last executing test programs:

6.149866074s ago: executing program 1 (id=139):
r0 = msgget$private(0x0, 0x201)
msgrcv(r0, 0x0, 0x0, 0xffffffffffffffff, 0x2000)
msgsnd(r0, &(0x7f0000000040)={0x1}, 0x4, 0x800)
msgctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/123)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
writev(r1, &(0x7f0000001480)=[{&(0x7f0000000000)="a5", 0x1}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x5c, 0x28, 0x8, 0x5, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0x6, 0xffec}, {0x1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x5a}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40)

6.048839612s ago: executing program 1 (id=141):
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000004a00030000000000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)

6.047916866s ago: executing program 1 (id=142):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0xa0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r3, &(0x7f0000000000)='3', 0x4e)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
write(r0, &(0x7f00000000c0)='/dev/loop0', 0xa)

5.681013929s ago: executing program 3 (id=143):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x0, &(0x7f0000000380)=""/70, 0x0, 0xd000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0xfffffffe, 0x0, &(0x7f0000000300)=""/87, 0x0, 0x1ffe})
r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f0000000480)=0xffffffffffffffa8, 0x80000)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'lo\x00', 0x4000})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040)) (async)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040))
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c)
syz_emit_ethernet(0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaa00f0ffffffffff0000"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000011c0)) (async)
getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000011c0))
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x105000, 0x0)
write(r4, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32, @ANYRES16=r1, @ANYRES8=r2], 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x46, &(0x7f00000000c0)=0xdffff, 0xffffffffffffff62)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
symlinkat(&(0x7f0000000440)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', r4, &(0x7f0000000100)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00') (async)
symlinkat(&(0x7f0000000440)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', r4, &(0x7f0000000100)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00')
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
userfaultfd(0x0)

4.768838559s ago: executing program 3 (id=149):
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x100003, 0x2000007, 0x30, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_wakeup_irq', 0x80240, 0x31840384d1ba4a81) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0) (async)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x74a8e596, 0x0)
read$msr(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0x0, 0x5802, 0x294, 0x140, 0x294, 0x230, 0x378, 0x378, 0x230, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) (async)
sendmsg$IPSET_CMD_RENAME(r0, 0x0, 0x4c091) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, &(0x7f0000000480)) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x4004662b, 0x0) (async)
mprotect(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x2000001) (async)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) (async)
umount2(0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x20043, 0x129)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000000)={0x8, <r7=>r6})
ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000040)={&(0x7f000000d000/0x3000)=nil, 0x3000})

4.64860638s ago: executing program 1 (id=151):
socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) (async)
syz_usb_disconnect(r2) (async)
readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000800)=""/144, 0x90}], 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mount$bpf(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f00000007c0), 0x800000, &(0x7f0000000600)=ANY=[@ANYBLOB='qeI=', @ANYBLOB="c0e69de44a19129af7fe7795dd122dbffac2f420721ed26779f8a83b8021325be2b31f8b10bb990a4d040850b033382c7b52ea45ca3f7f8b14950ca0d9892d3af774781506e31b", @ANYBLOB="2c7375626a5f7573504c002c00a651b415bf2773a021befd4522fbba0d04fabd2e5c14efc26f3ce80e8bd1af5fbed03e7466ead52c5d33f54c14e6e0216620e89f9db44158c53a2c4f3ba4a9d5fb790ff737f749d8b3c07dfeedacab0c4a292bf0f946e343501fac5d0ce4acba509aedb36711a290c293b8e087f9dbef3428ad6b3dcf616cb99f1f6693adfc9bed"]) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xef4, 0xffffffff}, 0x0) (async)
mount(0x0, 0x0, 0x0, 0x44021, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
r3 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000))
ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={0x10, 0x0, "7a56159f1a5e338ad3ffbe6de075b6bb"}) (async)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, {&(0x7f0000000700)=""/135, 0x87, &(0x7f0000000240)=""/5, 0x3, 0x1}}, 0x48)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000040)={0x5, r3, 0x3e, {0xe8, 0x3}, 0x7f}, 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xa00963, 0x10001}) (async)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000440)={r4, r4, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'})
shutdown(r4, 0x1)

4.648044068s ago: executing program 3 (id=152):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1c4, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x58}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x11c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x5}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb91}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8001}, 0x20000101)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x50, r3, 0x7d50d000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}}, 0x24004010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xe9b4e9ae4a562860}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r8, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000840)
mount(&(0x7f0000000900)=@nullb, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='sysfs\x00', 0x802004, &(0x7f00000009c0)='!\x00')
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000a00)={0x10000})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r10, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r11, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
r12 = openat$sequencer2(0xffffff9c, &(0x7f0000000b80), 0x0, 0x0)
r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000bc0)='fdinfo/4\x00')
bind$bt_sco(r13, &(0x7f0000000c00), 0x8)
open_by_handle_at(r12, &(0x7f0000000c40)=@OVL_FILEID_V0={0xe4, 0xfb, {0x0, 0xfb, 0xe4, 0x4, 0x2, "313171593107a379b8a5ce3861199632", "c8f0fc9cf4c57578817274d6df4e844bbfc5cc3388d3be7fd6d2a7d82ae1b30f41ab8ce9c1a7c2ac54d8d92d7916141985f4b8dadfd5775e5855a2bbce1e2038cce8a0bfce9e4fe372a9d4c0a0fadeb026fd521dd1bce172a5b8a20d877b05e77e7582e05fbb5a42e4b9b672906278895bd74c7b679c7c807a034e70c16fd0501b767c56e1556a18b907ecef58e081b111d0561732ba18be89d3574ffc8e8f93dd41b42e48a48c867b9f9c4d3c8555179b572111557ffa64b1d29286cccd89c56b9825145031a4a8d2ac4f7ee77fb4"}}, 0x400002)
socket$pptp(0x18, 0x1, 0x2)
r14 = openat$ttyprintk(0xffffff9c, &(0x7f0000000d40), 0x10000, 0x0)
pwrite64(r14, &(0x7f0000000d80)="13b61f980a7b4c054d40f3f1d584c63a9161b2348d22b4a387d6ae70b362e964d8cde5c57b9ac5087f366e8a952ef0802800515d014e6d8578f9477537fe33a67ddd2668b7feaf34727c87d1a15b77fd0f32d3a684faeb4bf2efef62b691c5058340c93d895b5ffee42a3545fdc033026508798032ae7eb1a33d54507f4c4db9be8edc9cb8e183fbbbaa228d526c4eb67c0721e1", 0x94, 0x7)
r15 = syz_usb_connect$uac2(0x0, 0xf2, &(0x7f0000000e40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x6, 0x10, 0x42, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x401, 0x7, 0x31, 0x7f}, [@mixer_unit={0x6, 0x24, 0x4, 0x4, 0x1, "ad"}, @selector_unit={0xa, 0x24, 0xb, 0x1, 0x5, "3252d7ea2e"}, @effect_unit={0x13, 0x24, 0x7, 0x3, 0x1, 0x3, [0x1, 0x3, 0x1, 0x0, 0x2, 0x3]}, @selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xb, 0x4, "d7", "9ba466"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xa9, 0x6, 0x4, 0x5, 0xf1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1, 0xdf, 0xa}, @as_header={0x10, 0x24, 0x1, 0x2, 0x4, 0x0, 0x1002, 0xe, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3, 0x6, 0x8, {0x8, 0x25, 0x1, 0x82, 0x3, 0x4, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x10, 0xc, 0x3}, @as_header={0x10, 0x24, 0x1, 0x3, 0x2, 0x1, 0x0, 0x7, 0x8000, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x7f, 0xd5, {0x8, 0x25, 0x1, 0x3, 0xf, 0x40, 0x8}}}}}}}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x300, 0x39, 0x5, 0x7, 0x40, 0x1}, 0x87, &(0x7f0000000f80)={0x5, 0xf, 0x87, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xb0, 0x8, 0xfffd}, @ssp_cap={0x24, 0x10, 0xa, 0x71, 0x6, 0x8, 0xf000, 0x6, [0x3fc0, 0x30, 0xc000, 0xf, 0x0, 0x2c6969199b1062ab]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xff, 0xe}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0xe, 0x0, 0x9, [0x3f, 0xff3f00, 0x3f30, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x4, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x9, 0xf000, 0x85d0, [0xc0, 0xffc0c7, 0xc000, 0x3f, 0xcf, 0xc030]}]}, 0x1, [{0xa9, &(0x7f0000001040)=@string={0xa9, 0x3, "41a620eb2eed3a7d58c0790dcaf172d49a82dcbc4ebf2913591edc51164bc091e5f7690fb2e4496821f2edca67df23172ebce206c1da9e41e7039431dabf1d6e9db5aaed54f180b183ddebaf7dcb190662359e1b1c7633308c0dc898a7ba5269dfa988eb61a9367bd9f39949d12a852e4bc2376bbd3ef41854d05b48718b17ed9e2659a24ec54b098fcd84c3ed7b3759816d392ebb794988a13e47bfa2c2a82320cc11525d02a4"}}]})
syz_usb_control_io(r15, &(0x7f0000001280)={0x18, &(0x7f0000001140)={0x40, 0x23, 0x24, {0x24, 0xd, "fa5888af1e66155a240358501242f62dd3ae940dfd832f38abe56d0f5964f0c624b6"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f00000011c0)={0x0, 0xf, 0x23, {0x5, 0xf, 0x23, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0xc5, 0x3, 0x2, 0xf, 0x7, [0x3f30, 0x80bf0f, 0xc0]}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x46, 0x6, "bbcf252f", "75b9f497"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x80, 0x5c, 0x30, 0x2, 0x9, 0x1000}}}, &(0x7f0000001740)={0x44, &(0x7f00000012c0)={0x20, 0x10, 0xa9, "a5ef3f51b2272f3b51e6c6e724f3a20f4b1fb225c586da350e002d38db98d26941ed421a2946c0d817a0748a067cc63bdb8d457b4d5b7cf92c28126145865b92a18c7d9be6d9ca62de29bf2f91083d99c930f707aa9772dc2e0b83723ea2db2f32af993a8618dbb6d4eca0bffa9dcdee9a4b6ea8b8b9a206b4060eb4521b1ea607850015f1fa32212ce95f793caa47774321381b67e1677a08ad7fc9944f994e10c915cdb0c5c27fea"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x400, 0x20}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x7f}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001500)={0x40, 0xb, 0x2, "a491"}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x9ab5}, &(0x7f0000001580)={0x40, 0x13, 0x6}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001600)={0x40, 0x19, 0x2, "5dee"}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x605}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0xa}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0x7}})

3.694813114s ago: executing program 2 (id=153):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_rdma(0x10, 0x3, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x34, 0x5, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}}, 0x20}}, 0x40800)
ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c0d9}, 0x20004000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r3, {0x9c4}}, './file0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000003c0)={{0x9, 0x1, 0x0, 0x80, '\x00', 0x8}, 0x6, 0x10000000, 0x8ce, r0, 0x1, 0x80000000, 'syz0\x00', &(0x7f0000000180)=['syz1\x00'], 0x5})

3.691806618s ago: executing program 0 (id=162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010021, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
socket$netlink(0x10, 0x3, 0x4) (async, rerun: 64)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000740)={0x5, {{0x2, 0x0, @local}}, {{0x2, 0x400, @broadcast}}}, 0x108) (async)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0xc)
write(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) (rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) (async)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
syz_open_procfs(0x0, 0x0)
symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) (rerun: 32)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) (async, rerun: 64)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async, rerun: 64)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2, 0xa4)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
write(r3, &(0x7f0000000000)='3', 0x4e) (async)
unshare(0x40000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000180a01020000000000000000070000000900010073797a31000000152e34e30073797a31000004000900010073797a31000000000900020073797a32000000000100010073797a3000000000140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
epoll_create1(0x80000)

3.399857204s ago: executing program 0 (id=154):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x20000090)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfbaaf000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x2, 0x0)
write(r6, &(0x7f0000000180)='10', 0x2) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x2, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) (async)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x1, 0x6}) (async)
keyctl$invalidate(0x15, 0x0)
write(r7, &(0x7f0000000280)='Y', 0x1) (async)
fanotify_init(0x40, 0x80000) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)

3.239316292s ago: executing program 3 (id=155):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4, 0x11, r0, 0x0)
write$yama_ptrace_scope(r0, &(0x7f00000000c0)='3\x00', 0x2)
fsmount(r0, 0x0, 0x4)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x7fc8, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) (async)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000400)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0x603, 0x0, 0x0, 0x1000, 0xb6a7, 0x0, 0x0, 0x28}}}, &(0x7f0000000180)=<r5=>0x0) (async)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r6, r5, &(0x7f0000000480)={0x0, 0x18ee, 0x1000, 0x3, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x20, 0x2, 0x342, 0x0, r6}, <r7=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x842d, 0x40, 0x2, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x10000, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x8, 0x0, 0x231}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, r4, '\x00', {0x2003, 0xb66, 0x0, 0x0}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410)
syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)="3d183e767f00214c2e5c07799ae108914ae4c2cd24a1470432a3917ac4932ba9e1c6f129861f13f430ca8eeac0f55b39cef14cc9") (rerun: 64)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) (async, rerun: 32)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) (async, rerun: 32)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async, rerun: 32)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1, 0x20010, r7, 0x20000000) (async)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0)
sendfile(r9, r9, 0x0, 0x6) (async)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000002500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002340)={0x80, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "c907821af0a1a820c8a9d270a15dbabaa1e56e30808953e62fb8fc92d00052d206e217f2dce4148877931e67d9998da21eb88975347d6c0f02b1fcf501d04c3d3332e23cd85edcaa445a27871c8cb8690379961e759cb5262f98620916a88c26"}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f00000003c0)={0x0, 0x1, r10, 0x1, 0x80000})

2.815328463s ago: executing program 0 (id=156):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='fd', 0x0, r2)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x2)
fchdir(r4)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff)
keyctl$chown(0x4, r6, 0x0, 0xee00)
keyctl$chown(0x4, r6, 0x0, 0x0)

1.96022951s ago: executing program 3 (id=157):
socket(0x400000000010, 0x3, 0x0)

1.756036396s ago: executing program 2 (id=158):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r1 = socket$kcm(0x2, 0x5, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00'})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0)
write(r3, &(0x7f00000000c0)='name ~ \"', 0x8)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000040)={{0x8, 0x4}, {0x7, 0x3}, 0x8, 0x1})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async)
socket$kcm(0x2, 0x5, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00'}) (async)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) (async)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) (async)
write(r3, &(0x7f00000000c0)='name ~ \"', 0x8) (async)
ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000040)={{0x8, 0x4}, {0x7, 0x3}, 0x8, 0x1}) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0xe0}], 0x1}, 0x3e8) (async)

1.482231396s ago: executing program 2 (id=160):
r0 = add_key(&(0x7f0000002340)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
mknod(0x0, 0x8000, 0xd02)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0x4}]})
writev(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x10000)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0)
keyctl$instantiate_iov(0x14, r4, &(0x7f0000000440)=[{&(0x7f0000000380)="e9bc7bc112455605904ef7db5787be461cb1970150ea29e98c4e6fb196672df3d7b7f899ef2a0b73814ba2269929905b2dd711873e36e30475c34fe9284c0f81e635716297342af6949f567592aea3aaf061bee17736c55558cccf597a97f44fc981272eb4ee9452b894ff6bfffac826e73d5ecf6fdd1335b3cfd4fd6ec1b00c1f86e74ba3bf3c9e90ea4119add96a7f5a05d3", 0x93}], 0x1, r0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)
ioctl$TUNGETFILTER(r5, 0xc0189436, &(0x7f0000003100)=""/4080)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000012c0)={0x0, 0xb04, 0x2, 0x2, 0x17c}, &(0x7f0000001280)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000001340)=<r10=>0x0)
io_uring_register$IORING_REGISTER_IOWQ_AFF(r7, 0x11, &(0x7f00000004c0)="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", 0x14d)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r0, 0x9e, 0x88}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'hmac(sha1-ce)\x00'}}, &(0x7f0000000180)="47be0916841af6a1d8c60c950513607ddb1364c294af860204b8189c6705e2a49e67c3468820b4f64b1818f850e770bcb92983a180f40ed7ead16f60996a62a03608af901cff14dbdb6fef1c305861a57626124454f8df24e905ca1e94f36e33913628ad901a1f4b4c2ce920fe84ef08d12a26b2c50add5dc8ac77002086f962e69642ab06e3028f3263c89c6ebd6792f9a5f10b155ad42e49d91e17034c", &(0x7f00000002c0)=""/136)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000000)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))

1.094930803s ago: executing program 1 (id=161):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') (async)
syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00')
socket$netlink(0x10, 0x3, 0x8000000004) (async)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000a"], 0x18}}, 0x0)
socket$kcm(0x2d, 0x2, 0x0) (async)
r4 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2})
write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fff9, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

770.069585ms ago: executing program 3 (id=163):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r4, &(0x7f0000000000)='3', 0x3e)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup(r5)
socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)

743.500388ms ago: executing program 0 (id=164):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
fstat(r1, &(0x7f0000000000))
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000080)="b9ff0300600d698cff9e14f00800", 0x0, 0xe02, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

349.41959ms ago: executing program 2 (id=165):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x244f, r0, 0x4, {0xa, 0x401}, 0x4d}, 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})

349.109044ms ago: executing program 0 (id=166):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e21, 0x6, 0x4e24, 0x5, 0x0, 0x0, 0x80, 0xc, 0x0, 0xffffffffffffffff}, {0x1, 0xc, 0x8402, 0x0, 0x5, 0x5, 0x2, 0x3}, {0xed4, 0x10001, 0x5, 0x8}, 0x7f, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x4d6, 0x2b}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x2, 0x2, 0xf6, 0x7fff, 0x800, 0x7}}, 0xe4)
ioctl(r0, 0x40186f40, &(0x7f00000001c0))
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, &(0x7f0000000440)=0x20000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = syz_open_dev$video4linux(0x0, 0x4000004, 0x40000)
fremovexattr(0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000380)='./file0\x00', 0x206)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000006100)={0x50, 0x0, 0x4, {0x7, 0x2d, 0x5, 0x5d010702, 0xe0b, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000100)=0x8080000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000000200)={<r5=>r3, &(0x7f0000000000)='\x00', 0xc0a40, &(0x7f0000000140)={@align=0xffffffff, {0x200, 0x0, 0x3ff, 0xc0}}, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x7})
ftruncate(r5, 0x497)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6fb668dcaeb1dbe3512514fadfbac9746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])

198.250089ms ago: executing program 2 (id=167):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x805}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x0, 0xa}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000009c0), 0x4)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004005)
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, r5, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}], @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x994}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x80, r5, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x32}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vcan0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_virt_wifi\x00'}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20005001)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x2)
openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/trace_options\x00', 0x40201, 0x0)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110180000000200de0500000100"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)

78.832547ms ago: executing program 1 (id=168):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000002000000000000000000000000ac1e010100000000000000000000000000000000000000000a0000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f7ffffffffffffff000000000000000000000000000000000000000000ffffff7f000100000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000002000000000000000000000000c06b6e000000000084000500ac1e0001000000000000000000000000000004d66c00000002000000ac1e01010000000000000000000000000735000004010400000200000f000000a2000000fe8000000000000000000000000000aa000004d43c0000000200007f000001000000000000000000000000063500002303810000000000ff0f00000600"/240], 0x13c}}, 0x2c000010)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4)
ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000180)={'veth0_to_bridge\x00', @ifru_mtu=0x267})
syz_emit_ethernet(0xfc1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x5d, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x20000811)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0)
inotify_add_watch(r3, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x200000a0)
write(r3, &(0x7f0000000400)='1', 0x1)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r4, &(0x7f0000000600)='1', 0x1)
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x34640, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x28, r7, 0x609, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x4000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x200000002})

72.487673ms ago: executing program 2 (id=169):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000400)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x20040600)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4d, 0x5, 0x330, 0x3, 0x0, 0x7, 0x8001, 0x4}}, {0xc, 0x2, [0x401, 0x7, 0xbe, 0x40]}}, {{0x1c, 0x1, {0x72, 0x3, 0x80, 0x0, 0x1, 0x8, 0x1, 0x2}}, {0x8, 0x2, [0x4, 0x6]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x44080)
mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x5, <r7=>r5, 0x1})
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r8, &(0x7f0000000200)='S', 0x1)
r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)=0x4)
r10 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r10, 0x4144, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616ed804f5bdbeea211f6e6f3d", @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00'])
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ppoll(&(0x7f0000000040)=[{r4, 0x4000}], 0x1, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0)
write(r13, &(0x7f00000001c0)='jiffies', 0x7)
ioctl$VIDIOC_G_SELECTION(r13, 0xc040565e, &(0x7f0000000140)={0x4, 0x1, 0x4, {0x2, 0x5000, 0x0, 0x2}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

0s ago: executing program 0 (id=170):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async)
r0 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000002e00)='ns/cgroup\x00') (async)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) (async)
write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa0800"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (async)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000001080)=""/4096, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r4 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x80001, 0x0)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendto$unix(r5, &(0x7f0000000100)="6071e3c1439fe82f2bf0", 0xa, 0x20008041, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58849' (ED25519) to the list of known hosts.
[   33.009397][ T5712] cgroup: Unknown subsys name 'net'
[   33.107896][ T5712] cgroup: Unknown subsys name 'cpuset'
[   33.111417][ T5712] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.059981][ T5712] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   38.081453][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   38.083329][   T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   38.083998][   T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   38.084195][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   38.084754][   T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   38.086122][   T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   38.088408][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   38.088734][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   38.089910][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   38.090827][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   38.094105][   T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   38.097694][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   38.098682][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   38.098898][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   38.105397][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   38.107273][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   38.110944][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   38.111883][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   38.116720][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   38.123066][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   38.640250][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.640332][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.640432][ T5747] bridge_slave_0: entered allmulticast mode
[   38.641721][ T5747] bridge_slave_0: entered promiscuous mode
[   38.666869][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.666981][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.667065][ T5747] bridge_slave_1: entered allmulticast mode
[   38.668253][ T5747] bridge_slave_1: entered promiscuous mode
[   38.699579][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.699666][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.699758][ T5739] bridge_slave_0: entered allmulticast mode
[   38.700912][ T5739] bridge_slave_0: entered promiscuous mode
[   38.718816][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.719071][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.719138][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.719223][ T5739] bridge_slave_1: entered allmulticast mode
[   38.720519][ T5739] bridge_slave_1: entered promiscuous mode
[   38.738333][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.822691][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.829939][ T5747] team0: Port device team_slave_0 added
[   38.846756][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.846902][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.846944][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.847005][ T5746] bridge_slave_0: entered allmulticast mode
[   38.847693][ T5746] bridge_slave_0: entered promiscuous mode
[   38.849263][ T5747] team0: Port device team_slave_1 added
[   38.854292][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.854338][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.854399][ T5746] bridge_slave_1: entered allmulticast mode
[   38.855104][ T5746] bridge_slave_1: entered promiscuous mode
[   38.929712][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.930690][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.930777][ T5738] bridge_slave_0: entered allmulticast mode
[   38.932023][ T5738] bridge_slave_0: entered promiscuous mode
[   38.934997][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.935068][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.935157][ T5738] bridge_slave_1: entered allmulticast mode
[   38.936809][ T5738] bridge_slave_1: entered promiscuous mode
[   38.938749][ T5739] team0: Port device team_slave_0 added
[   38.948562][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.948575][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.948594][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.959423][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.961105][ T5739] team0: Port device team_slave_1 added
[   38.966453][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.967017][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.967029][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.967049][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.977571][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.003362][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.022120][ T5746] team0: Port device team_slave_0 added
[   39.022572][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.022584][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.022602][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.031175][ T5738] team0: Port device team_slave_0 added
[   39.037328][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.037337][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.037349][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.042914][ T5746] team0: Port device team_slave_1 added
[   39.044320][ T5738] team0: Port device team_slave_1 added
[   39.053402][ T5747] hsr_slave_0: entered promiscuous mode
[   39.053959][ T5747] hsr_slave_1: entered promiscuous mode
[   39.093415][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.093428][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.093441][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.102907][ T5739] hsr_slave_0: entered promiscuous mode
[   39.103331][ T5739] hsr_slave_1: entered promiscuous mode
[   39.103644][ T5739] debugfs: 'hsr0' already exists in 'hsr'
[   39.103691][ T5739] Cannot create hsr debugfs directory
[   39.108137][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.108146][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.108158][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.115635][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.115645][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.115657][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.126597][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.126607][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.126619][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.212925][ T5746] hsr_slave_0: entered promiscuous mode
[   39.213618][ T5746] hsr_slave_1: entered promiscuous mode
[   39.214414][ T5746] debugfs: 'hsr0' already exists in 'hsr'
[   39.214432][ T5746] Cannot create hsr debugfs directory
[   39.231021][ T5738] hsr_slave_0: entered promiscuous mode
[   39.231720][ T5738] hsr_slave_1: entered promiscuous mode
[   39.232203][ T5738] debugfs: 'hsr0' already exists in 'hsr'
[   39.232220][ T5738] Cannot create hsr debugfs directory
[   39.472583][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.484500][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.502912][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.507370][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.507887][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.510149][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.520889][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.525336][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.560219][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   39.565371][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.565869][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   39.568805][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.569522][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   39.574590][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.576584][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   39.580427][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.632889][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   39.635611][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.637155][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   39.640756][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.641379][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   39.644695][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.647425][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   39.652674][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.691472][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   39.695745][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.696219][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   39.700177][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.705550][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   39.707660][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.708019][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   39.709634][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.736126][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.766671][ T5747] 8021q: adding VLAN 0 to HW filter on device team0
[   39.777378][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.777428][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.784262][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.784367][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.806777][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.813283][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.845019][ T5739] 8021q: adding VLAN 0 to HW filter on device team0
[   39.853214][ T5746] 8021q: adding VLAN 0 to HW filter on device team0
[   39.859595][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.866814][  T618] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.866900][  T618] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.870777][  T618] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.870856][  T618] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.881932][  T618] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.882059][  T618] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.893211][  T618] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.893258][  T618] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.920268][ T5738] 8021q: adding VLAN 0 to HW filter on device team0
[   39.936162][  T618] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.936236][  T618] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.947194][  T618] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.947269][  T618] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.116295][   T64] Bluetooth: hci1: command tx timeout
[   40.116298][ T5745] Bluetooth: hci0: command tx timeout
[   40.194956][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.201208][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.204941][ T5745] Bluetooth: hci2: command tx timeout
[   40.205044][ T5745] Bluetooth: hci3: command tx timeout
[   40.228708][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.256368][ T5747] veth0_vlan: entered promiscuous mode
[   40.260247][ T5739] veth0_vlan: entered promiscuous mode
[   40.270596][ T5747] veth1_vlan: entered promiscuous mode
[   40.278341][ T5739] veth1_vlan: entered promiscuous mode
[   40.281077][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.316938][ T5747] veth0_macvtap: entered promiscuous mode
[   40.326786][ T5747] veth1_macvtap: entered promiscuous mode
[   40.335989][ T5739] veth0_macvtap: entered promiscuous mode
[   40.349907][ T5739] veth1_macvtap: entered promiscuous mode
[   40.372927][ T5738] veth0_vlan: entered promiscuous mode
[   40.375202][ T5746] veth0_vlan: entered promiscuous mode
[   40.376929][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.385543][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.386957][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.390204][ T5746] veth1_vlan: entered promiscuous mode
[   40.393105][ T5738] veth1_vlan: entered promiscuous mode
[   40.406962][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.476984][ T5746] veth0_macvtap: entered promiscuous mode
[   40.478449][ T5738] veth0_macvtap: entered promiscuous mode
[   40.493783][ T5738] veth1_macvtap: entered promiscuous mode
[   40.495076][  T618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.495087][  T618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.507218][ T5746] veth1_macvtap: entered promiscuous mode
[   40.533252][  T618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.533264][  T618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.538651][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.540750][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.555640][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.562570][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.564937][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.564948][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.566895][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.581272][ T5747] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.588914][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.588953][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.588983][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.597520][ T5747] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.607189][ T5747] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.608274][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.608285][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.611791][ T5747] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.628254][ T5747] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.663003][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.663022][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.665050][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.697189][  T618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.697205][  T618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.729260][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.729274][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.735403][   T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.735420][   T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.744013][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744135][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744155][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744171][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744188][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744205][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744225][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744241][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744258][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744274][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.744291][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.878742][   T44] audit: type=1800 audit(1789917255.819:2): pid=5894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file0" dev="overlay" ino=26 res=0 errno=0
[   41.056328][ T5818] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[   41.150849][ T5897] ecryptfs_get_tree: kern_path() failed
[   41.158744][ T5897] Reading sb failed; rc = [-2]
[   41.217804][ T5818] usb 8-1: not running at top speed; connect to a high speed hub
[   41.217836][ T5818] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   41.218771][ T5818] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   41.220634][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   41.220654][ T5818] usb 8-1: Product: syz
[   41.220668][ T5818] usb 8-1: Manufacturer: syz
[   41.220681][ T5818] usb 8-1: SerialNumber: syz
[   41.234755][ T5818] oti6858 8-1:1.0: oti6858 converter detected
[   41.246761][ T5899] input: syz0 as /devices/virtual/input/input5
[   41.262806][ T5818] usb 8-1: oti6858 converter now attached to ttyUSB0
[   41.440152][ T5818] usb 8-1: USB disconnect, device number 2
[   41.450986][ T5818] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   41.451350][ T5818] oti6858 8-1:1.0: device disconnected
[   42.194318][   T64] Bluetooth: hci0: command tx timeout
[   42.207146][   T64] Bluetooth: hci1: command tx timeout
[   42.274081][   T64] Bluetooth: hci3: command tx timeout
[   42.274111][   T64] Bluetooth: hci2: command tx timeout
[   42.310693][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   42.354647][ T5910] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET)
[   42.401056][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   42.578655][ T5917] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1
[   42.578677][ T5917] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1
[   42.578685][ T5917] PKCS7: Unsupported data type 106
[   42.580732][ T5916] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8'.
[   43.168477][ T5833] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   43.314015][ T5833] usb 6-1: Using ep0 maxpacket: 32
[   43.315510][ T5833] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[   43.316392][ T5833] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   43.316407][ T5833] usb 6-1: config 0 has no interface number 0
[   43.318768][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.318787][ T5833] usb 6-1: Product: syz
[   43.318799][ T5833] usb 6-1: Manufacturer: syz
[   43.318811][ T5833] usb 6-1: SerialNumber: syz
[   43.323057][ T5833] usb 6-1: config 0 descriptor??
[   43.328831][ T5833] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[   43.328851][ T5833] usb 6-1: selecting invalid altsetting 1
[   43.328863][ T5833] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[   43.332995][ T5833] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   43.333185][ T5833] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[   43.333206][ T5833] usb 6-1: media controller created
[   43.342075][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   43.597320][ T5934] kvm: apic: phys broadcast and lowest prio
[   43.606594][ T5934] e1000e 0000:00:02.0 eth1: removed PHC
[   43.720641][ T5934] e1000e 0000:00:02.0 eth1: NIC Link is Down
[   44.274981][ T5745] Bluetooth: hci1: command tx timeout
[   44.275012][ T5745] Bluetooth: hci0: command tx timeout
[   44.353974][   T64] Bluetooth: hci2: command tx timeout
[   44.353998][   T64] Bluetooth: hci3: command tx timeout
[   44.488852][ T5833] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[   44.489377][ T5833] zl10353_read_register: readreg error (reg=127, ret==-110)
[   44.793405][ T5968] ptrace attach of "/syz-executor exec"[5970] was attempted by "/syz-executor exec"[5968]
[   45.169772][ T5982] ecryptfs_get_tree: kern_path() failed
[   45.171281][ T5982] Reading sb failed; rc = [-2]
[   45.230925][ T5987] input: syz0 as /devices/virtual/input/input6
[   45.235566][ T5833] usb 6-1: USB disconnect, device number 2
[   45.841569][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'.
[   46.114584][ T2356] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[   46.363914][   T64] Bluetooth: hci0: command tx timeout
[   46.363944][ T5745] Bluetooth: hci1: command tx timeout
[   46.434015][ T5745] Bluetooth: hci2: command tx timeout
[   46.434046][ T5745] Bluetooth: hci3: command tx timeout
[   46.605430][ T6010] gfs2: error -5 reading superblock
[   46.606046][ T2356] usb 6-1: not running at top speed; connect to a high speed hub
[   46.606835][ T2356] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[   46.613301][ T2356] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   46.650179][ T2356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   46.650196][ T2356] usb 6-1: Product: syz
[   46.650246][ T2356] usb 6-1: Manufacturer: syz
[   46.650254][ T2356] usb 6-1: SerialNumber: syz
[   46.695748][ T2356] oti6858 6-1:1.0: oti6858 converter detected
[   46.813080][ T2356] usb 6-1: oti6858 converter now attached to ttyUSB0
[   46.940409][ T2356] usb 6-1: USB disconnect, device number 3
[   46.967830][ T5996] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -19
[   47.016033][ T2356] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[   47.019116][ T2356] oti6858 6-1:1.0: device disconnected
[   47.245954][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'.
[   47.374300][ T1173] IPVS: starting estimator thread 0...
[   47.474061][ T6030] IPVS: using max 25 ests per chain, 60000 per kthread
[   47.475716][ T6033] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use)
[   48.254363][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.537318][ T6043] netlink: 'syz.0.36': attribute type 3 has an invalid length.
[   48.537332][ T6043] netlink: 'syz.0.36': attribute type 1 has an invalid length.
[   48.537338][ T6043] netlink: 228 bytes leftover after parsing attributes in process `syz.0.36'.
[   48.664031][ T5833] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   48.833993][ T5833] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   48.849546][ T5833] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[   48.849561][ T5833] usb 6-1: config 1 has no interface number 0
[   48.849577][ T5833] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[   48.849590][ T5833] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   48.849602][ T5833] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   48.852074][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.852086][ T5833] usb 6-1: Product: syz
[   48.852093][ T5833] usb 6-1: Manufacturer: syz
[   48.852100][ T5833] usb 6-1: SerialNumber: syz
[   48.854069][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   48.980239][ T6049] 9p: Bad value for 'wfdno'
[   49.059834][ T6045] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   49.268472][ T5833] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[   49.465301][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.465497][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.553348][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'.
[   49.553519][ T6061] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   49.671802][ T6045] random: crng reseeded on system resumption
[   49.729775][ T5833] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71
[   49.729792][ T5833] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71
[   49.730121][ T5833] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71
[   49.730137][ T5833] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71
[   49.734895][ T5833] usb 6-1: USB disconnect, device number 4
[   49.738591][ T5833] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem
[   49.895344][ T6071] capability: warning: `syz.2.37' uses deprecated v2 capabilities in a way that may be insecure
[   49.895859][ T6071] overlayfs: failed to resolve './bus': -2
[   50.106430][ T5833] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[   50.216399][ T5846] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[   50.390552][ T5846] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[   50.396248][ T5846] usb 7-1: config 0 has no interfaces?
[   50.400387][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.400429][ T5846] usb 7-1: Product: syz
[   50.400443][ T5846] usb 7-1: Manufacturer: syz
[   50.400452][ T5846] usb 7-1: SerialNumber: syz
[   50.403229][ T5846] usb 7-1: config 0 descriptor??
[   50.728026][ T1727] usb 7-1: USB disconnect, device number 2
[   51.031116][ T6103] syzkaller0: entered promiscuous mode
[   51.031130][ T6103] syzkaller0: entered allmulticast mode
[   51.341063][ T6114] trusted_key: encrypted_key: insufficient parameters specified
[   51.345124][ T6114] Zero length message leads to an empty skb
[   51.462525][ T6119] =======================================================
[   51.462525][ T6119] WARNING: The mand mount option has been deprecated and
[   51.462525][ T6119]          and is ignored by this kernel. Remove the mand
[   51.462525][ T6119]          option from the mount to silence this warning.
[   51.462525][ T6119] =======================================================
[   51.691802][ T6127] overlayfs: upper fs does not support file handles, falling back to index=off.
[   52.124038][   T69] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   52.283998][   T69] usb 5-1: Using ep0 maxpacket: 32
[   52.284736][   T69] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   52.285949][   T69] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.289557][   T69] usb 5-1: config 0 descriptor??
[   52.494791][   T69] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   52.497678][   T69] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   52.498274][   T69] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   52.498297][   T69] usb 5-1: media controller created
[   52.504470][   T69] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   52.917821][   T69] az6027: usb out operation failed. (-71)
[   52.917833][   T69] stb0899_attach: Driver disabled by Kconfig
[   52.917839][   T69] az6027: no front-end attached
[   52.917839][   T69] 
[   52.918171][   T69] az6027: usb out operation failed. (-71)
[   52.918178][   T69] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   52.921132][   T69] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input7
[   52.927883][   T69] dvb-usb: schedule remote query interval to 400 msecs.
[   52.927896][   T69] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   52.930761][   T69] usb 5-1: USB disconnect, device number 2
[   52.961701][   T69] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   53.679089][   T44] audit: type=1400 audit(1789917268.619:3): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.698137][   T44] audit: type=1400 audit(1789917268.639:4): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.699395][   T44] audit: type=1400 audit(1789917268.639:5): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.699429][   T44] audit: type=1400 audit(1789917268.639:6): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.699449][   T44] audit: type=1400 audit(1789917268.639:7): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.699783][   T44] audit: type=1400 audit(1789917268.639:8): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.700279][   T44] audit: type=1400 audit(1789917268.639:9): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.700433][   T44] audit: type=1400 audit(1789917268.639:10): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.700915][   T44] audit: type=1400 audit(1789917268.639:11): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.701096][   T44] audit: type=1400 audit(1789917268.639:12): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="//o" pid=6145 comm="syz.1.60" name="//o" offset=61
[   53.726228][   T64] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   53.875145][ T5745] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[   53.949413][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   54.022583][ T6161] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.045240][ T6174] tipc: Started in network mode
[   54.045256][ T6174] tipc: Node identity 7f000001, cluster identity 4711
[   54.045793][ T6174] tipc: Enabled bearer <udp:syz2>, priority 10
[   54.047439][ T6174] netlink: 104 bytes leftover after parsing attributes in process `syz.1.64'.
[   54.048890][ T6174] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   54.049575][ T6174] tipc: Enabled bearer <udp:syz0>, priority 10
[   54.214010][ T5818] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   54.475445][ T5818] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   54.476448][ T5818] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   54.476481][ T5818] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   54.476508][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.480333][ T6164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   54.486935][ T5818] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[   54.893935][ T5833] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   55.045362][ T5818] tipc: Node number set to 2130706433
[   55.045732][ T5833] usb 5-1: Using ep0 maxpacket: 16
[   55.046293][ T5833] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   55.047199][ T5833] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[   55.047217][ T5833] usb 5-1: config 0 has no interface number 0
[   55.047247][ T5833] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   55.048679][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   55.048695][ T5833] usb 5-1: Product: syz
[   55.048706][ T5833] usb 5-1: SerialNumber: syz
[   55.051534][ T5833] usb 5-1: config 0 descriptor??
[   55.057277][ T5833] cm109 5-1:0.8: invalid payload size 208, expected 4
[   55.066271][ T5833] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input8
[   55.196731][ T5833] usb 7-1: USB disconnect, device number 3
[   55.319111][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[   55.319678][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[   55.319691][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   55.319700][   T69] usb 5-1: USB disconnect, device number 3
[   55.346040][   T69] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   55.620208][ T6234] JFS: charset not found
[   55.889427][ T6243] bridge0: port 3(syz_tun) entered blocking state
[   55.892274][ T6243] bridge0: port 3(syz_tun) entered disabled state
[   55.895935][ T6243] syz_tun: entered allmulticast mode
[   55.921205][ T6243] syz_tun: entered promiscuous mode
[   55.921609][ T6243] bridge0: port 3(syz_tun) entered blocking state
[   55.921665][ T6243] bridge0: port 3(syz_tun) entered listening state
[   56.077359][ T6261] process 'syz.2.81' launched './file2' with NULL argv: empty string added
[   56.080367][ T5745] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200'
[   56.080381][ T5745] CPU: 0 UID: 0 PID: 5745 Comm: kworker/u34:4 Not tainted syzkaller #0 PREEMPT(full) 
[   56.080416][ T5745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   56.080424][ T5745] Workqueue: hci1 hci_rx_work
[   56.080441][ T5745] Call Trace:
[   56.080446][ T5745]  <TASK>
[   56.080451][ T5745]  dump_stack_lvl+0x100/0x190
[   56.080468][ T5745]  sysfs_warn_dup.cold+0x1c/0x28
[   56.080485][ T5745]  sysfs_create_dir_ns+0x24b/0x2b0
[   56.080499][ T5745]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   56.080512][ T5745]  ? find_held_lock+0x2b/0x80
[   56.080523][ T5745]  ? kobject_add_internal+0x25f/0x930
[   56.080536][ T5745]  ? kobject_add_internal+0x25f/0x930
[   56.080549][ T5745]  ? do_raw_spin_unlock+0x145/0x1e0
[   56.080561][ T5745]  kobject_add_internal+0x2c8/0x930
[   56.080582][ T5745]  kobject_add+0x16a/0x1e0
[   56.080595][ T5745]  ? __pfx_kobject_add+0x10/0x10
[   56.080606][ T5745]  ? class_to_subsys+0x10f/0x150
[   56.080628][ T5745]  ? kobject_put+0xb9/0x640
[   56.080639][ T5745]  ? _raw_spin_unlock+0x28/0x50
[   56.080657][ T5745]  device_add+0x294/0x1970
[   56.080674][ T5745]  ? __pfx_dev_set_name+0x10/0x10
[   56.080686][ T5745]  ? __pfx_device_add+0x10/0x10
[   56.080703][ T5745]  ? mgmt_send_event_skb+0x2fb/0x460
[   56.080722][ T5745]  hci_conn_add_sysfs+0x1a3/0x260
[   56.080739][ T5745]  le_conn_complete_evt+0x122f/0x2130
[   56.080758][ T5745]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   56.080772][ T5745]  ? hci_event_packet+0x186/0xcd0
[   56.080789][ T5745]  hci_le_conn_complete_evt+0x23c/0x3a0
[   56.080803][ T5745]  ? skb_pull_data+0x15f/0x1e0
[   56.080816][ T5745]  hci_le_meta_evt+0x34a/0x5f0
[   56.080831][ T5745]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[   56.080847][ T5745]  hci_event_packet+0x51c/0xcd0
[   56.080861][ T5745]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   56.080876][ T5745]  ? __pfx_hci_event_packet+0x10/0x10
[   56.080893][ T5745]  ? lockdep_hardirqs_on+0x7d/0x110
[   56.080911][ T5745]  hci_rx_work+0x451/0xfc0
[   56.080927][ T5745]  process_one_work+0xac7/0x1b10
[   56.080946][ T5745]  ? __pfx_process_one_work+0x10/0x10
[   56.080960][ T5745]  ? lock_acquire+0x1d1/0x380
[   56.080979][ T5745]  ? __pfx_hci_rx_work+0x10/0x10
[   56.080993][ T5745]  worker_thread+0x5ef/0xe50
[   56.081010][ T5745]  ? __pfx_worker_thread+0x10/0x10
[   56.081024][ T5745]  ? kthread+0x13a/0x450
[   56.081034][ T5745]  ? __pfx_worker_thread+0x10/0x10
[   56.081046][ T5745]  kthread+0x373/0x450
[   56.081057][ T5745]  ? __pfx_kthread+0x10/0x10
[   56.081070][ T5745]  ret_from_fork+0x730/0xd60
[   56.081087][ T5745]  ? __pfx_ret_from_fork+0x10/0x10
[   56.081104][ T5745]  ? __switch_to+0x800/0x10f0
[   56.081117][ T5745]  ? __pfx_kthread+0x10/0x10
[   56.081130][ T5745]  ret_from_fork_asm+0x1a/0x30
[   56.081147][ T5745]  </TASK>
[   56.081160][ T5745] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory.
[   56.081177][ T5745] Bluetooth: hci1: failed to register connection device
[   56.081227][ T6261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.81'.
[   56.206229][ T6265] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.206706][ T6265] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   56.231177][ T6265] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   56.243432][ T6265] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   56.243466][ T6265] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   56.250856][ T6265] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   56.251983][ T6265] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   56.254998][ T6265] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   56.255057][ T6265] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   56.258516][ T6265] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   56.262187][ T6265] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   56.262217][ T6265] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   56.287450][ T6265] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   56.497347][ T6282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.652528][ T5818] libceph: connect (1)[c::]:6789 error -101
[   56.653259][ T5818] libceph: mon0 (1)[c::]:6789 connect error
[   56.663137][ T5818] libceph: connect (1)[c::]:6789 error -101
[   56.663258][ T5818] libceph: mon0 (1)[c::]:6789 connect error
[   56.683570][ T6290] ceph: No mds server is up or the cluster is laggy
[   56.728888][ T6290] Cannot find add_set index 0 as target
[   56.772649][ T5745] Bluetooth: hci0: unexpected event for opcode 0x20a3
[   56.815278][ T6304] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   56.815315][ T6304] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   56.827196][ T6305] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.962954][ T6307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.964271][ T6307] syzkaller0: entered promiscuous mode
[   56.964282][ T6307] syzkaller0: entered allmulticast mode
[   56.981238][ T6307] tipc: Resetting bearer <eth:syzkaller0>
[   56.989976][ T6306] tipc: Resetting bearer <eth:syzkaller0>
[   56.997548][ T6306] tipc: Disabling bearer <eth:syzkaller0>
[   57.163224][ T6311] netlink: 156 bytes leftover after parsing attributes in process `syz.1.95'.
[   58.204182][ T6351] ptrace attach of "/syz-executor exec"[6354] was attempted by "/syz-executor exec"[6351]
[   58.226540][ T6360] input: syz0 as /devices/virtual/input/input9
[   58.237848][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   58.242142][ T6363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.106'.
[   58.274526][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout
[   58.274556][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout
[   58.274572][ T5745] Bluetooth: hci1: command 0x2016 tx timeout
[   58.329577][ T6377] netlink: 'syz.3.109': attribute type 1 has an invalid length.
[   58.341287][ T6377] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.370533][   T64] Bluetooth: hci1: unexpected event for opcode 0x203b
[   59.238784][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'.
[   59.458866][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   59.474177][ T5846] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   59.485732][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   59.486018][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   59.636687][ T5846] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   59.638485][ T5846] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[   59.638500][ T5846] usb 7-1: config 0 has no interface number 0
[   59.638518][ T5846] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   59.642247][ T5846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.642259][ T5846] usb 7-1: Product: syz
[   59.642266][ T5846] usb 7-1: Manufacturer: syz
[   59.642273][ T5846] usb 7-1: SerialNumber: syz
[   59.644128][ T5846] usb 7-1: config 0 descriptor??
[   59.653513][ T5846] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[   59.784027][   T64] Bluetooth: hci2: unexpected event for opcode 0x0c0d
[   59.839077][ T6450] Invalid argument reading file caps for ./file0
[   59.861715][ T5833] usb 7-1: USB disconnect, device number 4
[   59.867392][ T5833] yurex 7-1:0.50: USB YUREX #0 now disconnected
[   60.356736][  T855] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   60.356760][  T855] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   60.394244][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   60.394272][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[   60.576687][ T6477] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[   60.576704][ T6477] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   60.580115][ T6477] vhci_hcd vhci_hcd.0: Device attached
[   60.631109][ T6479] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   60.853952][ T2356] usb 38-1: SetAddress Request (2) to port 0
[   60.853987][ T2356] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[   61.454970][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   61.469044][ T6500] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   62.130190][ T6480] vhci_hcd: connection reset by peer
[   62.135034][ T5816] vhci_hcd vhci_hcd.0: stop threads
[   62.135292][ T5816] vhci_hcd vhci_hcd.0: release socket
[   62.136070][ T5816] vhci_hcd vhci_hcd.0: disconnect device
[   62.255837][ T6508] syzkaller0: entered promiscuous mode
[   62.255856][ T6508] syzkaller0: entered allmulticast mode
[   62.365159][ T6509] [U] ¥
[   62.434122][  T855] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   62.434140][  T855] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[   62.434155][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout
[   62.434306][ T5745] Bluetooth: hci3: Opcode 0x206a failed: -110
[   62.434329][   T64] Bluetooth: hci1: command 0x2016 tx timeout
[   62.449796][ T6519] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.451742][ T6519] FAULT_INJECTION: forcing a failure.
[   62.451742][ T6519] name failslab, interval 1, probability 0, space 0, times 1
[   62.451761][ T6519] CPU: 2 UID: 0 PID: 6519 Comm: syz.1.142 Not tainted syzkaller #0 PREEMPT(full) 
[   62.451773][ T6519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   62.451781][ T6519] Call Trace:
[   62.451785][ T6519]  <TASK>
[   62.451789][ T6519]  dump_stack_lvl+0x100/0x190
[   62.451808][ T6519]  should_fail_ex.cold+0x5/0xa
[   62.451823][ T6519]  should_failslab+0xc2/0x120
[   62.451838][ T6519]  __kmalloc_cache_noprof+0x91/0x6d0
[   62.451856][ T6519]  ? kobject_uevent_env+0x263/0x18b0
[   62.451879][ T6519]  kobject_uevent_env+0x263/0x18b0
[   62.451895][ T6519]  ? rcu_is_watching+0x13/0xc0
[   62.451909][ T6519]  gadget_bind_driver+0x773/0xbf0
[   62.451924][ T6519]  ? dummy_udc_async_callbacks+0x1/0x170
[   62.451937][ T6519]  ? __pfx_gadget_bind_driver+0x10/0x10
[   62.451951][ T6519]  really_probe+0x241/0xa60
[   62.451967][ T6519]  __driver_probe_device+0x210/0x460
[   62.451981][ T6519]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   62.452016][ T6519]  driver_probe_device+0x4a/0x140
[   62.452033][ T6519]  __driver_attach+0x21f/0x5b0
[   62.452048][ T6519]  ? __pfx___driver_attach+0x10/0x10
[   62.452063][ T6519]  bus_for_each_dev+0x13e/0x1d0
[   62.452076][ T6519]  ? __pfx_bus_for_each_dev+0x10/0x10
[   62.452088][ T6519]  ? bus_add_driver+0x2b5/0x5b0
[   62.452105][ T6519]  bus_add_driver+0x305/0x5b0
[   62.452121][ T6519]  driver_register+0x1e2/0x360
[   62.452137][ T6519]  ? rcu_is_watching+0x13/0xc0
[   62.452149][ T6519]  usb_gadget_register_driver_owner+0x132/0x210
[   62.452164][ T6519]  raw_ioctl+0x1a85/0x2b80
[   62.452180][ T6519]  ? __pfx_raw_ioctl+0x10/0x10
[   62.452199][ T6519]  ? __pfx_raw_ioctl+0x10/0x10
[   62.452216][ T6519]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   62.452245][ T6519]  __do_fast_syscall_32+0x13a/0x8b0
[   62.452276][ T6519]  do_fast_syscall_32+0x32/0x70
[   62.452305][ T6519]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   62.452329][ T6519] RIP: 0023:0xf70befec
[   62.452346][ T6519] Code: Unable to access opcode bytes at 0xf70befc2.
[   62.452351][ T6519] RSP: 002b:00000000f54ab424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   62.452386][ T6519] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005501
[   62.452394][ T6519] RDX: 0000000000000000 RSI: 00000000f7488ff4 RDI: 00000000f54ac4c0
[   62.452401][ T6519] RBP: 00000000f7488ff4 R08: 0000000000000000 R09: 0000000000000000
[   62.452407][ T6519] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   62.452414][ T6519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   62.452429][ T6519]  </TASK>
[   62.814015][ T5846] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   62.964715][ T5846] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.965545][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.965561][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.965571][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   62.965590][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.966915][ T5846] usb 6-1: config 0 descriptor??
[   63.204024][ T1727] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   63.225534][ T6519] ftl_cs: FTL header not found.
[   63.255113][ T6519] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[   63.259243][ T5846] usbhid 6-1:0.0: can't add hid device: -71
[   63.259291][ T5846] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   63.261346][ T5846] usb 6-1: USB disconnect, device number 5
[   63.364547][ T1727] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   63.365618][ T1727] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   63.365632][ T1727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.365641][ T1727] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   63.365660][ T1727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.365672][ T1727] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.367005][ T1727] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   63.367017][ T1727] usb 5-1: Product: syz
[   63.367024][ T1727] usb 5-1: Manufacturer: syz
[   63.374191][ T1727] cdc_wdm 5-1:1.0: skipping garbage
[   63.374204][ T1727] cdc_wdm 5-1:1.0: skipping garbage
[   63.381493][ T1727] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   63.381508][ T1727] cdc_wdm 5-1:1.0: Unknown control protocol
[   63.586998][ T6536] cdc_wdm 5-1:1.0: Error submitting int urb - -90
[   63.587754][ T5846] usb 5-1: USB disconnect, device number 4
[   64.073908][ T5846] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   64.083960][ T2337] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   64.233988][ T5846] usb 8-1: Using ep0 maxpacket: 32
[   64.234762][ T2337] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   64.235614][ T5846] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[   64.235748][ T2337] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   64.235774][ T2337] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   64.235803][ T2337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.236766][ T5846] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   64.238792][ T6565] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   64.239437][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.239454][ T5846] usb 8-1: Product: syz
[   64.239464][ T5846] usb 8-1: Manufacturer: syz
[   64.239475][ T5846] usb 8-1: SerialNumber: syz
[   64.243774][ T2337] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[   64.442103][   T30] usb 6-1: USB disconnect, device number 6
[   64.475411][ T5846] usb 8-1: 1:1 : bogus bTerminalLink 2
[   64.515206][  T855] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[   64.515221][  T855] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[   64.515426][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   64.515451][   T64] Bluetooth: hci2: command 0x0c1a tx timeout
[   64.689622][ T5846] usb 8-1: USB disconnect, device number 3
[   64.935597][ T6584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.162'.
[   65.089371][ T6588] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[   65.089388][ T6588] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[   65.091762][ T6588] vhci_hcd vhci_hcd.0: Device attached
[   65.227957][   T44] kauditd_printk_skb: 55 callbacks suppressed
[   65.227975][   T44] audit: type=1800 audit(1789917279.159:68): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.155" name="file1" dev="tmpfs" ino=218 res=0 errno=0
[   65.373934][ T2337] usb 42-1: SetAddress Request (2) to port 0
[   65.373969][ T2337] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[   65.658262][ T6597] cgroup: fork rejected by pids controller in /syz3
[   65.831324][ T6589] vhci_hcd: connection reset by peer
[   65.854372][ T5816] vhci_hcd vhci_hcd.2: stop threads
[   65.854390][ T5816] vhci_hcd vhci_hcd.2: release socket
[   65.854420][ T5816] vhci_hcd vhci_hcd.2: disconnect device
[   65.977773][ T2356] usb 38-1: device descriptor read/8, error -110
[   66.358520][ T6645] gfs2: error -5 reading superblock
[   66.365499][ T2356] usb usb38-port1: attempt power cycle
[   66.608837][  T855] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[   66.608881][  T855] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[   66.610482][   T64] Bluetooth: hci3: command 0x0c1a tx timeout
[   66.954452][ T2356] usb usb38-port1: unable to enumerate USB device
[   67.212561][ T6655] jffs2: notice: (6655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   68.059671][ T6665] syzkaller1: entered promiscuous mode
[   68.059684][ T6665] syzkaller1: entered allmulticast mode
[   68.181511][ T6671] ubi0: attaching mtd0
[   68.183181][ T6671] ubi0: scanning is finished
[   68.183208][ T6671] ubi0 error: ubi_read_volume_table: the layout volume was not found
[   68.401034][ T6671] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[   68.424782][ T6681] netlink: 136 bytes leftover after parsing attributes in process `syz.1.168'.
[   68.484525][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[   68.484556][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0)
[   68.561016][ T6681] ------------[ cut here ]------------
[   68.561027][ T6681] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport'
[   68.561035][ T6681] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#2: syz.1.168/6681
[   68.570046][ T6681] Modules linked in:
[   68.572287][ T6681] CPU: 2 UID: 0 PID: 6681 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) 
[   68.575310][ T6681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.578600][ T6681] RIP: 0010:remove_proc_entry+0x4f5/0x610
[   68.580435][ T6681] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00
[   68.587523][ T6681] RSP: 0000:ffffc9000612f6a0 EFLAGS: 00010246
[   68.589482][ T6681] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804cbded5c
[   68.591959][ T6681] RDX: ffff88801d7685dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310
[   68.594511][ T6681] RBP: ffff88804cbded38 R08: ffff88804cbde35c R09: ffffed100997bd93
[   68.596979][ T6681] R10: ffff88804cbdec9b R11: 0000000000000000 R12: ffff88804cbdec80
[   68.599448][ T6681] R13: ffff88801d768500 R14: ffff88804cbde338 R15: dffffc0000000000
[   68.601943][ T6681] FS:  0000000000000000(0000) GS:ffff888096b60000(0063) knlGS:00000000f54adb40
[   68.604754][ T6681] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[   68.606732][ T6681] CR2: 000000003390dff8 CR3: 000000004c88e000 CR4: 0000000000352ef0
[   68.609199][ T6681] Call Trace:
[   68.610273][ T6681]  <TASK>
[   68.611223][ T6681]  ? __pfx_remove_proc_entry+0x10/0x10
[   68.612929][ T6681]  ? mtree_load+0x3a4/0xb50
[   68.614447][ T6681]  ? __pfx_mtree_load+0x10/0x10
[   68.615996][ T6681]  ? rcu_is_watching+0x13/0xc0
[   68.617524][ T6681]  unregister_irq_proc+0x206/0x2a0
[   68.619176][ T6681]  ? __pfx_unregister_irq_proc+0x10/0x10
[   68.620979][ T6681]  free_desc+0x89/0x330
[   68.622339][ T6681]  ? __pfx_free_desc+0x10/0x10
[   68.623998][ T6681]  ? kasan_quarantine_put+0x104/0x240
[   68.625754][ T6681]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.627403][ T6681]  ? irq_domain_free_irqs+0x400/0x5c0
[   68.629116][ T6681]  irq_free_descs+0x84/0xc0
[   68.630566][ T6681]  irq_domain_free_irqs+0x46a/0x5c0
[   68.632246][ T6681]  mp_unmap_irq+0xf8/0x130
[   68.633687][ T6681]  ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10
[   68.635723][ T6681]  acpi_unregister_gsi_ioapic+0x40/0x60
[   68.637478][ T6681]  acpi_unregister_gsi+0x25/0x40
[   68.639088][ T6681]  acpi_pci_irq_disable+0x275/0x360
[   68.641220][ T6681]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[   68.643356][ T6681]  pcibios_disable_device+0x89/0xb0
[   68.645054][ T6681]  do_pci_disable_device+0x9f/0x100
[   68.646687][ T6681]  ? __pfx_do_pci_disable_device+0x10/0x10
[   68.648530][ T6681]  pci_disable_device+0x130/0x270
[   68.650138][ T6681]  pci_device_remove+0xb2/0x1d0
[   68.651663][ T6681]  ? __pfx_pci_device_remove+0x10/0x10
[   68.653269][ T6681]  device_remove+0xcb/0x180
[   68.654604][ T6681]  device_release_driver_internal+0x44e/0x620
[   68.656369][ T6681]  pci_stop_bus_device+0x120/0x160
[   68.657996][ T6681]  pci_stop_and_remove_bus_device+0x58/0xa0
[   68.659861][ T6681]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   68.661910][ T6681]  remove_store+0x123/0x140
[   68.663359][ T6681]  ? __pfx_remove_store+0x10/0x10
[   68.665003][ T6681]  ? find_held_lock+0x2b/0x80
[   68.666504][ T6681]  ? sysfs_file_kobj+0xe4/0x290
[   68.668044][ T6681]  ? sysfs_file_kobj+0xe4/0x290
[   68.669625][ T6681]  ? __pfx_remove_store+0x10/0x10
[   68.671219][ T6681]  dev_attr_store+0x58/0x80
[   68.672692][ T6681]  ? __pfx_dev_attr_store+0x10/0x10
[   68.674466][ T6681]  sysfs_kf_write+0xf2/0x150
[   68.675934][ T6681]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.677643][ T6681]  ? __pfx_sysfs_kf_write+0x10/0x10
[   68.679277][ T6681]  vfs_write+0x6af/0x1050
[   68.680666][ T6681]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   68.682974][ T6681]  ? __pfx_vfs_write+0x10/0x10
[   68.684923][ T6681]  ? find_held_lock+0x2b/0x80
[   68.686789][ T6681]  ksys_write+0x12a/0x250
[   68.688452][ T6681]  ? __pfx_ksys_write+0x10/0x10
[   68.689911][ T6681]  __do_fast_syscall_32+0x13a/0x8b0
[   68.691555][ T6681]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.693223][ T6681]  do_fast_syscall_32+0x32/0x70
[   68.694922][ T6681]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.696882][ T6681] RIP: 0023:0xf70befec
[   68.698175][ T6681] Code: Unable to access opcode bytes at 0xf70befc2.
[   68.700267][ T6681] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   68.702871][ T6681] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400
[   68.705388][ T6681] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   68.707890][ T6681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   68.710363][ T6681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   68.712890][ T6681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.715430][ T6681]  </TASK>
[   68.716447][ T6681] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   68.718723][ T6681] CPU: 2 UID: 0 PID: 6681 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) 
[   68.721498][ T6681] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   68.724668][ T6681] Call Trace:
[   68.725743][ T6681]  <TASK>
[   68.726683][ T6681]  dump_stack_lvl+0x100/0x190
[   68.728183][ T6681]  vpanic+0x553/0x970
[   68.729468][ T6681]  ? __pfx_vpanic+0x10/0x10
[   68.730897][ T6681]  panic+0xd1/0xe0
[   68.732100][ T6681]  ? __pfx_panic+0x10/0x10
[   68.733524][ T6681]  check_panic_on_warn.cold+0x19/0x34
[   68.735197][ T6681]  ? remove_proc_entry+0x4e7/0x610
[   68.736832][ T6681]  __warn.cold+0x191/0x318
[   68.738230][ T6681]  __report_bug+0x30f/0x440
[   68.739636][ T6681]  ? remove_proc_entry+0x4e7/0x610
[   68.741202][ T6681]  ? __pfx___report_bug+0x10/0x10
[   68.742754][ T6681]  ? __do_fast_syscall_32+0x13a/0x8b0
[   68.744425][ T6681]  ? do_raw_spin_lock+0x128/0x260
[   68.745967][ T6681]  ? find_held_lock+0x2b/0x80
[   68.747398][ T6681]  ? proc_entry_rundown+0x158/0x1e0
[   68.749045][ T6681]  ? proc_entry_rundown+0x158/0x1e0
[   68.750641][ T6681]  report_bug_entry+0xe2/0x290
[   68.752128][ T6681]  ? remove_proc_entry+0x4f5/0x610
[   68.753735][ T6681]  handle_bug+0x1cd/0x2a0
[   68.755071][ T6681]  exc_invalid_op+0x17/0x50
[   68.756535][ T6681]  asm_exc_invalid_op+0x1a/0x20
[   68.758043][ T6681] RIP: 0010:remove_proc_entry+0x4f5/0x610
[   68.759816][ T6681] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d 29 1f 8b 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 66 0b 8c <67> 48 0f b9 3a e9 2a fe ff ff e8 cc ed 4a ff 48 8d 7d 18 48 b8 00
[   68.765948][ T6681] RSP: 0000:ffffc9000612f6a0 EFLAGS: 00010246
[   68.768424][ T6681] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff88804cbded5c
[   68.771611][ T6681] RDX: ffff88801d7685dc RSI: ffffffff8c0b6640 RDI: ffffffff914b9310
[   68.774853][ T6681] RBP: ffff88804cbded38 R08: ffff88804cbde35c R09: ffffed100997bd93
[   68.778058][ T6681] R10: ffff88804cbdec9b R11: 0000000000000000 R12: ffff88804cbdec80
[   68.781270][ T6681] R13: ffff88801d768500 R14: ffff88804cbde338 R15: dffffc0000000000
[   68.784507][ T6681]  ? __pfx_remove_proc_entry+0x10/0x10
[   68.786737][ T6681]  ? mtree_load+0x3a4/0xb50
[   68.788608][ T6681]  ? __pfx_mtree_load+0x10/0x10
[   68.790602][ T6681]  ? rcu_is_watching+0x13/0xc0
[   68.792594][ T6681]  unregister_irq_proc+0x206/0x2a0
[   68.794667][ T6681]  ? __pfx_unregister_irq_proc+0x10/0x10
[   68.796960][ T6681]  free_desc+0x89/0x330
[   68.798668][ T6681]  ? __pfx_free_desc+0x10/0x10
[   68.800665][ T6681]  ? kasan_quarantine_put+0x104/0x240
[   68.802851][ T6681]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.804911][ T6681]  ? irq_domain_free_irqs+0x400/0x5c0
[   68.806928][ T6681]  irq_free_descs+0x84/0xc0
[   68.808775][ T6681]  irq_domain_free_irqs+0x46a/0x5c0
[   68.810652][ T6681]  mp_unmap_irq+0xf8/0x130
[   68.812092][ T6681]  ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10
[   68.814077][ T6681]  acpi_unregister_gsi_ioapic+0x40/0x60
[   68.815808][ T6681]  acpi_unregister_gsi+0x25/0x40
[   68.817420][ T6681]  acpi_pci_irq_disable+0x275/0x360
[   68.819069][ T6681]  ? __pfx_acpi_pci_irq_disable+0x10/0x10
[   68.820896][ T6681]  pcibios_disable_device+0x89/0xb0
[   68.822546][ T6681]  do_pci_disable_device+0x9f/0x100
[   68.824179][ T6681]  ? __pfx_do_pci_disable_device+0x10/0x10
[   68.826043][ T6681]  pci_disable_device+0x130/0x270
[   68.827635][ T6681]  pci_device_remove+0xb2/0x1d0
[   68.829201][ T6681]  ? __pfx_pci_device_remove+0x10/0x10
[   68.830916][ T6681]  device_remove+0xcb/0x180
[   68.832409][ T6681]  device_release_driver_internal+0x44e/0x620
[   68.834324][ T6681]  pci_stop_bus_device+0x120/0x160
[   68.836115][ T6681]  pci_stop_and_remove_bus_device+0x58/0xa0
[   68.837938][ T6681]  pci_stop_and_remove_bus_device_locked+0x1a/0x20
[   68.839890][ T6681]  remove_store+0x123/0x140
[   68.841346][ T6681]  ? __pfx_remove_store+0x10/0x10
[   68.842892][ T6681]  ? find_held_lock+0x2b/0x80
[   68.844469][ T6681]  ? sysfs_file_kobj+0xe4/0x290
[   68.846238][ T6681]  ? sysfs_file_kobj+0xe4/0x290
[   68.847800][ T6681]  ? __pfx_remove_store+0x10/0x10
[   68.849397][ T6681]  dev_attr_store+0x58/0x80
[   68.850827][ T6681]  ? __pfx_dev_attr_store+0x10/0x10
[   68.852502][ T6681]  sysfs_kf_write+0xf2/0x150
[   68.853957][ T6681]  kernfs_fop_write_iter+0x3e0/0x5f0
[   68.855654][ T6681]  ? __pfx_sysfs_kf_write+0x10/0x10
[   68.857616][ T6681]  vfs_write+0x6af/0x1050
[   68.859200][ T6681]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   68.861224][ T6681]  ? __pfx_vfs_write+0x10/0x10
[   68.862863][ T6681]  ? find_held_lock+0x2b/0x80
[   68.864363][ T6681]  ksys_write+0x12a/0x250
[   68.865831][ T6681]  ? __pfx_ksys_write+0x10/0x10
[   68.867606][ T6681]  __do_fast_syscall_32+0x13a/0x8b0
[   68.869400][ T6681]  ? lockdep_hardirqs_on+0x7d/0x110
[   68.871106][ T6681]  do_fast_syscall_32+0x32/0x70
[   68.872669][ T6681]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   68.874596][ T6681] RIP: 0023:0xf70befec
[   68.876132][ T6681] Code: Unable to access opcode bytes at 0xf70befc2.
[   68.878353][ T6681] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   68.880993][ T6681] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400
[   68.883449][ T6681] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[   68.885923][ T6681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   68.888395][ T6681] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   68.890822][ T6681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   68.893245][ T6681]  </TASK>
[   68.894902][ T6681] Kernel Offset: disabled
[   68.896314][ T6681] Rebooting in 86400 seconds..