155744][ T7508]  ? __pfx_futex_lock_pi+0x10/0x10
[   97.155758][ T7508]  ? __pfx___futex_wait+0x10/0x10
[   97.155771][ T7508]  ? lockdep_hardirqs_on+0x78/0x100
[   97.155802][ T7508]  ? __pfx_futex_wake_mark+0x10/0x10
[   97.155823][ T7508]  do_futex+0x18a/0x350
[   97.155833][ T7508]  ? __pfx_do_futex+0x10/0x10
[   97.155844][ T7508]  ? __vm_munmap+0x1d2/0x390
[   97.155862][ T7508]  __x64_sys_futex+0x34f/0x4d0
[   97.155875][ T7508]  ? __pfx___x64_sys_futex+0x10/0x10
[   97.155888][ T7508]  ? __pfx___do_sys_rt_sigreturn+0x10/0x10
[   97.155908][ T7508]  do_syscall_64+0x106/0xf80
[   97.155921][ T7508]  ? clear_bhb_loop+0x40/0x90
[   97.155935][ T7508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.155946][ T7508] RIP: 0033:0x7fad1579c799
[   97.155955][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   97.155965][ T7508] RSP: 002b:00007fad16597028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   97.155976][ T7508] RAX: ffffffffffffffda RBX: 00007fad15a15fa0 RCX: 00007fad1579c799
[   97.155982][ T7508] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000
[   97.155989][ T7508] RBP: 00007fad15832c99 R08: 0000000000000000 R09: 0000000000000000
[   97.155995][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.156001][ T7508] R13: 00007fad15a16038 R14: 00007fad15a15fa0 R15: 00007ffec32960b8
[   97.156015][ T7508]  </TASK>
[   97.396851][ T7525] gfs2: not a GFS2 filesystem
[   97.400406][ T6309] usb 5-1: USB disconnect, device number 8
[   97.403747][ T6309] yurex 5-1:0.0: USB YUREX #0 now disconnected
[   97.421185][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout
[   97.439787][ T7529] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   97.444724][ T7529] overlayfs: failed to set uuid (109/file0, err=-13); falling back to uuid=null.
[   97.447083][ T7518] netlink: 'syz.4.400': attribute type 63 has an invalid length.
[   97.585373][ T7532] batadv0: entered allmulticast mode
[   97.684452][ T7549] tmpfs: Bad value for 'mpol'
[   97.852249][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'.
[   97.865536][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   97.870441][ T7557] netlink: 'syz.2.413': attribute type 30 has an invalid length.
[   97.892972][   T61] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.896614][   T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.900156][   T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.907244][   T61] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.915004][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'.
[   97.918954][ T7557] netlink: 'syz.2.413': attribute type 30 has an invalid length.
[   97.947382][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'.
[   97.965455][ T7559] ip6t_rpfilter: unknown options
[   97.987966][   T40] kauditd_printk_skb: 325 callbacks suppressed
[   97.987983][   T40] audit: type=1400 audit(1773602929.629:786): avc:  denied  { mount } for  pid=7560 comm="syz.2.415" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   98.027992][   T40] audit: type=1400 audit(1773602929.669:787): avc:  denied  { mount } for  pid=7564 comm="syz.0.416" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   98.098399][   T40] audit: type=1400 audit(1773602929.739:788): avc:  denied  { mounton } for  pid=7572 comm="syz.5.419" path="/65/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[   98.112875][   T40] audit: type=1400 audit(1773602929.749:789): avc:  denied  { read } for  pid=7572 comm="syz.5.419" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1
[   98.206314][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'.
[   98.209298][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'.
[   98.219766][ T7581] fuse: Bad value for 'fd'
[   98.297959][ T7582] input: syz0 as /devices/virtual/input/input9
[   98.842474][   T40] audit: type=1400 audit(1773602930.489:790): avc:  denied  { map } for  pid=7585 comm="syz.0.422" path="/107/file0" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   98.886109][ T7586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3357499853 (107439995296 ns) > initial count (63742146944 ns). Using initial count to start timer.
[   98.897728][ T7587] 9pnet_fd: Insufficient options for proto=fd
[   98.897757][ T7586] 9pnet_fd: Insufficient options for proto=fd
[   99.103865][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.425'.
[   99.131032][   T40] audit: type=1400 audit(1773602930.769:791): avc:  denied  { bind } for  pid=7598 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   99.138329][ T7606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.428'.
[   99.196910][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.203866][ T7614] bond0: (slave rose0): Enslaving as an active interface with an up link
[   99.226023][ T7614] bond0: (slave rose0): Releasing backup interface
[   99.233971][   T40] audit: type=1400 audit(1773602930.879:792): avc:  denied  { ioctl } for  pid=7619 comm="syz.2.430" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[   99.247924][   T40] audit: type=1400 audit(1773602930.879:793): avc:  denied  { ioctl } for  pid=7619 comm="syz.2.430" path="socket:[22853]" dev="sockfs" ino=22853 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   99.276041][   T40] audit: type=1400 audit(1773602930.879:794): avc:  denied  { getattr } for  pid=7619 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   99.511311][   T63] Bluetooth: hci1: command 0x0c1a tx timeout
[   99.704815][ T7658] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.435'.
[   99.737040][ T7660] syzkaller0: entered promiscuous mode
[   99.739103][ T7660] syzkaller0: entered allmulticast mode
[  100.041213][  T831] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  100.110423][   T40] audit: type=1400 audit(1773602931.749:795): avc:  denied  { append } for  pid=7675 comm="syz.2.442" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  100.110431][ T7676] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.441'.
[  100.159825][ T5947] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  100.221383][  T831] usb 5-1: Using ep0 maxpacket: 32
[  100.232441][  T831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.236980][  T831] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.244688][  T831] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  100.248535][  T831] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  100.252410][  T831] usb 5-1: Product: syz
[  100.254241][  T831] usb 5-1: Manufacturer: syz
[  100.256251][  T831] usb 5-1: SerialNumber: syz
[  100.273163][  T831] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input10
[  100.334862][ T7699] tmpfs: Bad value for 'mpol'
[  100.521044][ T6006] usb 5-1: USB disconnect, device number 9
[  100.535088][ T6006] appletouch 5-1:1.0: input: appletouch disconnected
[  100.593116][ T7714] overlayfs: failed to clone upperpath
[  100.731588][ T7732] ������: renamed from lo (while UP)
[  100.761189][  T831] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  100.777461][ T7737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=7737 comm=syz.4.455
[  100.912717][  T831] usb 10-1: config 0 has no interfaces?
[  100.915440][  T831] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  100.918344][  T831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  100.920814][  T831] usb 10-1: SerialNumber: syz
[  100.923677][  T831] usb 10-1: config 0 descriptor??
[  101.093172][ T7750] netlink: 'syz.0.458': attribute type 7 has an invalid length.
[  101.096668][ T7750] netlink: 'syz.0.458': attribute type 8 has an invalid length.
[  101.135051][  T831] usb 10-1: USB disconnect, device number 8
[  101.207269][ T7757] Invalid ELF header magic: != ELF
[  101.209594][ T7757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8976 sclass=netlink_route_socket pid=7757 comm=syz.0.459
[  101.541177][  T831] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  101.581706][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout
[  101.584210][ T7753] syz.0.459 (7753): drop_caches: 1
[  101.607354][ T7753] syz.0.459 (7753): drop_caches: 1
[  101.701288][  T831] usb 7-1: Using ep0 maxpacket: 8
[  101.705244][  T831] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  101.709950][  T831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.728752][  T831] pvrusb2: Hardware description: Terratec Grabster AV400
[  101.734901][  T831] pvrusb2: **********
[  101.737454][  T831] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  101.742191][  T831] pvrusb2: Important functionality might not be entirely working.
[  101.746932][  T831] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  101.755138][  T831] pvrusb2: **********
[  101.928384][ T2493] pvrusb2: Invalid write control endpoint
[  101.992069][ T2493] pvrusb2: Invalid write control endpoint
[  101.997141][ T2493] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  102.004333][ T2493] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  102.009139][ T2493] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  102.017123][ T2493] pvrusb2: Device being rendered inoperable
[  102.021362][ T2493] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  102.024171][ T2493] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  102.030482][ T2493] pvrusb2: Attached sub-driver cx25840
[  102.038495][ T2493] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  102.044480][ T2493] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  102.044666][ T5947] block nbd0: Receive control failed (result -107)
[  102.139714][ T6309] usb 7-1: USB disconnect, device number 4
[  102.178816][ T7831] netlink: 'syz.0.471': attribute type 7 has an invalid length.
[  102.254491][ T7831] netlink: 'syz.0.471': attribute type 7 has an invalid length.
[  102.380123][ T7849] pimreg9: entered allmulticast mode
[  102.447138][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.2.474
[  102.488294][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.2.474
[  102.528270][ T7855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=7855 comm=syz.2.474
[  102.648117][ T7871] syz.5.478 (7871): drop_caches: 1
[  102.668582][ T7871] syz.5.478 (7871): drop_caches: 1
[  102.772182][ T7885] netfs: Couldn't get user pages (rc=-14)
[  102.801182][ T6578] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  102.961515][ T6578] usb 5-1: Using ep0 maxpacket: 8
[  102.975370][ T6578] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  102.979894][ T6578] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  102.986258][ T6578] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  102.990778][ T6578] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  102.997521][ T6578] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  103.001864][ T6578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.215219][ T6578] usb 5-1: GET_CAPABILITIES returned 0
[  103.217273][ T6578] usbtmc 5-1:16.0: can't read capabilities
[  103.251187][   T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  103.411615][   T53] usb 7-1: Using ep0 maxpacket: 8
[  103.416275][   T53] usb 7-1: config 9 has an invalid interface number: 12 but max is 1
[  103.419220][   T53] usb 7-1: config 9 has an invalid interface number: 185 but max is 1
[  103.422479][   T53] usb 7-1: config 9 contains an unexpected descriptor of type 0x1, skipping
[  103.426256][   T53] usb 7-1: config 9 has no interface number 0
[  103.428584][   T53] usb 7-1: config 9 has no interface number 1
[  103.431606][   T53] usb 7-1: config 9 interface 12 altsetting 208 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  103.435981][ T6578] usb 5-1: USB disconnect, device number 10
[  103.436406][   T53] usb 7-1: config 9 interface 12 altsetting 208 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  103.443265][   T53] usb 7-1: config 9 interface 12 altsetting 208 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  103.447905][   T53] usb 7-1: config 9 interface 185 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  103.452823][   T53] usb 7-1: config 9 interface 185 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  103.457507][   T53] usb 7-1: config 9 interface 185 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  103.461971][   T53] usb 7-1: config 9 interface 185 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  103.465664][   T53] usb 7-1: config 9 interface 185 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  103.469216][   T53] usb 7-1: config 9 interface 185 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  103.473038][   T53] usb 7-1: config 9 interface 185 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  103.476708][   T53] usb 7-1: config 9 interface 185 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  103.480311][   T53] usb 7-1: config 9 interface 185 altsetting 3 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  103.484675][   T53] usb 7-1: config 9 interface 12 has no altsetting 0
[  103.487028][   T53] usb 7-1: config 9 interface 185 has no altsetting 0
[  103.491006][   T53] usb 7-1: New USB device found, idVendor=13ad, idProduct=9999, bcdDevice=5e.2e
[  103.494475][   T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.497383][   T53] usb 7-1: Product: ஼䙪㝍䳏馤蘚疄弖喝愛ተ䯐ᜉ⮕砏♑琦쒳᭎皾ᚢ骽陾놟冾꜄漭藣䢮㺄鷁ꉍ끥⮦䦘歀䮃ḯ艒碉豣䞼Ử亯园팻Ŕ਒啤䝚ຬ쎊鏆륄濫♣ꁧ縪⅒逗뮪펯駡ᛪ圉樗羳ᑠ勛⻙痨웷⹦躺﫝ⵡ镣ʒ∱嚟쑭కᆲ줫ਪ鬞萿蚑읯玞고
[  103.508644][   T53] usb 7-1: Manufacturer: 眅移∄㴒樞⸗⩲駵浤벀⍃⤙ꋐ訶ꢋㅔ꧟蚁楯ࣲჂ櫼遍뢰㔝麏⦱鼠쌗ᓸ席훭䈭⩳鶯읓﮳采컼Ṡ嚚ʍ莂⼇襝⯸娩ꔏᶕ烥嘍䢉줲쏥柊쬛䌈䑪龛틓ᢥ覰좚｝護ヅ㥑䘣쾲镓隆텳␋셨뱍ڲ鿩꠨偘ꉶﭢ탒鱠̉䀕솥씋ꍁ㛧
[  103.518709][   T53] usb 7-1: SerialNumber: з
[  103.647292][ T7896] all: renamed from bridge_slave_0 (while UP)
[  103.726856][   T53] cp210x 7-1:9.12: cp210x converter detected
[  103.731157][   T53] cp210x 7-1:9.12: failed to get vendor val 0x370b size 1: -71
[  103.733685][   T53] cp210x 7-1:9.12: querying part number failed
[  103.739608][   T53] usb 7-1: cp210x converter now attached to ttyUSB0
[  103.747958][   T53] cp210x 7-1:9.185: cp210x converter detected
[  103.750508][   T53] cp210x 7-1:9.185: failed to get vendor val 0x370b size 1: -71
[  103.753787][   T53] cp210x 7-1:9.185: querying part number failed
[  103.765039][   T53] usb 7-1: cp210x converter now attached to ttyUSB1
[  103.777959][   T53] usb 7-1: USB disconnect, device number 5
[  103.791011][   T53] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  103.802597][   T53] cp210x 7-1:9.12: device disconnected
[  103.829417][   T53] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  103.837589][   T40] kauditd_printk_skb: 19 callbacks suppressed
[  103.837605][   T40] audit: type=1400 audit(1773602935.479:815): avc:  denied  { write } for  pid=7909 comm="syz.5.491" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  103.841380][   T53] cp210x 7-1:9.185: device disconnected
[  103.861784][ T7912] __nla_validate_parse: 18 callbacks suppressed
[  103.861800][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'.
[  103.868513][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'.
[  103.873939][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'.
[  103.877746][ T7912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'.
[  103.919167][ T7919] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.494'.
[  103.927066][ T7919] netlink: Unknown conntrack attr (0)
[  104.033875][ T7933] ip6t_REJECT: ECHOREPLY is not supported
[  104.116057][   T40] audit: type=1400 audit(1773602935.759:816): avc:  denied  { connect } for  pid=7938 comm="syz.5.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  104.123954][   T40] audit: type=1400 audit(1773602935.759:817): avc:  denied  { read } for  pid=7938 comm="syz.5.500" path="socket:[23886]" dev="sockfs" ino=23886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  104.211375][ T7945] syzkaller0: entered promiscuous mode
[  104.213930][ T7945] syzkaller0: entered allmulticast mode
[  104.219973][ T7947] overlay: Unknown parameter 'obj_role'
[  104.267612][ T7951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.280944][   T40] audit: type=1400 audit(1773602935.919:818): avc:  denied  { write } for  pid=7948 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  104.369480][ T7960] program syz.5.509 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.383010][ T7953] hsr1: left allmulticast mode
[  104.384751][ T7953] dummy0: left allmulticast mode
[  104.386617][ T7953] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  104.389912][ T7953] bond1: left allmulticast mode
[  104.811143][   T40] audit: type=1400 audit(1773602936.449:819): avc:  denied  { getopt } for  pid=7970 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  104.827239][ T7971] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[  104.870673][   T40] audit: type=1400 audit(1773602936.509:820): avc:  denied  { setopt } for  pid=7975 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  104.916220][ T7978] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.514'.
[  105.161522][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  105.219842][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.5.516'.
[  105.314673][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'.
[  105.373864][ T8003] Cannot find del_set index 0 as target
[  105.418048][   T40] audit: type=1400 audit(1773602937.059:821): avc:  denied  { read } for  pid=8001 comm="syz.5.524" path="socket:[23034]" dev="sockfs" ino=23034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  105.436775][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'.
[  105.442665][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'.
[  105.535647][ T8004] netlink: 'syz.2.523': attribute type 12 has an invalid length.
[  105.806241][   T40] audit: type=1400 audit(1773602937.449:822): avc:  denied  { ioctl } for  pid=8038 comm="syz.4.533" path="socket:[23098]" dev="sockfs" ino=23098 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  105.990725][   T40] audit: type=1400 audit(1773602937.629:823): avc:  denied  { read } for  pid=8054 comm="syz.4.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  106.349854][ T8088] ip6gre0: entered promiscuous mode
[  106.618526][   T40] audit: type=1400 audit(1773602938.259:824): avc:  denied  { map } for  pid=8096 comm="syz.2.548" path="socket:[22165]" dev="sockfs" ino=22165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  106.670528][ T8105] binder: 8104:8105 ioctl ae01 c returned -22
[  106.680109][ T8105] netlink: 'syz.2.550': attribute type 2 has an invalid length.
[  106.717435][ T8109] blktrace: Concurrent blktraces are not allowed on sg0
[  106.780091][ T8116] netlink: 'syz.2.553': attribute type 39 has an invalid length.
[  106.850729][ T8119] bond2: entered allmulticast mode
[  106.861690][ T8119] macvlan2: entered promiscuous mode
[  106.863461][ T8119] macvlan2: entered allmulticast mode
[  106.865619][ T8119] bond2: entered promiscuous mode
[  106.867964][ T8119] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  106.876170][ T8119] bond2: left promiscuous mode
[  107.013292][ T8128] openvswitch: netlink: IPv4 tun info is not correct
[  107.019922][ T8128] loop6: detected capacity change from 0 to 2640
[  107.025502][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.029277][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.033136][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.040305][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.044706][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.048249][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.050736][  T831] libceph: connect (1)[c::]:6789 error -101
[  107.055648][  T831] libceph: mon0 (1)[c::]:6789 connect error
[  107.066249][  T831] libceph: connect (1)[c::]:6789 error -101
[  107.068993][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.074507][  T831] libceph: mon0 (1)[c::]:6789 connect error
[  107.077282][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.082109][ T8128] ldm_validate_partition_table(): Disk read failed.
[  107.085699][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.089102][ T8128] Buffer I/O error on dev loop6, logical block 0, async page read
[  107.093016][ T8128] Dev loop6: unable to read RDB block 0
[  107.095550][ T8128]  loop6: unable to read partition table
[  107.101624][ T8128] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[  107.246335][ T8154] mmap: syz.2.560 (8154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  107.252211][ T8154] netlink: 'syz.2.560': attribute type 5 has an invalid length.
[  107.294145][ T1259] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.297896][ T1259] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.301976][ T1259] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.304752][ T1259] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.342271][  T831] libceph: connect (1)[c::]:6789 error -101
[  107.344412][  T831] libceph: mon0 (1)[c::]:6789 connect error
[  107.499837][ T8159] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  107.852473][  T831] libceph: connect (1)[c::]:6789 error -101
[  107.854422][  T831] libceph: mon0 (1)[c::]:6789 connect error
[  107.866599][ T8136] ceph: No mds server is up or the cluster is laggy
[  107.888371][ T8171] kvm: kvm [8170]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5
[  107.913137][ T8171] kvm: kvm [8170]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5
[  107.917237][ T8171] kvm: kvm [8170]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5
[  107.940592][ T8171] kvm_intel: kvm [8170]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5
[  108.233890][ T8231] cgroup: fork rejected by pids controller in /syz2
[  108.462409][ T8276] netlink: 'syz.5.583': attribute type 10 has an invalid length.
[  108.465218][ T8276] team0: entered promiscuous mode
[  108.466909][ T8276] team_slave_0: entered promiscuous mode
[  108.469001][ T8276] team_slave_1: entered promiscuous mode
[  108.471013][ T8276] team0: entered allmulticast mode
[  108.473590][ T8276] team_slave_0: entered allmulticast mode
[  108.475340][ T8276] team_slave_1: entered allmulticast mode
[  108.477408][ T8276] bridge0: port 3(team0) entered blocking state
[  108.479643][ T8276] bridge0: port 3(team0) entered disabled state
[  108.483589][ T8276] bridge0: port 3(team0) entered blocking state
[  108.485837][ T8276] bridge0: port 3(team0) entered forwarding state
[  108.504148][   T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  108.508233][   T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  108.513135][   T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  108.516633][   T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  108.519934][   T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  108.604118][ T8254] bond0: (slave bond_slave_0): interface is now down
[  108.609758][ T8254] bond0: (slave bond_slave_1): interface is now down
[  108.683573][ T8279] chnl_net:caif_netlink_parms(): no params data found
[  108.754234][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.761167][ T8254] bond0: (slave bond_slave_0): interface is now down
[  108.764249][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.767285][ T8254] bond0: (slave bond_slave_1): interface is now down
[  108.770395][ T8279] bridge_slave_0: entered allmulticast mode
[  108.774610][ T8279] bridge_slave_0: entered promiscuous mode
[  108.779360][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.782882][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.786123][ T8279] bridge_slave_1: entered allmulticast mode
[  108.790061][ T8279] bridge_slave_1: entered promiscuous mode
[  108.816214][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.821510][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.840895][ T8279] team0: Port device team_slave_0 added
[  108.844631][ T8279] team0: Port device team_slave_1 added
[  108.858066][ T8309] loop5: detected capacity change from 0 to 7
[  108.861828][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.864346][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.873277][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.878401][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.880780][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.889499][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.901285][ T8256] bond0: (slave bond_slave_0): interface is now down
[  108.903980][ T8256] bond0: (slave bond_slave_1): interface is now down
[  108.917011][ T8279] hsr_slave_0: entered promiscuous mode
[  108.919759][ T8279] hsr_slave_1: entered promiscuous mode
[  108.922383][ T8279] debugfs: 'hsr0' already exists in 'hsr'
[  108.924434][ T8279] Cannot create hsr debugfs directory
[  109.015542][ T8309] Dev loop5: unable to read RDB block 7
[  109.017345][    C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  109.017492][ T8309]  loop5: unable to read partition table
[  109.024159][ T8309] loop5: partition table beyond EOD, truncated
[  109.030707][ T8309] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  109.030839][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  109.041582][ T8257] bond0: (slave bond_slave_0): interface is now down
[  109.043890][ T8257] bond0: (slave bond_slave_1): interface is now down
[  109.047728][ T8312] __nla_validate_parse: 54 callbacks suppressed
[  109.047745][ T8312] netlink: 32 bytes leftover after parsing attributes in process `syz.5.593'.
[  109.091635][ T8309] /dev/loop5: Can't open blockdev
[  109.181244][ T8257] bond0: (slave bond_slave_0): interface is now down
[  109.183440][ T8257] bond0: (slave bond_slave_1): interface is now down
[  109.188222][ T8257] bond0: now running without any active interface!
[  109.393627][ T8279] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  109.400275][ T8279] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  109.407645][ T8279] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  109.416869][ T8279] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  109.436074][   T40] kauditd_printk_skb: 8 callbacks suppressed
[  109.436090][   T40] audit: type=1400 audit(1773602941.079:833): avc:  denied  { ioctl } for  pid=8322 comm="syz.4.596" path="socket:[24399]" dev="sockfs" ino=24399 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1
[  109.498045][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.515286][ T8279] 8021q: adding VLAN 0 to HW filter on device team0
[  109.523086][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.525672][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.535349][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.538365][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.542030][   T40] audit: type=1400 audit(1773602941.189:834): avc:  denied  { mount } for  pid=8331 comm="syz.4.598" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  109.682487][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.717145][ T8279] veth0_vlan: entered promiscuous mode
[  109.725014][ T8279] veth1_vlan: entered promiscuous mode
[  109.743994][ T8279] veth0_macvtap: entered promiscuous mode
[  109.748668][ T8279] veth1_macvtap: entered promiscuous mode
[  109.761652][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.778498][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.798946][ T8257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.803821][ T8257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.813416][ T8257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.817383][ T8257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.864288][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.872643][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.885786][ T8247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.888488][ T8247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.903476][   T40] audit: type=1400 audit(1773602941.549:835): avc:  denied  { mounton } for  pid=8279 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[  109.938783][ T8340] netlink: 'syz.2.581': attribute type 2 has an invalid length.
[  110.186511][ T8348] loop5: detected capacity change from 0 to 7
[  110.191841][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.195605][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.199821][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.204014][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.207322][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.210637][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.214225][    C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.217460][ T8348] ldm_validate_partition_table(): Disk read failed.
[  110.220939][    C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  110.231623][ T8348] Dev loop5: unable to read RDB block 0
[  110.234560][ T8348]  loop5: unable to read partition table
[  110.236932][ T8348] loop5: partition table beyond EOD, truncated
[  110.239713][ T8348] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  110.311176][ T8349] Invalid logical block size (2)
[  110.394122][   T40] audit: type=1400 audit(1773602942.039:836): avc:  denied  { listen } for  pid=8354 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  110.434611][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.606'.
[  110.437627][ T8360] openvswitch: netlink: Flow actions attr not present in new flow.
[  110.496026][   T40] audit: type=1400 audit(1773602942.139:837): avc:  denied  { setopt } for  pid=8363 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  110.541798][   T63] Bluetooth: hci2: command tx timeout
[  110.581339][ T8366] netlink: 'syz.2.609': attribute type 3 has an invalid length.
[  110.584613][ T8366] netlink: 64 bytes leftover after parsing attributes in process `syz.2.609'.
[  110.594543][ T8368] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.610'.
[  111.051284][   T53] usb 10-1: new low-speed USB device number 9 using dummy_hcd
[  111.208585][   T53] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.214171][   T53] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  111.218433][   T53] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  111.234477][   T53] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  111.238796][   T53] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.313779][ T8379] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  111.325964][   T53] hub 10-1:1.0: bad descriptor, ignoring hub
[  111.329002][   T53] hub 10-1:1.0: probe with driver hub failed with error -5
[  111.337340][   T53] cdc_wdm 10-1:1.0: skipping garbage
[  111.340011][   T53] cdc_wdm 10-1:1.0: skipping garbage
[  111.365922][   T53] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  111.368722][   T53] cdc_wdm 10-1:1.0: Unknown control protocol
[  111.387695][   T40] audit: type=1400 audit(1773602943.029:838): avc:  denied  { accept } for  pid=8393 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  111.544392][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'.
[  111.586462][   T40] audit: type=1400 audit(1773602943.229:839): avc:  denied  { setopt } for  pid=8416 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  111.596583][   T40] audit: type=1400 audit(1773602943.229:840): avc:  denied  { name_bind } for  pid=8416 comm="syz.4.624" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  111.621431][ T6024] usb 10-1: USB disconnect, device number 9
[  111.631964][   T40] audit: type=1400 audit(1773602943.269:841): avc:  denied  { execute } for  pid=8423 comm="syz.0.625" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=26918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  111.640391][ T8427] netlink: 'syz.4.626': attribute type 16 has an invalid length.
[  111.646120][ T8427] netlink: 'syz.4.626': attribute type 17 has an invalid length.
[  111.666691][ T8427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.089641][ T8473] openvswitch: netlink: Missing key (keys=40, expected=100)
[  112.091244][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[  112.109086][ T8464] netlink: 92 bytes leftover after parsing attributes in process `syz.2.638'.
[  112.115337][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.638'.
[  112.119773][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.638'.
[  112.146054][ T8479] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.643'.
[  112.264695][   T40] audit: type=1400 audit(1773602943.909:842): avc:  denied  { ioctl } for  pid=8490 comm="syz.2.646" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  112.316244][ T8500] netlink: 'syz.2.647': attribute type 29 has an invalid length.
[  112.320699][ T8500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.333039][ T8500] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  112.410676][ T8507] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  112.422729][ T8507] syzkaller0: entered promiscuous mode
[  112.425128][ T8507] syzkaller0: entered allmulticast mode
[  112.432727][ T8507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.449193][ T8507] tipc: Resetting bearer <eth:syzkaller0>
[  112.470372][ T8507] tipc: Disabling bearer <eth:syzkaller0>
[  112.593781][ T8520] bridge0: port 4(ipvlan2) entered blocking state
[  112.596832][ T8520] bridge0: port 4(ipvlan2) entered disabled state
[  112.599684][ T8520] ipvlan2: entered allmulticast mode
[  112.604572][ T8520] bridge0: entered allmulticast mode
[  112.609034][ T8520] ipvlan2: left allmulticast mode
[  112.611928][ T8520] bridge0: left allmulticast mode
[  112.621328][   T63] Bluetooth: hci2: command tx timeout
[  113.084905][ T8567] loop4: detected capacity change from 0 to 65536
[  113.142589][ T8567] loop4: detected capacity change from 65536 to 524287995
[  113.454049][ T8616] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  113.465362][ T8616] CIFS mount error: No usable UNC path provided in device string!
[  113.465362][ T8616] 
[  113.470618][ T8616] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  113.476702][ T8616] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  113.479697][ T8616] overlayfs: failed to set xattr on upper
[  113.482381][ T8616] overlayfs: ...falling back to redirect_dir=nofollow.
[  113.485254][ T8616] overlayfs: ...falling back to index=off.
[  113.487657][ T8616] overlayfs: ...falling back to uuid=null.
[  113.489783][ T8616] overlayfs: ...falling back to xino=off.
[  113.492864][ T8616] overlayfs: conflicting lowerdir path
[  113.520999][ T8617] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[  113.522934][ T8620] io-wq is not configured for unbound workers
[  113.739919][   T63] Bluetooth: hci0: unexpected event for opcode 0x1002
[  113.958255][ T8655] iommufd_mock iommufd_mock0: Adding to iommu group 9
[  113.966628][ T8655] iommufd_mock iommufd_mock1: Adding to iommu group 10
[  114.447462][   T40] kauditd_printk_skb: 76 callbacks suppressed
[  114.447475][   T40] audit: type=1400 audit(1773602946.089:919): avc:  denied  { name_bind } for  pid=8703 comm="syz.5.709" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1
[  114.510054][ T8705] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  114.515102][ T8705] File: /dev/nullb0 PID: 8705 Comm: syz.0.707
[  114.532112][ T8707] vcan1: entered allmulticast mode
[  114.583600][ T8705] program syz.0.707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.587527][ T8705] ata1.00: invalid command format 0
[  114.666486][ T8714] __nla_validate_parse: 6 callbacks suppressed
[  114.666500][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.5.713'.
[  114.701885][   T63] Bluetooth: hci2: command tx timeout
[  114.821805][   T40] audit: type=1400 audit(1773602946.469:920): avc:  denied  { accept } for  pid=8719 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  114.830657][   T40] audit: type=1400 audit(1773602946.469:921): avc:  denied  { ioctl } for  pid=8719 comm="syz.2.715" path="socket:[27906]" dev="sockfs" ino=27906 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  114.844359][   T40] audit: type=1400 audit(1773602946.469:922): avc:  denied  { ioctl } for  pid=8719 comm="syz.2.715" path="socket:[27906]" dev="sockfs" ino=27906 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  114.863996][   T40] audit: type=1400 audit(1773602946.509:923): avc:  denied  { bind } for  pid=8723 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  114.871971][   T40] audit: type=1400 audit(1773602946.509:924): avc:  denied  { write } for  pid=8723 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  114.893597][   T40] audit: type=1400 audit(1773602946.539:925): avc:  denied  { getopt } for  pid=8723 comm="syz.2.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  114.936218][   T40] audit: type=1400 audit(1773602946.579:926): avc:  denied  { override_creds } for  pid=8727 comm="syz.5.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  114.967656][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'.
[  115.027194][   T40] audit: type=1400 audit(1773602946.669:927): avc:  denied  { setattr } for  pid=8733 comm="syz.2.719" path="socket:[27151]" dev="sockfs" ino=27151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  115.046999][ T8734] macvtap1: entered promiscuous mode
[  115.049459][ T8734] macsec0: entered promiscuous mode
[  115.056412][ T8734] team0: Device macvtap1 is up. Set it down before adding it as a team port
[  115.056493][   T40] audit: type=1400 audit(1773602946.699:928): avc:  denied  { wake_alarm } for  pid=8735 comm="syz.4.720" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  115.069920][ T8734] macsec0: left promiscuous mode
[  115.092111][ T8738] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  115.172979][ T6578] IPVS: starting estimator thread 0...
[  115.235669][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'.
[  115.271378][ T8747] IPVS: using max 43 ests per chain, 103200 per kthread
[  115.318458][ T8760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8760 comm=syz.0.727
[  115.378251][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'.
[  115.590859][ T8784] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4
[  115.748454][ T8790] bond2: entered allmulticast mode
[  115.878934][ T8797] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  116.141167][ T6578] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  116.301210][ T6578] usb 10-1: Using ep0 maxpacket: 16
[  116.306393][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.310667][ T6578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.314073][ T6578] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  116.318498][ T6578] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  116.318508][ T8813] overlayfs: failed to clone lowerpath
[  116.322453][ T6578] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.330461][ T6578] usb 10-1: config 0 descriptor??
[  116.408708][ T8819] SELinux:  Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped).
[  116.416060][ T8819] netlink: 'syz.4.750': attribute type 13 has an invalid length.
[  116.436206][ T8819] gretap0: refused to change device tx_queue_len
[  116.439000][ T8819] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  116.450414][ T8822] binder: BINDER_SET_CONTEXT_MGR already set
[  116.453483][ T8822] binder: 8820:8822 ioctl 4018620d 200000000100 returned -16
[  116.459239][ T8822] binder: BINDER_SET_CONTEXT_MGR already set
[  116.463632][ T8822] binder: 8820:8822 ioctl 4018620d 200000004a80 returned -16
[  116.545890][ T8833] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  116.548469][ T8833] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  116.555916][ T8833] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  116.558675][ T8833] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  116.717494][ T8839] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[  116.726871][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[  116.747456][ T6578] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  116.751716][ T6578] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  116.754534][ T6578] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  116.757197][ T6578] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  116.759895][ T6578] shield 0003:0955:7214.0004: unknown main item tag 0x0
[  116.766788][ T6578] input: HID 0955:7214 Haptics as /devices/virtual/input/input12
[  116.781285][   T63] Bluetooth: hci2: command tx timeout
[  116.794248][ T6578] shield 0003:0955:7214.0004: Registered Thunderstrike controller
[  116.797918][ T6578] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[  116.942940][ T8844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.757'.
[  116.946654][ T8801] random: crng reseeded on system resumption
[  117.064486][ T8801] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2307790675 (73849301600 ns) > initial count (32142752608 ns). Using initial count to start timer.
[  117.079640][ T8801] kvm: kvm [8800]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  117.085308][ T8801] kvm: kvm [8800]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  117.146645][ T8801] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns
[  117.379472][ T6578] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  117.379980][ T5900] usb 10-1: USB disconnect, device number 10
[  117.383773][ T6578] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  117.390057][ T6578] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  117.393386][ T5900] ------------[ cut here ]------------
[  117.396012][ T5900] workqueue: work disable count underflowed
[  117.398089][ T5900] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#3: kworker/3:3/5900
[  117.401288][ T5900] Modules linked in:
[  117.403300][ T5900] CPU: 3 UID: 0 PID: 5900 Comm: kworker/3:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.406897][ T5900] Tainted: [L]=SOFTLOCKUP
[  117.408305][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.411620][ T5900] Workqueue: usb_hub_wq hub_event
[  117.413697][ T5900] RIP: 0010:enable_work+0x2d1/0x320
[  117.416005][ T5900] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9
[  117.424702][ T5900] RSP: 0018:ffffc9000345f3b0 EFLAGS: 00010093
[  117.427506][ T5900] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d00fa0
[  117.430995][ T5900] RDX: ffff888025574980 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0
[  117.434417][ T5900] RBP: ffff888026e6d738 R08: 0000000000000007 R09: 0000000000000000
[  117.437865][ T5900] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  117.441320][ T5900] R13: 1ffff9200068be77 R14: ffff888026e6d698 R15: 000000007fffffff
[  117.444370][ T5900] FS:  0000000000000000(0000) GS:ffff8880d6642000(0000) knlGS:0000000000000000
[  117.447585][ T5900] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.449847][ T5900] CR2: 0000000000000000 CR3: 00000000387a9000 CR4: 0000000000352ef0
[  117.452556][ T5900] Call Trace:
[  117.454014][ T5900]  <TASK>
[  117.455316][ T5900]  ? __pfx_enable_work+0x10/0x10
[  117.457397][ T5900]  ? __pfx___might_resched+0x10/0x10
[  117.459647][ T5900]  cancel_delayed_work_sync+0x96/0xf0
[  117.461964][ T5900]  thermal_zone_device_unregister+0x28e/0x4e0
[  117.464332][ T5900]  ? __pfx_shield_remove+0x10/0x10
[  117.466123][ T5900]  power_supply_unregister+0x10a/0x150
[  117.468262][ T5900]  shield_remove+0x75/0x130
[  117.470508][ T5900]  ? __pfx_shield_remove+0x10/0x10
[  117.472888][ T5900]  hid_device_remove+0xd1/0x270
[  117.475119][ T5900]  ? __pfx_hid_device_remove+0x10/0x10
[  117.477542][ T5900]  device_remove+0xcb/0x180
[  117.479572][ T5900]  device_release_driver_internal+0x42e/0x600
[  117.482288][ T5900]  bus_remove_device+0x22f/0x440
[  117.484433][ T5900]  device_del+0x376/0x9b0
[  117.486262][ T5900]  ? __pfx_device_del+0x10/0x10
[  117.488125][ T5900]  ? do_raw_spin_lock+0x128/0x260
[  117.490601][ T5900]  ? find_held_lock+0x2b/0x80
[  117.492904][ T5900]  hid_destroy_device+0x19c/0x240
[  117.495278][ T5900]  usbhid_disconnect+0xa0/0xe0
[  117.497457][ T5900]  usb_unbind_interface+0x1dd/0x9e0
[  117.499765][ T5900]  ? kernfs_remove_by_name_ns+0x9f/0xf0
[  117.502219][ T5900]  ? __pfx_usb_unbind_interface+0x10/0x10
[  117.504705][ T5900]  device_remove+0x12a/0x180
[  117.506761][ T5900]  device_release_driver_internal+0x42e/0x600
[  117.509427][ T5900]  bus_remove_device+0x22f/0x440
[  117.511633][ T5900]  device_del+0x376/0x9b0
[  117.513578][ T5900]  ? __pfx_device_del+0x10/0x10
[  117.516003][ T5900]  ? kobject_put+0xb9/0x640
[  117.518300][ T5900]  usb_disable_device+0x367/0x810
[  117.520481][ T5900]  usb_disconnect+0x2e2/0x9a0
[  117.522053][ T5900]  hub_event+0x1d0c/0x4af0
[  117.523580][ T5900]  ? __lock_acquire+0x4a5/0x2630
[  117.525269][ T5900]  ? do_raw_spin_unlock+0x145/0x1e0
[  117.526982][ T5900]  ? __pfx_hub_event+0x10/0x10
[  117.528551][ T5900]  ? debug_object_deactivate+0x2e4/0x3b0
[  117.530382][ T5900]  ? sched_core_enqueue+0x60/0xc00
[  117.532096][ T5900]  ? rcu_is_watching+0x12/0xc0
[  117.534201][ T5900]  process_one_work+0xa23/0x19a0
[  117.536531][ T5900]  ? __pfx_process_one_work+0x10/0x10
[  117.538802][ T5900]  ? __pfx_hub_event+0x10/0x10
[  117.540905][ T5900]  worker_thread+0x5ef/0xe50
[  117.542943][ T5900]  ? __pfx_worker_thread+0x10/0x10
[  117.544687][ T5900]  ? kthread+0x13a/0x450
[  117.546139][ T5900]  ? __pfx_worker_thread+0x10/0x10
[  117.548282][ T5900]  kthread+0x370/0x450
[  117.549882][ T5900]  ? __pfx_kthread+0x10/0x10
[  117.551496][ T5900]  ret_from_fork+0x754/0xd80
[  117.553613][ T5900]  ? __pfx_ret_from_fork+0x10/0x10
[  117.556001][ T5900]  ? __switch_to+0x7b4/0x1120
[  117.558176][ T5900]  ? __pfx_kthread+0x10/0x10
[  117.560316][ T5900]  ret_from_fork_asm+0x1a/0x30
[  117.562498][ T5900]  </TASK>
[  117.563888][ T5900] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  117.567081][ T5900] CPU: 3 UID: 0 PID: 5900 Comm: kworker/3:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  117.571861][ T5900] Tainted: [L]=SOFTLOCKUP
[  117.573971][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  117.578696][ T5900] Workqueue: usb_hub_wq hub_event
[  117.580957][ T5900] Call Trace:
[  117.582478][ T5900]  <TASK>
[  117.583830][ T5900]  dump_stack_lvl+0x100/0x190
[  117.585980][ T5900]  vpanic+0x552/0x970
[  117.587766][ T5900]  ? __pfx_vpanic+0x10/0x10
[  117.589671][ T5900]  panic+0xd1/0xe0
[  117.591006][ T5900]  ? __pfx_panic+0x10/0x10
[  117.592901][ T5900]  ? check_panic_on_warn+0x1f/0x90
[  117.595424][ T5900]  check_panic_on_warn.cold+0x19/0x34
[  117.598128][ T5900]  ? enable_work+0x2d1/0x320
[  117.600435][ T5900]  __warn.cold+0x191/0x348
[  117.602447][ T5900]  __report_bug+0x296/0x3d0
[  117.604487][ T5900]  ? enable_work+0x2d1/0x320
[  117.606578][ T5900]  ? __pfx___report_bug+0x10/0x10
[  117.608846][ T5900]  ? __pfx_debug_object_free+0x10/0x10
[  117.611347][ T5900]  ? enable_work+0x2ca/0x320
[  117.613399][ T5900]  ? enable_work+0x100/0x320
[  117.615487][ T5900]  ? find_held_lock+0x2b/0x80
[  117.617689][ T5900]  ? __flush_work+0x928/0xcb0
[  117.620014][ T5900]  ? __flush_work+0x928/0xcb0
[  117.622335][ T5900]  report_bug_entry+0xe1/0x290
[  117.624674][ T5900]  ? enable_work+0x2d1/0x320
[  117.626805][ T5900]  handle_bug+0x1cd/0x2a0
[  117.628682][ T5900]  exc_invalid_op+0x17/0x50
[  117.630707][ T5900]  asm_exc_invalid_op+0x1a/0x20
[  117.632852][ T5900] RIP: 0010:enable_work+0x2d1/0x320
[  117.635102][ T5900] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9
[  117.641736][ T5900] RSP: 0018:ffffc9000345f3b0 EFLAGS: 00010093
[  117.644172][ T5900] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81d00fa0
[  117.647419][ T5900] RDX: ffff888025574980 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0
[  117.650074][ T5900] RBP: ffff888026e6d738 R08: 0000000000000007 R09: 0000000000000000
[  117.652709][ T5900] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  117.655519][ T5900] R13: 1ffff9200068be77 R14: ffff888026e6d698 R15: 000000007fffffff
[  117.658156][ T5900]  ? enable_work+0x100/0x320
[  117.659689][ T5900]  ? enable_work+0x2ca/0x320
[  117.661251][ T5900]  ? __pfx_enable_work+0x10/0x10
[  117.663008][ T5900]  ? __pfx___might_resched+0x10/0x10
[  117.664747][ T5900]  cancel_delayed_work_sync+0x96/0xf0
[  117.666573][ T5900]  thermal_zone_device_unregister+0x28e/0x4e0
[  117.668555][ T5900]  ? __pfx_shield_remove+0x10/0x10
[  117.670299][ T5900]  power_supply_unregister+0x10a/0x150
[  117.672602][ T5900]  shield_remove+0x75/0x130
[  117.674415][ T5900]  ? __pfx_shield_remove+0x10/0x10
[  117.676259][ T5900]  hid_device_remove+0xd1/0x270
[  117.677875][ T5900]  ? __pfx_hid_device_remove+0x10/0x10
[  117.679895][ T5900]  device_remove+0xcb/0x180
[  117.681412][ T5900]  device_release_driver_internal+0x42e/0x600
[  117.683479][ T5900]  bus_remove_device+0x22f/0x440
[  117.685250][ T5900]  device_del+0x376/0x9b0
[  117.686792][ T5900]  ? __pfx_device_del+0x10/0x10
[  117.688515][ T5900]  ? do_raw_spin_lock+0x128/0x260
[  117.690286][ T5900]  ? find_held_lock+0x2b/0x80
[  117.691882][ T5900]  hid_destroy_device+0x19c/0x240
[  117.693630][ T5900]  usbhid_disconnect+0xa0/0xe0
[  117.695382][ T5900]  usb_unbind_interface+0x1dd/0x9e0
[  117.697099][ T5900]  ? kernfs_remove_by_name_ns+0x9f/0xf0
[  117.698912][ T5900]  ? __pfx_usb_unbind_interface+0x10/0x10
[  117.700841][ T5900]  device_remove+0x12a/0x180
[  117.702389][ T5900]  device_release_driver_internal+0x42e/0x600
[  117.705128][ T5900]  bus_remove_device+0x22f/0x440
[  117.706859][ T5900]  device_del+0x376/0x9b0
[  117.708339][ T5900]  ? __pfx_device_del+0x10/0x10
[  117.710043][ T5900]  ? kobject_put+0xb9/0x640
[  117.711657][ T5900]  usb_disable_device+0x367/0x810
[  117.713359][ T5900]  usb_disconnect+0x2e2/0x9a0
[  117.714909][ T5900]  hub_event+0x1d0c/0x4af0
[  117.716406][ T5900]  ? __lock_acquire+0x4a5/0x2630
[  117.718109][ T5900]  ? do_raw_spin_unlock+0x145/0x1e0
[  117.719916][ T5900]  ? __pfx_hub_event+0x10/0x10
[  117.721599][ T5900]  ? debug_object_deactivate+0x2e4/0x3b0
[  117.723674][ T5900]  ? sched_core_enqueue+0x60/0xc00
[  117.725484][ T5900]  ? rcu_is_watching+0x12/0xc0
[  117.727080][ T5900]  process_one_work+0xa23/0x19a0
[  117.728692][ T5900]  ? __pfx_process_one_work+0x10/0x10
[  117.730433][ T5900]  ? __pfx_hub_event+0x10/0x10
[  117.732005][ T5900]  worker_thread+0x5ef/0xe50
[  117.733619][ T5900]  ? __pfx_worker_thread+0x10/0x10
[  117.735338][ T5900]  ? kthread+0x13a/0x450
[  117.736766][ T5900]  ? __pfx_worker_thread+0x10/0x10
[  117.738452][ T5900]  kthread+0x370/0x450
[  117.739794][ T5900]  ? __pfx_kthread+0x10/0x10
[  117.741321][ T5900]  ret_from_fork+0x754/0xd80
[  117.742920][ T5900]  ? __pfx_ret_from_fork+0x10/0x10
[  117.744656][ T5900]  ? __switch_to+0x7b4/0x1120
[  117.746353][ T5900]  ? __pfx_kthread+0x10/0x10
[  117.747921][ T5900]  ret_from_fork_asm+0x1a/0x30
[  117.749568][ T5900]  </TASK>
[  117.751617][ T5900] Kernel Offset: disabled
[  117.753397][ T5900] Rebooting in 86400 seconds..