last executing test programs:

4m51.375338528s ago: executing program 3 (id=362):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000980))
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x8000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000000a00)='./file0/../file0/file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0/file0\x00', 0x0, 0x2000)
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x300000, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x8c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'vcan0\x00', 0x0})
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001000000000008000740000000000400"], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x7c}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000100))
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="120110031760e40801203d7e46e801020301"], 0x0)
shutdown(r0, 0x1)

4m49.851215702s ago: executing program 3 (id=370):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76ed47967fe97751f13a23aeaacb0565c1c2251560ed1"}})

4m48.319929077s ago: executing program 3 (id=375):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x2, 0x1, 0x1, 0x0, 'syz0\x00', 0xfffffffd}, 0x3, 0x0, 0x3e, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

4m47.607886148s ago: executing program 3 (id=379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

4m45.933764235s ago: executing program 3 (id=390):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]})
getpriority(0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
mremap(&(0x7f00001c8000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil)
timer_getoverrun(0x0)

4m44.627678486s ago: executing program 3 (id=405):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0xd, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))

4m29.502408177s ago: executing program 32 (id=405):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0xd, 0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
setrlimit(0x9, &(0x7f0000000000))
io_setup(0x2004, &(0x7f0000000680))

3m55.964309093s ago: executing program 2 (id=528):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", ""]}, 0x14}}, 0x40000)

3m55.799197255s ago: executing program 2 (id=531):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073"], 0x548}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001400000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000"], 0x23c}}, 0x0)

3m55.664261038s ago: executing program 2 (id=533):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
alarm(0x0)

3m54.463951526s ago: executing program 2 (id=536):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250b0001000c000580"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x84040)

3m53.447535623s ago: executing program 2 (id=537):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x26)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))

3m52.047003735s ago: executing program 2 (id=541):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x48}}, 0x0)

3m36.932213286s ago: executing program 33 (id=541):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x48}}, 0x0)

3m3.704650717s ago: executing program 1 (id=629):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000980))
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r4, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x8000, 0x2, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000000a00)='./file0/../file0/file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0/file0\x00', 0x0, 0x2000)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x40, {0x6, 0x1, 0x8, 0x7e6d, 0x1, 0x5, {0x5, 0x3a54, 0x7, 0xb, 0x7, 0x81, 0x1, 0x55, 0x4, 0x2000, 0x1, r6, r7, 0x101, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x300000, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x8c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'vcan0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x5, [0x56e, 0xffffffffffffffff, 0x9, 0x5, 0x33e5]}})
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_OPEN(r9, &(0x7f0000000180)={0x20, 0x0, r5, {0x0, 0x5}}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xb4}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="120110031760e40801203d7e46e801020301090212000100001000090404f3007605"], 0x0)
shutdown(r0, 0x1)

2m56.144600667s ago: executing program 1 (id=643):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaabaaabbbbbbbbbbbb86dd606410a6001c000000000000000000000000ffff00000000fe8000000000000000000000000000aa04000000000000001ce302d74f6ae54b8ea6c756cdf9a157b64679a9"], 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x40090}, 0x800)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94)
r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x1, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540)=0xa00, &(0x7f0000000580)}, 0x20)

2m54.414684245s ago: executing program 1 (id=647):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
syz_open_dev$radio(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189378, 0x0)
copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x4)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})

2m50.894060082s ago: executing program 1 (id=651):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
alarm(0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
r5 = timerfd_create(0x7, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000640)={"7172105cfb60c7606ebb441ecae7bbb1", 0x0, 0x0, {0x3, 0x1}, {0x1, 0x7}, 0x0, [0x8e, 0x9, 0xffffffffffffffff, 0x100, 0x0, 0x7, 0xf, 0xb6d, 0x3, 0x54, 0x1, 0x4d39, 0xd, 0x7000, 0x0, 0x642d]})
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
close_range(r6, 0xffffffffffffffff, 0x0)

2m48.274852773s ago: executing program 1 (id=657):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000980))

2m47.166421601s ago: executing program 1 (id=659):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000cb320000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000a00), &(0x7f0000000ac0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001001a000900000001000000", @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)

2m31.424183742s ago: executing program 34 (id=659):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000cb320000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1}, &(0x7f0000000a00), &(0x7f0000000ac0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001001a000900000001000000", @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)

1m19.947258934s ago: executing program 5 (id=820):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
read(r1, &(0x7f0000000100)=""/140, 0xde)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @time})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x14, r3, 0x4196ccce67868bab}, 0x14}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0xfffe}, 'syz0\x00'})
syz_io_uring_setup(0x33b3, 0x0, 0x0, &(0x7f0000000000)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x43, 0x4000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x8, 0x0, 'queue1\x00', 0x1})
tkill(r0, 0x7)
execve(0x0, 0x0, 0x0)

1m17.270714496s ago: executing program 5 (id=829):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
epoll_create(0x9)
syz_open_dev$vcsa(0x0, 0x2, 0x101080)
socket$can_j1939(0x1d, 0x2, 0x7)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x3c, r5, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

1m15.15613191s ago: executing program 5 (id=831):
io_setup(0x10000, &(0x7f00000014c0))
io_setup(0x4, &(0x7f0000001740))
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote}, 0x1c)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x80000c, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1)
writev(r1, &(0x7f0000000780)=[{0x0}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xf, 0x3, 0x2})

1m10.015522132s ago: executing program 5 (id=848):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x26)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))

1m9.307963063s ago: executing program 5 (id=849):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
syz_open_dev$dmmidi(0x0, 0x2, 0x8901)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000010400000000000000fbff000000", @ANYRES32, @ANYBLOB="00000000020000001800128009000100"], 0x38}}, 0x0)

1m4.467586061s ago: executing program 5 (id=866):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, 0x0, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2)

48.81639864s ago: executing program 35 (id=866):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, 0x0, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2)

19.811270163s ago: executing program 4 (id=982):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$usbfs(0x0, 0x74, 0x101341)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x17263110)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)

18.583765283s ago: executing program 7 (id=986):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {0x0, 0x0, 0x20}, 0x0, 0x2, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
fanotify_mark(r1, 0xee7b37eb5895331c, 0x1019, r1, &(0x7f0000000180)='./file0\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0})
io_uring_enter(r5, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5)

18.370151007s ago: executing program 4 (id=987):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x26)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000000580)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)
bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))

16.635652694s ago: executing program 8 (id=989):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x5)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
open(0x0, 0x82440, 0xc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})

14.239514633s ago: executing program 7 (id=992):
ioperm(0x9, 0x6, 0x5)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000240)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)

14.083722625s ago: executing program 4 (id=993):
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)

13.321862197s ago: executing program 8 (id=994):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f0000000400000008000000010000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000180), 0x9, 0x180)
io_submit(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
ioperm(0x0, 0x9, 0x5)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r7, &(0x7f0000000040), 0x10)

13.12792502s ago: executing program 7 (id=995):
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000000180)='ufs\x00', 0x8000, 0x0)

12.699841687s ago: executing program 7 (id=996):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x0, 0x10fff9)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44010)
r1 = semget$private(0x0, 0x207, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f00000003c0))
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_pts(0xffffffffffffffff, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
setresuid(0x0, 0xee00, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r0, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})

9.549916048s ago: executing program 6 (id=1001):
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

9.435525109s ago: executing program 8 (id=1002):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {0x0, 0x0, 0x20}, 0x0, 0x2, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
fanotify_mark(r1, 0xee7b37eb5895331c, 0x1019, r1, &(0x7f0000000180)='./file0\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{0x0}], 0x1)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0})
io_uring_enter(r5, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5)

8.689506091s ago: executing program 0 (id=1003):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0)
r0 = epoll_create1(0x0)
ioctl$TIOCGPGRP(r0, 0x5450, &(0x7f0000000180)=<r1=>0x0)
wait4(r1, 0x0, 0x0, 0x0)

8.650518232s ago: executing program 6 (id=1004):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
creat(0x0, 0x64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setown(r0, 0x8, r1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vcsa(0x0, 0x1, 0x2a42)
r4 = syz_io_uring_setup(0x233, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x48, 0x4, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x40080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0xff)

8.428594876s ago: executing program 7 (id=1005):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
listen(r4, 0x5)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
open(0x0, 0x82440, 0xc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x15)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}})

7.607939619s ago: executing program 0 (id=1006):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21)
sendfile(r1, r0, 0x0, 0x40001)

7.448391911s ago: executing program 8 (id=1007):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f0000000400000008000000010000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_submit(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
ioperm(0x0, 0x9, 0x5)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r7, &(0x7f0000000040), 0x10)

7.086839037s ago: executing program 6 (id=1008):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
syz_open_dev$radio(&(0x7f0000002100), 0x1, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaabaaabbbbbbbbbbbb86dd606410a6001c000000000000000000000000ffff00000000fe8000000000000000000000000000aa04000000000000001ce302d74f6ae54b8ea6c756cdf9a157b64679a9"], 0x0)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r5=>0x0})
sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x40090}, 0x800)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94)
r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x1, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
sendto$packet(r4, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540)=0xa00, &(0x7f0000000580)}, 0x20)

6.689342793s ago: executing program 7 (id=1009):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'})
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2})
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0xfff6}], 0x2)

5.871501336s ago: executing program 8 (id=1010):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001f00)={0x14, &(0x7f0000001dc0)={0x0, 0x11, 0x5, {0x5, 0xf, "6cf52c"}}, 0x0}, 0x0)

5.245206796s ago: executing program 4 (id=1011):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x26)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)

4.500416648s ago: executing program 0 (id=1012):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f0000000400000008000000010000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x37)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_submit(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
ioperm(0x0, 0x9, 0x5)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x20000023896)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r7, &(0x7f0000000040), 0x10)

4.228073033s ago: executing program 6 (id=1013):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket(0x1d, 0x6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB])
unshare(0x40020000)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x204)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, &(0x7f00000015c0)=""/246, 0xf6}, 0x1}, {{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000001400)=[{&(0x7f0000001580)=""/27, 0x1b}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, &(0x7f0000001440)=""/129, 0x81}, 0x6}], 0x2, 0x40000361, 0x0)

3.199076899s ago: executing program 0 (id=1014):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.14360239s ago: executing program 0 (id=1015):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0xd8c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xdd, 0x1}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x5, 0x7, 0x4, 0x10, 0x81}, 0x139, &(0x7f0000000240)={0x5, 0xf, 0x139, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x82, 0x4}, @ptm_cap={0x3}, @generic={0x3, 0x10, 0xa}, @generic={0xb2, 0x10, 0xa, "c30052ac54af2da9771a9224f272b57af5a0d541a75091a669cf62525f348022868bf98a46aedf6280632f325c75957d6d19012e022724d348516e89f983e55111599f6a17a0d9c9c0b3d9ccd0803da45dbbe6bf0c94c25bbeecdd6ffe72fd05497e8722cd56066dc12512d7faba914b66f66b9188b31c3c194b9d8f5c3a7576f914429f914d5c64c9ba01ee23bb0a4e61dbd42ab50da84ed7120ce81e4ce36dbbb183c0e84f66f7d7e8b05bcc6968"}, @generic={0x72, 0x10, 0xa, "e9b0826ac1835a08f7711f0e47d824c11f8e0f4ff9f6cb873aa8475d5ba4d39273ab358803f237cdea5a629670ba0e8c12b53affae1c2a9f7e6df546c1d6a2e6a3c8174b63c062a0a1bc14b575360a649b955b3d110992d8d13327e26eac46ecb6004320959a1f632d3107befb751e"}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41d}}, {0x18, &(0x7f0000000480)=@string={0x18, 0x3, "ab5046becda57fe7687a5a2e83713f0b9a0e8e01831a"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2009}}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x1c, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x70, 0x4, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x32, {0x9, 0x21, 0xfff7, 0x1, 0x1, {0x22, 0x538}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x4}}}}}]}}]}}, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118)

2.041249237s ago: executing program 4 (id=1016):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.978922898s ago: executing program 6 (id=1017):
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x26)
syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21)
bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))

198.275547ms ago: executing program 6 (id=1018):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
creat(0x0, 0x64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$setown(r0, 0x8, r1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vcsa(0x0, 0x1, 0x2a42)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x48, 0x4, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x40080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0xff)

189.916247ms ago: executing program 4 (id=1019):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r0, 0x2, {0x1}}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x566e105bf7b091e4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
syz_emit_ethernet(0xae, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRESDEC=r2], 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
execve(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x10000, 0xb5, &(0x7f0000000140)=""/181, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48)
gettid()
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8)
write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8)
prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098c000/0x3000)=nil, 0x3000, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

139.964618ms ago: executing program 8 (id=1020):
r0 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x4dc)

0s ago: executing program 0 (id=1021):
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x40004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c00)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)

kernel console output (not intermixed with test programs):

d to keep mac addresses unique to avoid problems!
[   65.434039][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.444542][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.454599][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.465735][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.477465][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.516988][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.525285][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.535538][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.554430][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.565424][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.574625][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.583678][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.622581][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.631334][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.690778][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   65.703865][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.712889][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.739198][ T4174] device veth0_macvtap entered promiscuous mode
[   65.758348][ T4193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.772444][ T4193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.781269][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.783730][ T4232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.805453][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.812040][ T4232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.845807][ T4174] device veth1_macvtap entered promiscuous mode
[   65.868619][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   65.908241][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.928209][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.941022][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.952121][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.963106][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.973859][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.984218][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.995491][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.008454][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.029995][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.056607][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.074672][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.094074][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.163516][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.177965][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.184645][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.188023][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.199505][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.210349][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.224518][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.237364][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.250799][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.260891][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.271874][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.282235][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.293094][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.303243][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.314473][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.326121][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.355943][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.365594][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.385491][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.407963][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.428406][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.439850][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.452862][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.462852][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.477061][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.726223][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.736243][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.754440][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.789443][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.809768][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.422007][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.551952][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   67.558139][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   67.564457][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   67.570527][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   67.576894][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   67.967979][ T4272] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   67.975873][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.907130][ T4265] sched: RT throttling activated
[   69.609293][ T4269] loop3: detected capacity change from 0 to 2048
[   69.730300][ T4269] EXT4-fs (loop3): Ignoring removed orlov option
[   69.758147][ T4280] loop2: detected capacity change from 0 to 512
[   69.860262][ T4280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   69.923078][ T4280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.966451][ T4269] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,grpjquota=,,errors=continue. Quota mode: none.
[   70.002168][ T4280] EXT4-fs (loop2): 1 truncate cleaned up
[   70.163477][ T4280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.009048][   T26] audit: type=1326 audit(1743604190.495:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020880f169 code=0x7ffc0000
[   71.031082][    C0] vkms_vblank_simulate: vblank timer overrun
[   71.086229][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.093266][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.111832][   T26] audit: type=1326 audit(1743604190.605:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4279 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020880f169 code=0x7ffc0000
[   71.635282][ T4306] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in;
[   71.635282][ T4306]    program syz.2.15 not setting count and/or reply_len properly
[   72.473794][ T4312] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(53031917037495) <= P.seqno(0) <= S.SWH(53031917037569)) and (P.ackno exists or LAWL(229009230174166) <= P.ackno(229009230174167) <= S.AWH(229009230174167), sending SYNC...
[   72.714298][ T4319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   75.575169][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   75.584266][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #39a!!!
[   75.604843][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   76.032382][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   76.041851][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   76.051502][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   76.060510][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   76.339481][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   76.547534][ T4367] mmap: syz.1.32 (4367) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   77.079673][ T4374] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   77.091102][ T4374] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   77.146868][ T4377] netlink: 548 bytes leftover after parsing attributes in process `syz.1.36'.
[   77.268305][ T4377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.36'.
[   77.762505][ T4386] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[   77.802215][ T4386] ptrace attach of ""[4391] was attempted by "./syz-executor exec"[4386]
[   79.514366][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[   80.918937][ T4424] device syzkaller1 entered promiscuous mode
[   81.324850][ T1111] cfg80211: failed to load regulatory.db
[   82.571739][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   84.953832][ T4461] process 'syz.3.58' launched './file1' with NULL argv: empty string added
[   87.601757][ T4473] syz.3.67 (4473) used greatest stack depth: 19104 bytes left
[   89.315283][ T4496] syz.3.74 uses obsolete (PF_INET,SOCK_PACKET)
[   90.891710][ T4458] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   91.211965][ T4458] usb 5-1: Using ep0 maxpacket: 16
[   91.441740][ T4458] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[   91.450396][ T4458] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[   91.659382][ T4458] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[   91.668602][ T4458] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[   91.677969][ T4458] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[   91.687220][ T4458] usb 5-1: config 0 has no interface number 0
[   91.693668][ T4458] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[   94.126701][   T26] audit: type=1326 audit(1743604212.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   94.315413][ T4458] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[   94.331349][ T4458] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[   94.342582][ T4458] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   94.356745][   T26] audit: type=1326 audit(1743604212.665:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   94.380849][ T4458] usb 5-1: config 0 interface 125 has no altsetting 0
[   94.390755][ T4458] usb 5-1: config 0 interface 125 has no altsetting 2
[   94.439480][   T26] audit: type=1326 audit(1743604212.815:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   94.463338][ T4458] usb 5-1: string descriptor 0 read error: -71
[   94.469647][ T4458] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[   94.496716][ T4458] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.515678][   T26] audit: type=1326 audit(1743604212.815:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   94.541144][ T4458] usb 5-1: config 0 descriptor??
[   94.552584][   T26] audit: type=1326 audit(1743604212.815:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   94.684849][ T4458] usb 5-1: can't set config #0, error -71
[   94.729988][ T4458] usb 5-1: USB disconnect, device number 2
[   94.906037][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'.
[   95.031380][ T4556] netlink: 32 bytes leftover after parsing attributes in process `syz.4.91'.
[   95.096828][   T26] audit: type=1326 audit(1743604212.915:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   95.357139][   T26] audit: type=1326 audit(1743604212.915:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   95.374989][ T4556] device bond1 entered promiscuous mode
[   95.380853][   T26] audit: type=1326 audit(1743604213.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   95.416719][   T26] audit: type=1326 audit(1743604213.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   95.444656][   T26] audit: type=1326 audit(1743604213.245:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4534 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[   95.751945][ T4556] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.055274][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[   96.103805][ T4569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'.
[   96.168486][ T4569] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.177712][ T4569] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.186814][ T4569] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.195583][ T4569] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.629729][ T4573] NILFS (nullb0): couldn't find nilfs on the device
[   98.626119][ T4603] loop2: detected capacity change from 0 to 1024
[  101.175843][ T4181] Bluetooth: Unexpected continuation frame (len 12)
[  101.449334][ T4603] EXT4-fs (loop2): Test dummy encryption mode enabled
[  101.461693][ T4216] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  101.500581][ T4603] EXT4-fs (loop2): inline encryption not supported
[  101.909383][ T4603] EXT4-fs: failed to create workqueue
[  101.947912][ T4603] EXT4-fs (loop2): mount failed
[  102.031753][ T4216] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  102.082163][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.115376][ T4216] usb 1-1: Product: syz
[  102.123085][ T4216] usb 1-1: Manufacturer: syz
[  102.130784][ T4216] usb 1-1: SerialNumber: syz
[  102.182820][ T4216] usb 1-1: config 0 descriptor??
[  102.291888][ T4653] capability: warning: `syz.2.111' uses deprecated v2 capabilities in a way that may be insecure
[  102.373238][ T4216] ch341 1-1:0.0: ch341-uart converter detected
[  105.442816][ T4216] usb 1-1: failed to send control message: -110
[  105.449352][ T4216] ch341-uart: probe of ttyUSB0 failed with error -110
[  106.151410][ T4216] usb 1-1: USB disconnect, device number 2
[  106.170357][ T4216] ch341 1-1:0.0: device disconnected
[  106.671084][ T4695] loop2: detected capacity change from 0 to 1024
[  107.132368][ T4695] EXT4-fs (loop2): Test dummy encryption mode enabled
[  107.186061][ T4695] EXT4-fs (loop2): inline encryption not supported
[  107.227381][ T4695] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  107.571868][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  109.281858][ T1111] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.329940][ T1111] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  109.389171][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.453577][ T1111] usb 2-1: config 0 descriptor??
[  109.751810][ T4589] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  109.945651][ T1111] ath6kl: Failed to read usb control message: -32
[  109.952689][ T1111] ath6kl: Unable to read the bmi data from the device: -32
[  109.959994][ T1111] ath6kl: Unable to recv target info: -32
[  109.972760][ T1111] ath6kl: Failed to init ath6kl core: -32
[  109.993416][ T1111] ath6kl_usb: probe of 2-1:0.0 failed with error -32
[  110.001730][ T4589] usb 5-1: Using ep0 maxpacket: 32
[  110.323851][ T1111] usb 2-1: USB disconnect, device number 2
[  110.612765][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  110.651806][ T4589] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  110.678192][ T4589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.733576][ T4589] usb 5-1: config 0 descriptor??
[  110.814111][ T4589] gspca_main: sunplus-2.14.0 probing 041e:400b
[  110.861686][ T1108] usb 4-1: Using ep0 maxpacket: 8
[  110.945676][ T4780] capability: warning: `syz.2.137' uses 32-bit capabilities (legacy support in use)
[  111.012507][ T1108] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  111.746645][ T1108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  111.756674][ T4589] gspca_sunplus: reg_w_riv err -110
[  111.763188][ T4589] sunplus: probe of 5-1:0.0 failed with error -110
[  111.776223][ T1108] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  111.787132][ T1108] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.800454][ T1108] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  111.861556][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.871386][ T4787] loop0: detected capacity change from 0 to 1024
[  112.161878][ T1108] usb 4-1: GET_CAPABILITIES returned 0
[  112.167613][ T1108] usbtmc 4-1:16.0: can't read capabilities
[  112.370414][ T4787] EXT4-fs (loop0): Test dummy encryption mode enabled
[  112.406609][ T4751] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32
[  112.436933][ T4787] EXT4-fs (loop0): inline encryption not supported
[  112.463578][ T1108] usb 4-1: USB disconnect, device number 2
[  112.526658][ T4739] syz.4.132 (4739): drop_caches: 2
[  112.558707][ T4787] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  113.328164][ T4739] ODEBUG: Out of memory. ODEBUG disabled
[  113.431545][ T4458] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  113.546796][ T4739] syz.4.132 (4739): drop_caches: 2
[  114.111673][ T4458] usb 4-1: Using ep0 maxpacket: 8
[  114.119120][ T1108] usb 5-1: USB disconnect, device number 3
[  114.392643][ T4458] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=39.e6
[  114.418303][ T4458] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.448218][ T4458] usb 4-1: Product: syz
[  114.452520][ T4458] usb 4-1: Manufacturer: syz
[  114.457136][ T4458] usb 4-1: SerialNumber: syz
[  114.472799][ T4842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  114.903540][ T4458] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  114.937222][ T4458] dvb-usb: bulk message failed: -22 (4/0)
[  114.962814][ T4458] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  115.046189][ T4458] dvb-usb: bulk message failed: -22 (5/0)
[  115.076821][ T4458] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  115.132375][ T4458] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  115.183263][ T4458] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  115.268058][ T4458] usb 4-1: media controller created
[  115.423473][ T4458] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.529338][ T4458] usb 4-1: selecting invalid altsetting 3
[  115.535304][ T4458] ttusb2: set interface to alts=3 failed
[  115.606116][ T4854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'.
[  116.055609][ T4458] DVB: Unable to find symbol tda10086_attach()
[  116.069345][ T4458] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  116.121666][ T4458] dvb-usb: bulk message failed: -22 (4/0)
[  116.128367][ T4458] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  116.162194][ T4458] dvb-usb: bulk message failed: -22 (5/0)
[  116.179933][ T4458] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  116.227606][ T4458] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  116.277506][ T4458] usb 4-1: USB disconnect, device number 3
[  116.396573][ T4458] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  116.469792][ T4880] loop2: detected capacity change from 0 to 1024
[  116.556558][ T4880] EXT4-fs (loop2): Test dummy encryption mode enabled
[  116.570386][ T4880] EXT4-fs (loop2): inline encryption not supported
[  116.696021][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  117.112623][ T4889] batman_adv: Cannot find parent device
[  117.125184][ T4889] batman_adv: batadv0: Adding interface: gretap1
[  117.131721][ T4889] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.157205][ T4889] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  118.492302][ T4901] batman_adv: Cannot find parent device
[  118.504834][ T4901] batman_adv: batadv0: Adding interface: ip6gretap1
[  118.511649][ T4901] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.537554][ T4901] batman_adv: batadv0: Interface activated: ip6gretap1
[  120.328375][ T4913] binfmt_misc: Unknown parameter 'usrqxo��'
[  121.629618][ T1111] hid-generic 0005:10CF:5505.0001: item fetching failed at offset 0/2
[  121.658366][ T4937] snd_dummy snd_dummy.0: control 1:1:0:syz0:-3 is already present
[  121.661910][ T1111] hid-generic: probe of 0005:10CF:5505.0001 failed with error -22
[  123.071895][ T4957] loop3: detected capacity change from 0 to 1024
[  123.179361][ T4957] EXT4-fs (loop3): Test dummy encryption mode enabled
[  123.207279][ T4957] EXT4-fs (loop3): inline encryption not supported
[  123.271574][ T4214] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  123.362287][ T4957] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  123.811904][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.827903][ T4214] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  123.850469][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.917968][ T4214] usb 2-1: config 0 descriptor??
[  124.426580][ T4214] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  124.501518][ T4863] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  124.536521][ T4214] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  124.661761][ T4214] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected
[  124.710118][ T4214] usb 2-1: USB disconnect, device number 3
[  124.766419][ T4978] tmpfs: Unknown parameter 'usrquota'
[  124.793890][ T4214] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected
[  124.877484][ T4863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.063225][ T4863] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0128, bcdDevice=6e.c4
[  125.792328][ T4863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.800366][ T4863] usb 5-1: Product: syz
[  125.804657][ T4863] usb 5-1: Manufacturer: syz
[  125.809263][ T4863] usb 5-1: SerialNumber: syz
[  125.820045][ T4863] usb 5-1: config 0 descriptor??
[  125.862394][ T4863] kvaser_usb 5-1:0.0: Cannot get usb endpoint(s)
[  126.067903][ T4215] usb 5-1: USB disconnect, device number 4
[  126.251789][   T21] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  126.651761][   T21] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  126.660845][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.720212][   T21] usb 3-1: config 0 descriptor??
[  126.783463][   T21] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  128.031472][ T1111] Bluetooth: hci0: command 0x0c1a tx timeout
[  128.812204][ T4216] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  128.922767][ T4990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.933268][   T21] gp8psk: usb in 128 operation failed.
[  128.951601][   T21] gp8psk: usb in 137 operation failed.
[  128.971619][   T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  129.003000][   T21] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  129.213938][ T5030] loop0: detected capacity change from 0 to 1024
[  129.260330][ T5036] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.211'.
[  129.272283][ T5036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.211'.
[  129.294477][ T5030] EXT4-fs (loop0): Test dummy encryption mode enabled
[  129.301393][ T5030] EXT4-fs (loop0): inline encryption not supported
[  129.382964][ T5030] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  129.481686][ T4216] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  129.498335][ T4216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.571834][ T4216] usb 5-1: Product: syz
[  129.586455][ T4216] usb 5-1: Manufacturer: syz
[  129.607235][ T4216] usb 5-1: SerialNumber: syz
[  129.726835][   T21] usb 3-1: USB disconnect, device number 2
[  129.740211][ T4216] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  130.131571][ T4213] Bluetooth: hci0: command 0x0406 tx timeout
[  130.363585][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  130.363601][   T26] audit: type=1326 audit(1743604249.855:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5052 comm="syz.1.218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13da3b8169 code=0x0
[  130.696548][ T5055] sp0: Synchronizing with TNC
[  130.871969][ T4216] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  131.090324][ T4589] usb 5-1: USB disconnect, device number 5
[  132.072167][ T4213] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  132.122024][ T4216] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  132.137291][ T4216] ath9k_htc: Failed to initialize the device
[  132.157663][ T4589] usb 5-1: ath9k_htc: USB layer deinitialized
[  132.421568][ T4213] usb 4-1: Using ep0 maxpacket: 32
[  132.531782][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.538137][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.571811][ T4213] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  132.597773][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  132.659137][ T4213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  132.851794][ T4213] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  132.871184][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.881645][ T4213] usb 4-1: Product: syz
[  132.885922][ T4213] usb 4-1: Manufacturer: syz
[  132.913358][ T4213] usb 4-1: SerialNumber: syz
[  132.940830][ T4213] usb 4-1: config 0 descriptor??
[  133.220916][ T4213] usb 4-1: USB disconnect, device number 4
[  134.094420][ T5101] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  135.144639][ T5112] loop1: detected capacity change from 0 to 1024
[  135.253245][ T5112] EXT4-fs (loop1): Test dummy encryption mode enabled
[  135.268515][ T5112] EXT4-fs (loop1): inline encryption not supported
[  136.136310][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'.
[  136.155712][ T5112] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  138.883634][ T5152] loop2: detected capacity change from 0 to 1024
[  138.953447][ T5152] EXT4-fs (loop2): Test dummy encryption mode enabled
[  138.953548][ T5152] EXT4-fs (loop2): inline encryption not supported
[  139.025896][ T5152] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  139.309815][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.410355][ T5167] IPVS: length: 135 != 8
[  139.667343][ T5175] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12)
[  139.674278][ T5175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  139.697281][ T5180] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  139.729599][ T5175] vhci_hcd vhci_hcd.0: Device attached
[  139.733251][ T5180] ptrace attach of ""[5182] was attempted by "./syz-executor exec"[5180]
[  139.779119][ T5175] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14)
[  139.785767][ T5175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  139.804464][ T5175] vhci_hcd vhci_hcd.0: Device attached
[  139.821265][ T5175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.010835][ T4863] vhci_hcd: vhci_device speed not set
[  140.056326][ T5175] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21)
[  140.062968][ T5175] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  140.070619][ T5189] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18)
[  140.077236][ T5189] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  140.780304][ T4863] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  140.892169][ T5175] vhci_hcd vhci_hcd.0: Device attached
[  140.929587][ T5189] vhci_hcd vhci_hcd.0: Device attached
[  140.963187][ T5189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.991161][ T5175] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.000530][ T5197] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(24)
[  141.007157][ T5197] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  141.052107][ T5189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  141.061608][    T7] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  141.153412][ T5197] vhci_hcd vhci_hcd.0: Device attached
[  141.323623][ T5198] vhci_hcd: connection closed
[  141.326058][  T144] vhci_hcd: stop threads
[  141.343366][ T5193] vhci_hcd: connection closed
[  141.344942][ T5190] vhci_hcd: connection closed
[  141.350473][ T5184] vhci_hcd: connection closed
[  141.356185][ T5178] vhci_hcd: connection reset by peer
[  141.406837][  T144] vhci_hcd: release socket
[  141.450565][  T144] vhci_hcd: disconnect device
[  141.478536][  T144] vhci_hcd: stop threads
[  141.514216][    T7] usb 4-1: not running at top speed; connect to a high speed hub
[  141.563729][  T144] vhci_hcd: release socket
[  141.607755][  T144] vhci_hcd: disconnect device
[  141.621847][    T7] usb 4-1: config 1 interface 0 has no altsetting 0
[  141.661601][  T144] vhci_hcd: stop threads
[  141.680891][  T144] vhci_hcd: release socket
[  141.699685][  T144] vhci_hcd: disconnect device
[  141.728989][  T144] vhci_hcd: stop threads
[  141.756414][  T144] vhci_hcd: release socket
[  141.770993][  T144] vhci_hcd: disconnect device
[  141.799753][  T144] vhci_hcd: stop threads
[  141.812297][    T7] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40
[  141.825366][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.833841][    T7] usb 4-1: Product:  
[  141.838107][    T7] usb 4-1: Manufacturer: 傫빆ꗍ穨⹚熃ିບƎ᪃
[  141.841596][  T144] vhci_hcd: release socket
[  141.851562][    T7] usb 4-1: SerialNumber: syz
[  141.864087][  T144] vhci_hcd: disconnect device
[  142.108745][ T5191] udc-core: couldn't find an available UDC or it's busy
[  142.115756][ T5191] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.550202][ T5210] loop1: detected capacity change from 0 to 1024
[  142.737468][ T5210] EXT4-fs (loop1): Test dummy encryption mode enabled
[  142.755963][ T5210] EXT4-fs (loop1): inline encryption not supported
[  142.850155][ T5210] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  142.886034][ T5220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[  143.061506][ T4859] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  143.553273][    T7] usbhid 4-1:1.0: can't add hid device: -71
[  143.624478][    T7] usbhid: probe of 4-1:1.0 failed with error -71
[  144.292164][    T7] usb 4-1: USB disconnect, device number 5
[  144.391597][ T4859] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  144.400675][ T4859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.408882][ T4859] usb 5-1: Product: syz
[  144.413164][ T4859] usb 5-1: Manufacturer: syz
[  144.420654][ T4859] usb 5-1: SerialNumber: syz
[  144.435040][ T4859] usb 5-1: config 0 descriptor??
[  144.457122][   T26] audit: type=1326 audit(1743604263.945:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.0.275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f891ac1c169 code=0x0
[  144.490705][ T4859] gspca_main: sq905c-2.14.0 probing 2770:9052
[  144.948363][ T5246] device bridge0 entered promiscuous mode
[  144.960899][ T5246] device macvlan2 entered promiscuous mode
[  144.968599][ T5246] bridge0: port 3(macvlan2) entered blocking state
[  145.785858][ T5246] bridge0: port 3(macvlan2) entered disabled state
[  145.811620][ T4859] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  145.819077][ T4859] sq905c: probe of 5-1:0.0 failed with error -71
[  145.827173][ T4859] usb 5-1: USB disconnect, device number 6
[  145.961552][ T4863] vhci_hcd: vhci_device speed not set
[  145.975012][ T5246] device bridge0 left promiscuous mode
[  146.263383][ T5261] loop0: detected capacity change from 0 to 1024
[  146.365713][ T5261] EXT4-fs (loop0): Test dummy encryption mode enabled
[  146.376877][ T5261] EXT4-fs (loop0): inline encryption not supported
[  146.454541][ T5261] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  146.511708][ T4214] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  147.171581][ T4214] usb 3-1: Using ep0 maxpacket: 32
[  147.391776][ T4214] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  148.263498][ T4214] usb 3-1: config 0 has no interface number 0
[  148.397102][ T5288] Zero length message leads to an empty skb
[  148.438209][ T5284] fuse: Bad value for 'fd'
[  148.547156][ T4214] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  148.556571][ T4214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.591479][ T4214] usb 3-1: Product: syz
[  148.595692][ T4214] usb 3-1: Manufacturer: syz
[  148.622547][ T4214] usb 3-1: SerialNumber: syz
[  148.649266][ T4214] usb 3-1: config 0 descriptor??
[  148.700993][ T5304] loop3: detected capacity change from 0 to 1024
[  148.701773][ T5302] 9pnet: Insufficient options for proto=fd
[  148.709426][ T4214] smsc95xx v2.0.0
[  148.831596][ T5304] EXT4-fs (loop3): Test dummy encryption mode enabled
[  148.838484][ T5304] EXT4-fs (loop3): inline encryption not supported
[  148.989037][ T5304] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  150.291622][ T4214] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  150.308207][ T4214] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  150.675815][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  150.683606][ T4214] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  150.702520][ T4214] smsc95xx: probe of 3-1:0.67 failed with error -71
[  150.949429][ T4214] usb 3-1: USB disconnect, device number 3
[  151.111527][ T1111] usb 1-1: Using ep0 maxpacket: 32
[  152.011793][ T1111] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  152.020024][ T1111] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  152.049296][ T1111] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  152.078071][ T1111] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  152.138791][ T1111] usb 1-1: config 0 interface 0 has no altsetting 0
[  152.361959][ T1111] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  152.391408][ T1111] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  152.427165][ T1111] usb 1-1: Product: syz
[  152.438905][ T1111] usb 1-1: Manufacturer: syz
[  152.477407][ T1111] usb 1-1: SerialNumber: syz
[  152.532093][ T1111] usb 1-1: config 0 descriptor??
[  152.582816][ T1111] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  152.626615][ T1111] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  152.790064][ T1111] usb 1-1: USB disconnect, device number 3
[  152.816144][ T1111] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  152.841229][ T5340] netlink: 1 bytes leftover after parsing attributes in process `syz.1.308'.
[  153.216244][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[  154.584080][ T5356] loop1: detected capacity change from 0 to 1024
[  154.722072][ T5356] EXT4-fs (loop1): Test dummy encryption mode enabled
[  154.789852][ T5356] EXT4-fs (loop1): inline encryption not supported
[  155.378198][ T5356] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  156.921628][ T5371] sctp: failed to load transform for md5: -2
[  157.271584][ T4215] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  157.561626][ T4215] usb 4-1: Using ep0 maxpacket: 16
[  157.644636][ T4214] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  157.747383][ T4215] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  158.032415][ T4215] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.052562][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  158.064922][ T4215] usb 4-1: SerialNumber: syz
[  158.211683][ T4214] usb 5-1: Using ep0 maxpacket: 8
[  158.401368][ T1111] usb 4-1: USB disconnect, device number 6
[  158.501649][ T4214] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  158.591906][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.611487][ T4214] usb 5-1: Product: syz
[  158.621790][ T4214] usb 5-1: Manufacturer: syz
[  158.626543][ T4214] usb 5-1: SerialNumber: syz
[  158.655434][ T4214] usb 5-1: config 0 descriptor??
[  159.234085][ T5410] loop1: detected capacity change from 0 to 1024
[  159.261814][ T4214] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  159.285956][ T5410] EXT4-fs (loop1): Test dummy encryption mode enabled
[  159.310865][ T5410] EXT4-fs (loop1): inline encryption not supported
[  159.403869][ T5410] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  159.711530][ T4859] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  160.151756][ T4859] usb 3-1: unable to get BOS descriptor or descriptor too short
[  160.191713][ T4859] usb 3-1: not running at top speed; connect to a high speed hub
[  160.362380][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'.
[  160.392203][ T4859] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  160.413278][ T4859] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  160.482047][ T4859] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  160.530189][ T4859] usb 3-1: config 1 interface 0 has no altsetting 0
[  160.711751][ T4859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  160.781533][ T4859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.811030][ T4859] usb 3-1: Product: syz
[  160.836420][ T4859] usb 3-1: Manufacturer: syz
[  160.884877][ T4181] Bluetooth: hci4: link tx timeout
[  160.890480][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  160.907025][ T4859] usb 3-1: SerialNumber: syz
[  160.941827][ T5419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  160.948943][ T5419] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  161.128148][ T4181] Bluetooth: hci4: link tx timeout
[  161.133395][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.173104][ T4181] Bluetooth: hci4: link tx timeout
[  161.179088][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.211784][ T4213] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  161.240754][ T5389] syz.0.319 (5389): drop_caches: 3
[  161.594500][ T4181] Bluetooth: hci4: link tx timeout
[  161.600717][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.882742][ T4181] Bluetooth: hci4: link tx timeout
[  161.888745][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.361762][ T4214] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  162.382067][ T4214] usb 5-1: USB disconnect, device number 7
[  162.551749][ T4213] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  162.560718][ T4213] usb 4-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config
[  162.598609][ T4859] cdc_ether: probe of 3-1:1.0 failed with error -22
[  162.699378][ T5474] netlink: 'syz.4.338': attribute type 1 has an invalid length.
[  163.020021][ T4181] Bluetooth: hci4: link tx timeout
[  163.026198][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.043050][ T4458] Bluetooth: hci4: command 0x0406 tx timeout
[  163.303146][ T4213] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.312776][ T4859] usb 3-1: USB disconnect, device number 4
[  163.351540][ T4213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  163.373829][ T5477] loop2: detected capacity change from 0 to 1024
[  163.385969][ T4213] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2033, setting to 1024
[  163.398845][ T5480] IPVS: ip_vs_add_dest(): server weight less than zero
[  163.429292][ T5477] EXT4-fs (loop2): Test dummy encryption mode enabled
[  163.467720][ T5477] EXT4-fs (loop2): inline encryption not supported
[  163.645669][ T5477] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  163.651886][ T4213] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  163.696402][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  163.704751][ T4213] usb 4-1: Product: syz
[  163.708951][ T4213] usb 4-1: Manufacturer: syz
[  163.741824][ T5450] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  163.762643][ T4213] cdc_wdm 4-1:1.0: skipping garbage
[  163.767893][ T4213] cdc_wdm 4-1:1.0: skipping garbage
[  163.792858][ T4213] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  163.799729][ T4213] cdc_wdm 4-1:1.0: Unknown control protocol
[  164.013955][ T4181] Bluetooth: hci4: link tx timeout
[  164.019126][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.040658][ T4181] Bluetooth: hci4: link tx timeout
[  164.047386][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.078463][ T4213] usb 4-1: USB disconnect, device number 7
[  164.094987][ T5502] misc userio: Invalid payload size
[  164.301609][ T4181] Bluetooth: hci4: link tx timeout
[  164.306766][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  166.092464][ T5542] loop3: detected capacity change from 0 to 1024
[  166.451735][ T5542] EXT4-fs (loop3): Test dummy encryption mode enabled
[  166.693872][ T5542] EXT4-fs (loop3): inline encryption not supported
[  166.935570][ T5542] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  167.261644][ T1111] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  167.399233][ T4181] Bluetooth: hci4: link tx timeout
[  167.404669][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  167.551570][ T5557] fuse: Bad value for 'fd'
[  167.701630][ T1111] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  167.714345][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25137, setting to 1024
[  167.745078][ T1111] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  167.851763][ T1111] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  167.878699][ T1111] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  167.887281][ T1111] usb 2-1: Manufacturer: syz
[  167.902706][ T1111] usb 2-1: config 0 descriptor??
[  167.921593][ T4212] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.922161][ T5552] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  167.983459][ T1111] igorplugusb 2-1:0.0: endpoint incorrect
[  168.038771][ T4181] Bluetooth: hci4: link tx timeout
[  168.044059][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  168.184963][ T4863] usb 2-1: USB disconnect, device number 4
[  168.201561][ T4212] usb 4-1: Using ep0 maxpacket: 8
[  168.341632][ T4212] usb 4-1: unable to get BOS descriptor or descriptor too short
[  168.411718][ T4212] usb 4-1: unable to read config index 0 descriptor/start: -71
[  168.421606][ T4212] usb 4-1: can't read configurations, error -71
[  169.139875][ T4181] Bluetooth: hci4: link tx timeout
[  169.145091][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.773347][ T4181] Bluetooth: hci4: link tx timeout
[  170.778736][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.046525][ T4181] Bluetooth: hci4: link tx timeout
[  172.051722][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.288296][ T4181] Bluetooth: hci4: link tx timeout
[  172.293649][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  172.949538][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'.
[  173.367626][ T5663] batman_adv: Cannot find parent device
[  173.400741][   T26] audit: type=1326 audit(1743604292.885:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.430785][ T5663] batman_adv: batadv0: Adding interface: ip6gretap1
[  173.446514][   T26] audit: type=1326 audit(1743604292.895:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.450538][ T5663] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.496257][   T26] audit: type=1326 audit(1743604292.895:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.544617][   T26] audit: type=1326 audit(1743604292.895:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.563030][ T5663] batman_adv: batadv0: Interface activated: ip6gretap1
[  173.605531][   T26] audit: type=1326 audit(1743604292.895:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.710580][   T26] audit: type=1326 audit(1743604292.895:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.751504][   T26] audit: type=1326 audit(1743604293.235:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  173.773668][    C1] vkms_vblank_simulate: vblank timer overrun
[  173.997980][   T26] audit: type=1326 audit(1743604293.235:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9c28169 code=0x7ffc0000
[  174.461521][ T4181] Bluetooth: hci4: link tx timeout
[  174.466688][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  174.881891][ T4212] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  175.312028][ T4212] usb 3-1: config 0 interface 0 has no altsetting 0
[  175.918073][ T4212] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  175.931457][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.942718][ T4212] usb 3-1: config 0 descriptor??
[  176.568302][ T5716] batman_adv: Cannot find parent device
[  177.131645][ T1111] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  177.305770][ T4212] video4linux radio48: keene_cmd_main failed (-71)
[  177.319188][ T4212] radio-keene 3-1:0.0: V4L2 device registered as radio48
[  177.348587][ T4212] usb 3-1: USB disconnect, device number 5
[  177.411600][ T1111] usb 5-1: Using ep0 maxpacket: 16
[  177.457636][ T4181] Bluetooth: hci4: link tx timeout
[  177.462892][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.541940][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.577385][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.587706][   T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  177.631692][ T1111] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  177.640779][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.713608][ T1111] usb 5-1: config 0 descriptor??
[  177.861639][   T13] usb 1-1: Using ep0 maxpacket: 32
[  177.997515][   T13] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  178.011488][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.069647][   T13] usb 1-1: config 0 descriptor??
[  178.133958][   T13] gspca_main: sunplus-2.14.0 probing 041e:400b
[  178.183739][ T1111] appleir 0003:05AC:8241.0004: unknown main item tag 0x0
[  178.190840][ T1111] appleir 0003:05AC:8241.0004: unknown main item tag 0x0
[  178.259442][ T1111] appleir 0003:05AC:8241.0004: unknown main item tag 0x0
[  178.311573][ T1111] appleir 0003:05AC:8241.0004: unknown main item tag 0x0
[  178.318665][ T1111] appleir 0003:05AC:8241.0004: unknown main item tag 0x0
[  179.059372][ T1111] appleir 0003:05AC:8241.0004: No inputs registered, leaving
[  179.067214][   T13] gspca_sunplus: reg_w_riv err -110
[  179.073165][   T13] sunplus: probe of 1-1:0.0 failed with error -110
[  179.100191][ T5724] syz.0.413 (5724): drop_caches: 2
[  179.110942][ T5724] syz.0.413 (5724): drop_caches: 2
[  179.251615][   T13] usb 1-1: USB disconnect, device number 4
[  179.265331][ T1111] appleir 0003:05AC:8241.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  179.303592][ T1111] usb 5-1: USB disconnect, device number 8
[  180.186658][ T4181] Bluetooth: hci4: link tx timeout
[  180.191864][ T4181] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  182.524938][ T5790] netlink: 48 bytes leftover after parsing attributes in process `syz.4.428'.
[  186.640387][ T4859] Bluetooth: hci2: command 0x0406 tx timeout
[  186.646669][ T4859] Bluetooth: hci3: command 0x0406 tx timeout
[  186.653523][ T4859] Bluetooth: hci1: command 0x0406 tx timeout
[  190.151684][ T4458] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  192.835441][ T5848] batman_adv: Cannot find parent device
[  192.842216][ T5848] batman_adv: batadv0: Adding interface: gretap1
[  192.848578][ T5848] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.874110][ T5848] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  192.882797][ T4458] usb 5-1: unable to read config index 0 descriptor/all
[  193.583004][ T4458] usb 5-1: can't read configurations, error -71
[  194.108047][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.114424][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.105612][ T1111] Bluetooth: hci5: command 0x0409 tx timeout
[  195.122952][ T4180] Bluetooth: hci4: link tx timeout
[  195.128112][ T4180] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  195.398830][ T5854] chnl_net:caif_netlink_parms(): no params data found
[  195.450334][ T5886] loop4: detected capacity change from 0 to 1024
[  195.526284][ T5886] EXT4-fs (loop4): Test dummy encryption mode enabled
[  195.541908][ T5886] EXT4-fs (loop4): inline encryption not supported
[  195.608667][ T5886] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  195.634660][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.662590][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.669696][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.771087][ T4212] Bluetooth: hci5: command 0x041b tx timeout
[  198.790094][ T5854] device bridge_slave_0 entered promiscuous mode
[  198.952203][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.012351][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.278386][ T5854] device bridge_slave_1 entered promiscuous mode
[  200.899147][ T3987] Bluetooth: hci5: command 0x040f tx timeout
[  200.938847][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.071641][ T4458] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  201.187404][ T5912] device syzkaller1 entered promiscuous mode
[  201.214814][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.349419][ T5854] team0: Port device team_slave_0 added
[  201.407561][ T5854] team0: Port device team_slave_1 added
[  201.555917][ T4458] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  202.315164][ T4458] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  202.334360][ T4458] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  202.732434][ T4458] usb 2-1: string descriptor 0 read error: -71
[  202.796515][ T4458] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  202.883892][ T4458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  203.176365][ T3987] Bluetooth: hci5: command 0x0419 tx timeout
[  203.211709][ T4458] usb 2-1: can't set config #1, error -71
[  203.231681][ T4458] usb 2-1: USB disconnect, device number 5
[  203.768019][ T5946] loop4: detected capacity change from 0 to 1024
[  204.366655][ T5946] EXT4-fs (loop4): Test dummy encryption mode enabled
[  204.391763][ T5946] EXT4-fs (loop4): inline encryption not supported
[  204.474338][ T5946] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  204.638796][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.316257][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.721437][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  206.882824][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.889804][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.378329][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.472249][ T5854] device hsr_slave_0 entered promiscuous mode
[  208.507811][ T5854] device hsr_slave_1 entered promiscuous mode
[  208.523075][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.551304][ T5854] Cannot create hsr debugfs directory
[  210.925506][ T5854] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  210.973164][ T5854] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  211.014246][ T5854] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  211.062860][ T5854] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  211.469949][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.478287][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  212.487157][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  212.525961][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[  212.620363][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  212.644294][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  212.688189][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.695405][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.714803][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  212.767023][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  212.780946][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  212.808875][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.816049][ T6037] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.839249][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  213.016395][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  213.054468][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  213.079548][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.060936][  T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.423246][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  215.446837][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.464961][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.480040][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.507061][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  215.541600][ T4212] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  215.564004][  T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.778581][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  215.792271][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  215.817844][ T5854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  215.917807][  T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.081883][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.149106][  T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.402254][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.441352][ T4212] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  216.469368][ T4212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.500537][ T4212] usb 1-1: config 0 descriptor??
[  216.965444][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  216.996823][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  217.123801][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.492037][ T4212] usb 1-1: string descriptor 0 read error: -22
[  217.756294][ T4212] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input6
[  217.906406][ T4212] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input7
[  218.333138][ T4212] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  218.647789][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  218.668097][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  218.971757][ T4216] usb 1-1: reset high-speed USB device number 5 using dummy_hcd
[  219.388469][ T5854] device veth0_vlan entered promiscuous mode
[  219.413598][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.430333][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  219.455308][ T5854] device veth1_vlan entered promiscuous mode
[  219.511292][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  219.519952][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  219.540178][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  219.633590][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  219.668588][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.688072][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.713000][ T5854] device veth0_macvtap entered promiscuous mode
[  219.766880][ T5854] device veth1_macvtap entered promiscuous mode
[  219.815671][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.944630][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.007228][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.017869][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.028272][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.038796][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.049244][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.059759][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.069744][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.113621][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.320443][ T4458] usb 1-1: USB disconnect, device number 5
[  220.365930][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.622537][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  220.640765][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  220.704054][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.733978][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.768937][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.802936][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.848572][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.896198][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.928816][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.959489][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.003430][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.027589][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.045126][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.068106][ T5854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.077019][ T5854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.086180][ T5854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.129510][ T5854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.158106][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  221.181088][ T6017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  222.988507][ T6037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.031442][ T6037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.144400][  T155] device hsr_slave_0 left promiscuous mode
[  223.169862][  T155] device hsr_slave_1 left promiscuous mode
[  223.184816][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.203000][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.221226][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.252651][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.288420][  T155] device bridge_slave_1 left promiscuous mode
[  223.343016][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.373076][  T155] device bridge_slave_0 left promiscuous mode
[  223.379342][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.754316][  T155] device veth1_macvtap left promiscuous mode
[  223.950145][  T155] device veth0_macvtap left promiscuous mode
[  224.111597][  T155] device veth1_vlan left promiscuous mode
[  224.117648][  T155] device veth0_vlan left promiscuous mode
[  224.813317][  T155] team0 (unregistering): Port device team_slave_1 removed
[  224.852136][  T155] team0 (unregistering): Port device team_slave_0 removed
[  224.879969][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.920507][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.059156][  T155] bond0 (unregistering): Released all slaves
[  225.145464][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  225.200464][ T6037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.225582][ T6037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.281237][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.981527][    T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  233.015490][    T7] usb 2-1: device not accepting address 6, error -71
[  238.792744][ T6344] syz.5.558 (6344): drop_caches: 2
[  241.407606][ T4180] Bluetooth: hci4: link tx timeout
[  241.412996][ T4180] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  241.420924][ T4180] Bluetooth: hci4: link tx timeout
[  241.426109][ T4180] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  241.605429][   T21] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  242.022308][   T21] usb 1-1: not running at top speed; connect to a high speed hub
[  242.121906][   T21] usb 1-1: config 1 interface 0 has no altsetting 0
[  242.281833][   T21] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40
[  242.293127][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.306614][   T21] usb 1-1: Product:  
[  242.313353][   T21] usb 1-1: Manufacturer: 傫빆ꗍ穨⹚熃ିບƎ᪃
[  242.324848][   T21] usb 1-1: SerialNumber: syz
[  243.483979][ T4225] Bluetooth: hci4: command 0x0406 tx timeout
[  243.842076][   T21] usbhid 1-1:1.0: can't add hid device: -71
[  243.850007][   T21] usbhid: probe of 1-1:1.0 failed with error -71
[  244.035869][   T21] usb 1-1: USB disconnect, device number 6
[  245.143994][ T4225] Bluetooth: hci1: command 0x0409 tx timeout
[  246.489500][ T6425] chnl_net:caif_netlink_parms(): no params data found
[  247.171498][ T4225] Bluetooth: hci1: command 0x041b tx timeout
[  247.448267][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.738858][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.955213][ T6425] device bridge_slave_0 entered promiscuous mode
[  248.249033][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.366456][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.404202][ T6425] device bridge_slave_1 entered promiscuous mode
[  248.652166][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.710310][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.827939][ T6425] team0: Port device team_slave_0 added
[  248.836732][ T6425] team0: Port device team_slave_1 added
[  248.922547][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.954242][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.983269][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.997676][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.005747][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.040738][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.190235][ T6425] device hsr_slave_0 entered promiscuous mode
[  249.217122][ T6425] device hsr_slave_1 entered promiscuous mode
[  249.332275][ T1111] Bluetooth: hci1: command 0x040f tx timeout
[  249.383963][ T6425] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.428129][ T6425] Cannot create hsr debugfs directory
[  251.507343][ T4214] Bluetooth: hci1: command 0x0419 tx timeout
[  253.321678][ T1108] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  253.771650][ T1108] usb 6-1: not running at top speed; connect to a high speed hub
[  253.824071][ T6425] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  253.855829][ T6425] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  253.871642][ T1108] usb 6-1: config 1 interface 0 has no altsetting 0
[  253.891990][ T6425] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  253.934070][ T6425] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  254.041966][ T1108] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40
[  254.057489][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.084566][ T1108] usb 6-1: Product:  
[  254.097535][ T1108] usb 6-1: Manufacturer: 傫빆ꗍ穨⹚熃ିບƎ᪃
[  254.120661][ T1108] usb 6-1: SerialNumber: syz
[  254.185587][  T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.329806][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.349637][ T6425] 8021q: adding VLAN 0 to HW filter on device team0
[  254.381133][ T6536] udc-core: couldn't find an available UDC or it's busy
[  254.388191][ T6536] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  254.457828][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  254.467167][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  254.482765][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.492336][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.500987][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.508204][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.746832][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  255.759633][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  255.772467][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.779613][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.916354][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.922722][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.050836][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.060970][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.272131][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.707075][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.743761][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.762591][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.778946][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.791287][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.811983][ T1108] usbhid 6-1:1.0: can't add hid device: -71
[  256.818473][ T1108] usbhid: probe of 6-1:1.0 failed with error -71
[  256.858095][  T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.922468][ T1108] usb 6-1: USB disconnect, device number 2
[  256.938723][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  258.852995][ T6425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  259.192777][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  259.215339][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  259.250380][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  259.259052][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  259.457814][  T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.618962][  T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.518658][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.531860][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.606451][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.614104][  T155] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  262.008476][  T155] batman_adv: batadv0: Removing interface: ip6gretap1
[  267.327689][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  267.368739][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  267.630613][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  267.666775][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  267.736515][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  267.744460][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  267.758433][ T6425] device veth0_vlan entered promiscuous mode
[  267.996779][ T6425] device veth1_vlan entered promiscuous mode
[  268.543475][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  268.572207][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  268.797063][ T6425] device veth0_macvtap entered promiscuous mode
[  269.926393][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  269.942964][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  270.042842][ T6425] device veth1_macvtap entered promiscuous mode
[  270.094674][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  270.249080][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.290352][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.308225][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.430089][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.458791][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.489162][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.526774][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.556690][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.588799][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.724695][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.759461][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.797053][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.830329][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.863581][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.900596][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.920629][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.958880][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.989778][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.020903][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.048272][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  271.131751][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.152844][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.245809][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  271.277254][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  271.357989][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  271.366868][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  272.366901][ T6425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.386134][ T6425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.420080][ T6425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.771438][ T6425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.101151][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.155656][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.256988][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  276.473046][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.490894][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.953261][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  282.111966][  T155] device hsr_slave_0 left promiscuous mode
[  282.402839][  T155] device hsr_slave_1 left promiscuous mode
[  282.460463][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.480624][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.502684][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.536320][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.612194][  T155] device bridge_slave_1 left promiscuous mode
[  282.645627][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.676770][  T155] device bridge_slave_0 left promiscuous mode
[  282.689594][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.425508][  T155] device veth1_macvtap left promiscuous mode
[  283.435350][  T155] device veth0_macvtap left promiscuous mode
[  283.457059][  T155] device veth1_vlan left promiscuous mode
[  283.538725][ T6858] fuse: Bad value for 'fd'
[  283.569947][  T155] device veth0_vlan left promiscuous mode
[  287.435677][  T155] team0 (unregistering): Port device team_slave_1 removed
[  287.449984][  T155] team0 (unregistering): Port device team_slave_0 removed
[  287.463688][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.478253][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.539999][  T155] bond0 (unregistering): Released all slaves
[  290.881932][ T6912] fuse: Bad value for 'fd'
[  293.101830][ T4264] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  295.026539][ T4264] usb 7-1: not running at top speed; connect to a high speed hub
[  295.272695][ T4264] usb 7-1: config 1 interface 0 has no altsetting 0
[  296.009785][ T6936] udc-core: couldn't find an available UDC or it's busy
[  296.016801][ T6936] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  297.921679][ T6978] fuse: Bad value for 'fd'
[  298.820543][ T4264] usb 7-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40
[  298.835880][ T4264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.279160][ T4264] usb 7-1: Product:  
[  299.283992][ T4264] usb 7-1: Manufacturer: 傫빆ꗍ穨⹚熃ିບƎ᪃
[  299.385097][ T4264] usb 7-1: can't set config #1, error -71
[  299.591717][ T4264] usb 7-1: USB disconnect, device number 2
[  299.871612][ T4217] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  300.300065][ T7000] batman_adv: Cannot find parent device
[  300.452120][ T4217] usb 5-1: device not accepting address 11, error -71
[  307.622447][ T6759] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  308.041759][ T6759] usb 1-1: not running at top speed; connect to a high speed hub
[  308.181977][ T6759] usb 1-1: config 1 interface 0 has no altsetting 0
[  308.444055][ T4180] Bluetooth: hci4: link tx timeout
[  308.449325][ T4180] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  308.457523][ T4180] Bluetooth: hci4: link tx timeout
[  308.462698][ T4180] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  308.761569][ T6759] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40
[  308.770743][ T6759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.571703][ T6759] usb 1-1: Product:  
[  309.576195][ T6759] usb 1-1: Manufacturer: 傫빆ꗍ穨⹚熃ିບƎ᪃
[  310.081969][ T6759] usb 1-1: can't set config #1, error -71
[  310.202771][ T6759] usb 1-1: USB disconnect, device number 7
[  312.009909][ T4264] Bluetooth: hci3: command 0x0409 tx timeout
[  313.302337][ T4167] syz-executor (4167) used greatest stack depth: 18360 bytes left
[  314.395866][ T4264] Bluetooth: hci3: command 0x041b tx timeout
[  314.819104][ T7064] chnl_net:caif_netlink_parms(): no params data found
[  317.234833][ T4215] Bluetooth: hci3: command 0x040f tx timeout
[  317.413547][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.419869][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  318.742535][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.749619][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.788166][ T7064] device bridge_slave_0 entered promiscuous mode
[  320.482245][ T6610] Bluetooth: hci5: command 0x0406 tx timeout
[  320.488775][ T6610] Bluetooth: hci3: command 0x0419 tx timeout
[  320.541645][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.598156][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.643225][ T7064] device bridge_slave_1 entered promiscuous mode
[  321.682935][ T7064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.732489][ T7064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.954389][ T7064] team0: Port device team_slave_0 added
[  322.970479][ T7064] team0: Port device team_slave_1 added
[  323.153446][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.189884][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  324.314352][ T7064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  324.385547][ T7064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  324.416566][ T7064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.917682][ T7064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.459135][ T7064] device hsr_slave_0 entered promiscuous mode
[  327.644692][ T7064] device hsr_slave_1 entered promiscuous mode
[  327.863192][ T7064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.229888][ T7064] Cannot create hsr debugfs directory
[  331.530985][ T7064] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  331.827192][ T7064] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  332.044731][ T7064] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  332.112469][ T7271] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  332.154350][ T7064] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  334.273564][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.467052][ T7064] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.637203][ T7064] 8021q: adding VLAN 0 to HW filter on device team0
[  335.834722][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.857799][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.874169][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.888058][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.899496][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.906712][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.925888][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  335.941025][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  335.969637][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.976917][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.031078][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  336.072736][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  336.118663][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  336.150582][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  336.167373][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  336.177674][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  337.151190][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  339.759818][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  339.780847][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  339.803438][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  339.814625][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  339.856294][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  340.395508][ T7332] batman_adv: Cannot find parent device
[  340.468792][ T7064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  340.828136][ T7064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.009706][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  342.022307][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  342.321312][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.802725][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  344.810250][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  344.909435][ T7064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.076345][ T7419] batman_adv: Cannot find parent device
[  347.739047][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  347.782347][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  348.258786][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  348.305325][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  348.357045][ T7064] device veth0_vlan entered promiscuous mode
[  348.584351][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  348.596293][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  349.133099][ T7064] device veth1_vlan entered promiscuous mode
[  349.779295][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  349.819357][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  349.876572][ T7064] device veth0_macvtap entered promiscuous mode
[  349.963965][ T7064] device veth1_macvtap entered promiscuous mode
[  350.122179][ T7452] netlink: 420 bytes leftover after parsing attributes in process `syz.6.758'.
[  350.136333][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  350.163328][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  350.174521][ T7452] netlink: 32 bytes leftover after parsing attributes in process `syz.6.758'.
[  350.284131][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.338989][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.389433][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.405832][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.980546][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.327616][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  353.481460][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  353.732346][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.032255][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.050340][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.069650][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.094030][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.130097][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.159189][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.202384][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.236756][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.267685][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.301004][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.338600][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.367219][ T7064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.377857][ T7064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.390672][ T7064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.516402][ T7064] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.540838][ T7064] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.556312][ T7064] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.578279][ T7064] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.606181][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  354.615684][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  354.633062][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  354.642619][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  359.203651][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.220671][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.260496][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  359.412386][ T6029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.467758][ T7537] ieee802154 phy0 wpan0: encryption failed: -22
[  359.536427][ T6029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.579033][ T7541] vivid-001: disconnect
[  359.593905][  T155] batman_adv: batadv0: Removing interface: gretap1
[  359.613467][ T7540] vivid-001: reconnect
[  359.714093][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  363.847187][ T7592] cgroup: Unknown subsys name 'favordynmods'
[  366.546225][  T155] device hsr_slave_0 left promiscuous mode
[  366.725435][  T155] device hsr_slave_1 left promiscuous mode
[  366.866368][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  367.335658][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  367.487900][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  367.517935][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  368.882038][  T155] device bridge_slave_1 left promiscuous mode
[  368.891497][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.909179][  T155] device bridge_slave_0 left promiscuous mode
[  368.926015][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.951562][ T3987] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  369.367543][  T155] device veth1_macvtap left promiscuous mode
[  369.390880][  T155] device veth0_macvtap left promiscuous mode
[  369.552364][  T155] device veth1_vlan left promiscuous mode
[  369.571917][  T155] device veth0_vlan left promiscuous mode
[  369.731708][ T3987] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  369.758056][ T3987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.787577][ T3987] usb 1-1: config 0 descriptor??
[  369.862445][ T3987] cp210x 1-1:0.0: cp210x converter detected
[  370.153277][  T155] team0 (unregistering): Port device team_slave_1 removed
[  370.172808][  T155] team0 (unregistering): Port device team_slave_0 removed
[  370.189347][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  370.214153][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  370.306078][ T3987] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  370.320111][  T155] bond0 (unregistering): Released all slaves
[  370.351641][ T3987] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: 0
[  370.359233][ T3987] cp210x 1-1:0.0: GPIO initialisation failed: -5
[  370.373524][ T3987] usb 1-1: cp210x converter now attached to ttyUSB0
[  370.572107][ T3987] usb 1-1: USB disconnect, device number 8
[  371.464553][ T4215] Bluetooth: hci1: command 0x0406 tx timeout
[  371.471283][ T3987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  371.479762][ T3987] cp210x 1-1:0.0: device disconnected
[  374.500020][ T3987] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  374.811633][ T3987] usb 1-1: Using ep0 maxpacket: 8
[  374.931720][ T3987] usb 1-1: unable to get BOS descriptor or descriptor too short
[  374.981543][ T6610] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  375.401653][ T3987] usb 1-1: unable to read config index 0 descriptor/start: -71
[  375.419595][ T3987] usb 1-1: can't read configurations, error -71
[  375.566282][ T4180] Bluetooth: hci4: link tx timeout
[  375.571487][ T4180] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  375.579197][ T4180] Bluetooth: hci4: link tx timeout
[  375.584415][ T4180] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  375.592140][ T6610] usb 5-1: Using ep0 maxpacket: 32
[  377.691548][ T6610] usb 5-1: unable to get BOS descriptor or descriptor too short
[  377.751474][ T6610] usb 5-1: unable to read config index 0 descriptor/start: -71
[  377.770938][ T6610] usb 5-1: can't read configurations, error -71
[  378.727424][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.743745][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.308957][ T7758] 9pnet: Insufficient options for proto=fd
[  379.364939][ T7771] input: syz0 as /devices/virtual/input/input10
[  381.001656][ T4216] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  383.841512][ T4216] usb 7-1: unable to read config index 0 descriptor/start: -71
[  383.841548][ T4216] usb 7-1: can't read configurations, error -71
[  385.528168][ T7842] netlink: 64 bytes leftover after parsing attributes in process `syz.7.837'.
[  385.559657][ T7842] usb usb1: usbfs: process 7842 (syz.7.837) did not claim interface 0 before use
[  386.308958][ T7847] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  386.315620][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  386.338999][ T7847] vhci_hcd vhci_hcd.0: Device attached
[  386.400304][ T7852] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14)
[  386.407057][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  386.963384][ T7847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  387.039586][ T7859] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22)
[  387.046237][ T7859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  387.130994][ T7847] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19)
[  387.137675][ T7847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  387.164668][ T7859] vhci_hcd vhci_hcd.0: Device attached
[  387.171601][ T7852] vhci_hcd vhci_hcd.0: Device attached
[  387.389200][ T7847] vhci_hcd vhci_hcd.0: Device attached
[  388.039815][ T6610] vhci_hcd: vhci_device speed not set
[  388.111474][ T6610] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[  388.314523][ T7862] vhci_hcd: connection closed
[  388.315009][ T6029] vhci_hcd: stop threads
[  388.544104][ T7853] vhci_hcd: connection closed
[  388.544285][ T7850] vhci_hcd: connection reset by peer
[  388.554546][ T7861] vhci_hcd: connection closed
[  388.585494][ T6029] vhci_hcd: release socket
[  388.670154][ T6029] vhci_hcd: disconnect device
[  388.709172][ T6029] vhci_hcd: stop threads
[  389.308799][ T6029] vhci_hcd: release socket
[  389.440623][ T6029] vhci_hcd: disconnect device
[  389.493908][ T6029] vhci_hcd: stop threads
[  389.674055][ T6029] vhci_hcd: release socket
[  389.687414][ T6029] vhci_hcd: disconnect device
[  390.024558][ T6029] vhci_hcd: stop threads
[  390.609742][ T7906] netlink: 'syz.7.851': attribute type 1 has an invalid length.
[  390.880325][ T6029] vhci_hcd: release socket
[  391.386881][ T6029] vhci_hcd: disconnect device
[  395.614819][ T6610] vhci_hcd: vhci_device speed not set
[  396.695060][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.865'.
[  398.570983][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.873'.
[  402.603399][ T4264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  408.461103][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'.
[  410.354284][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  411.028518][ T7955] syz.5.866 (7955): drop_caches: 3
[  411.341780][   T21] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  411.359646][ T8057] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.410572][ T8057] bond0: (slave rose0): Enslaving as an active interface with an up link
[  411.499577][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  411.602907][   T21] usb 7-1: Using ep0 maxpacket: 16
[  411.712041][  T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.771903][   T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  411.972578][  T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.753004][ T3987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  413.018710][ T3987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  413.054717][   T21] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  413.064052][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.066718][  T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.082904][   T21] usb 7-1: Product: syz
[  413.087500][   T21] usb 7-1: Manufacturer: syz
[  413.092598][   T21] usb 7-1: SerialNumber: syz
[  413.118775][   T21] usb 7-1: config 0 descriptor??
[  413.773063][ T8061] chnl_net:caif_netlink_parms(): no params data found
[  413.932779][    T7] Bluetooth: hci2: command 0x0409 tx timeout
[  414.439466][  T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.587560][   T21] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  414.600987][   T21] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  414.751510][   T21] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  414.981718][   T21] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  415.103078][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.122735][   T21] em28xx 7-1:0.0: board has no eeprom
[  415.133629][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.142020][ T8061] device bridge_slave_0 entered promiscuous mode
[  415.150762][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.158130][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.385305][ T8061] device bridge_slave_1 entered promiscuous mode
[  415.524605][   T21] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  415.532712][   T21] em28xx 7-1:0.0: dvb set to bulk mode.
[  415.649752][   T21] usb 7-1: USB disconnect, device number 5
[  415.792039][   T21] em28xx 7-1:0.0: Disconnecting em28xx
[  415.858050][ T4216] em28xx 7-1:0.0: Binding DVB extension
[  415.965992][ T8141] 9pnet: Could not find request transport: fd0x0000000000000004
[  416.124027][ T4216] em28xx 7-1:0.0: Registering input extension
[  416.131071][   T21] em28xx 7-1:0.0: Closing input extension
[  416.188212][   T21] em28xx 7-1:0.0: Freeing device
[  416.199553][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.324021][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.608690][   T21] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  416.617992][ T6609] Bluetooth: hci2: command 0x041b tx timeout
[  417.072031][   T21] usb 7-1: Using ep0 maxpacket: 8
[  417.453958][ T8061] team0: Port device team_slave_0 added
[  417.500769][ T8061] team0: Port device team_slave_1 added
[  417.571642][   T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.782012][   T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e
[  417.820252][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.830242][   T21] usb 7-1: Product: syz
[  417.850704][   T21] usb 7-1: Manufacturer: syz
[  417.971567][   T21] usb 7-1: SerialNumber: syz
[  418.008357][   T21] usb 7-1: config 0 descriptor??
[  418.293194][   T21] usbtest 7-1:0.0: couldn't get endpoints, -22
[  418.309742][   T21] usbtest: probe of 7-1:0.0 failed with error -22
[  418.318315][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.333258][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.410654][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.462256][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.489603][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  418.541213][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.641713][    T7] usb 7-1: USB disconnect, device number 6
[  418.681686][ T4264] Bluetooth: hci2: command 0x040f tx timeout
[  418.954315][ T8061] device hsr_slave_0 entered promiscuous mode
[  419.027684][ T8202] =======================================================
[  419.027684][ T8202] WARNING: The mand mount option has been deprecated and
[  419.027684][ T8202]          and is ignored by this kernel. Remove the mand
[  419.027684][ T8202]          option from the mount to silence this warning.
[  419.027684][ T8202] =======================================================
[  419.334599][ T8061] device hsr_slave_1 entered promiscuous mode
[  419.382380][ T8202] lo speed is unknown, defaulting to 1000
[  419.392372][ T8202] lo speed is unknown, defaulting to 1000
[  419.400952][ T8202] lo speed is unknown, defaulting to 1000
[  419.497741][ T8202] infiniband s
z1: set active
[  419.502921][ T8202] infiniband s
z1: added lo
[  419.517680][ T8202] infiniband s
z1: Couldn't open port 1
[  419.545912][ T7394] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  419.562780][ T8202] RDS/IB: s
z1: added
[  419.567619][ T8202] smc: adding ib device s
z1 with port count 1
[  419.574082][ T8202] smc:    ib device s
z1 port 1 has pnetid 
[  419.873683][   T21] lo speed is unknown, defaulting to 1000
[  419.902876][ T7388] lo speed is unknown, defaulting to 1000
[  419.911717][ T8202] lo speed is unknown, defaulting to 1000
[  420.001501][ T7394] usb 1-1: Using ep0 maxpacket: 16
[  420.646515][ T8213] batman_adv: Cannot find parent device
[  420.761806][ T6609] Bluetooth: hci2: command 0x0419 tx timeout
[  420.777546][ T8202] lo speed is unknown, defaulting to 1000
[  420.881248][ T7394] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  420.889729][ T7394] usb 1-1: config 0 has no interface number 0
[  420.895984][ T7394] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  420.907635][ T7394] usb 1-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0xDA, skipping
[  420.972388][ T8202] lo speed is unknown, defaulting to 1000
[  421.178170][ T8202] lo speed is unknown, defaulting to 1000
[  421.592350][ T7394] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  421.759827][ T8202] lo speed is unknown, defaulting to 1000
[  421.891054][ T8202] lo speed is unknown, defaulting to 1000
[  421.995476][ T7394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.004280][ T7394] usb 1-1: Product: syz
[  422.014699][ T7394] usb 1-1: Manufacturer: syz
[  422.020152][ T7394] usb 1-1: SerialNumber: syz
[  422.242993][ T7394] usb 1-1: config 0 descriptor??
[  422.272558][ T7394] usb 1-1: can't set config #0, error -71
[  422.288858][ T7394] usb 1-1: USB disconnect, device number 11
[  422.456893][ T8202] lo speed is unknown, defaulting to 1000
[  422.552458][ T8061] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  422.602478][ T8061] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  422.712379][ T8061] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  423.573834][ T8061] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  423.895430][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0
[  423.959901][ T8061] 8021q: adding VLAN 0 to HW filter on device team0
[  423.985212][ T8249] fuse: Bad value for 'fd'
[  424.006239][  T155] device hsr_slave_0 left promiscuous mode
[  424.091067][  T155] device hsr_slave_1 left promiscuous mode
[  424.108655][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.130915][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.196784][ T8256] fuse: Bad value for 'fd'
[  424.586001][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.602368][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.651974][  T155] device bridge_slave_1 left promiscuous mode
[  424.658254][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.718002][  T155] device bridge_slave_0 left promiscuous mode
[  424.726962][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.790059][  T155] device veth1_macvtap left promiscuous mode
[  424.831406][  T155] device veth0_macvtap left promiscuous mode
[  424.847900][  T155] device veth1_vlan left promiscuous mode
[  424.868223][  T155] device veth0_vlan left promiscuous mode
[  425.331527][ T6609] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  426.401401][ T6609] usb 7-1: Using ep0 maxpacket: 16
[  426.643115][  T155] team0 (unregistering): Port device team_slave_1 removed
[  426.680057][ T8272] usb usb8: usbfs: process 8272 (syz.4.948) did not claim interface 0 before use
[  426.805931][ T6609] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  426.865361][  T155] team0 (unregistering): Port device team_slave_0 removed
[  426.908293][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  426.941425][ T6609] usb 7-1: string descriptor 0 read error: -71
[  426.947651][ T6609] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  426.976124][ T6609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  427.019860][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.028699][ T6609] usb 7-1: can't set config #1, error -71
[  427.064017][ T6609] usb 7-1: USB disconnect, device number 7
[  427.327733][  T155] bond0 (unregistering): Released all slaves
[  427.371623][ T4264] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  427.414063][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  427.424989][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  427.444266][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  427.463759][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  427.480418][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.487660][ T6037] bridge0: port 1(bridge_slave_0) entered forwarding state
[  427.513506][ T6037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  427.548492][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  427.579203][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  427.631952][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.639054][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  427.689193][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  427.762432][ T4264] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  427.770839][ T4264] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.862413][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  427.875265][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  427.884958][ T4264] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  427.941095][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  427.964975][ T8292] fuse: Bad value for 'fd'
[  428.473096][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  428.511790][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  428.541926][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  428.572925][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  428.611404][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  428.640919][ T4264] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  428.649034][ T4264] usb 1-1: Manufacturer: syz
[  428.651558][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  428.664355][ T4264] usb 1-1: config 0 descriptor??
[  428.702292][ T6036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  428.742035][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  428.801421][ T4264] rc_core: IR keymap rc-hauppauge not found
[  428.807689][ T4264] Registered IR keymap rc-empty
[  428.866979][ T4264] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  428.918063][ T4264] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12
[  429.281419][    C0] igorplugusb 1-1:0.0: receive overflow, at least 28 lost
[  429.295365][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  429.310208][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  429.386532][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  429.509609][ T4264] usb 1-1: USB disconnect, device number 12
[  430.340656][ T8314] lo speed is unknown, defaulting to 1000
[  431.798492][ T4264] Bluetooth: hci3: command 0x0406 tx timeout
[  431.864407][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  431.904739][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  432.043355][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  432.066224][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  432.086908][ T8061] device veth0_vlan entered promiscuous mode
[  432.110876][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  432.124176][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  432.157909][ T8061] device veth1_vlan entered promiscuous mode
[  432.220037][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  432.239344][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  432.258872][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  432.286889][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  432.322915][ T8061] device veth0_macvtap entered promiscuous mode
[  432.379396][ T8061] device veth1_macvtap entered promiscuous mode
[  432.415291][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.467402][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.507852][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.542810][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.554159][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.571457][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.583793][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.601218][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.613580][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.625076][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  432.638258][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  432.687711][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  432.711119][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  432.756607][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.805506][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.029746][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.060580][ T8353] fuse: Bad value for 'fd'
[  433.658036][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.684367][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.747336][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.770019][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  433.787045][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  433.817238][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  433.843388][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  433.881889][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  433.924535][ T8061] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  433.965167][ T8061] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.838617][ T8061] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.899473][ T8061] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.106139][ T8376] lo speed is unknown, defaulting to 1000
[  436.482672][ T8385] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[  436.553402][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.598178][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.685863][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  436.725643][ T4232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  436.765698][ T4232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  436.811524][ T6014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  439.101389][ T7394] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  439.994684][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.001028][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  440.513293][ T8432] lo speed is unknown, defaulting to 1000
[  442.041634][ T7394] usb 9-1: device descriptor read/all, error -71
[  445.383987][ T8458] rdma_rxe: already configured on lo
[  449.402223][ T8494] lo speed is unknown, defaulting to 1000
[  454.031404][ T4218] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  454.431647][ T4218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.489476][ T4218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.931513][ T4218] usb 9-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00
[  455.069810][ T4218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.270200][ T4218] usb 9-1: config 0 descriptor??
[  455.396710][ T8554] lo speed is unknown, defaulting to 1000
[  456.538162][ T4218] saitek 0003:0738:1705.0006: item fetching failed at offset 3/5
[  456.554902][ T4218] saitek 0003:0738:1705.0006: parse failed
[  456.562054][ T4218] saitek: probe of 0003:0738:1705.0006 failed with error -22
[  456.583487][ T4218] usb 9-1: USB disconnect, device number 4
[  456.725008][ T7389] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  457.581616][ T8573] tmpfs: Unknown parameter 'usrquota'
[  458.691587][ T7389] usb 1-1: device descriptor read/all, error -71
[  458.967747][ T8584] 
[  458.970118][ T8584] ======================================================
[  458.977136][ T8584] WARNING: possible circular locking dependency detected
[  458.984172][ T8584] 5.15.179-syzkaller #0 Not tainted
[  458.989371][ T8584] ------------------------------------------------------
[  458.996387][ T8584] syz.4.1019/8584 is trying to acquire lock:
[  459.002364][ T8584] ffff888029af8c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0
[  459.013450][ T8584] 
[  459.013450][ T8584] but task is already holding lock:
[  459.020812][ T8584] ffffffff8ded1648 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  459.030505][ T8584] 
[  459.030505][ T8584] which lock already depends on the new lock.
[  459.030505][ T8584] 
[  459.040905][ T8584] 
[  459.040905][ T8584] the existing dependency chain (in reverse order) is:
[  459.049917][ T8584] 
[  459.049917][ T8584] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  459.057923][ T8584]        lock_acquire+0x1db/0x4f0
[  459.062959][ T8584]        __mutex_lock_common+0x1da/0x25a0
[  459.068688][ T8584]        mutex_lock_nested+0x17/0x20
[  459.073979][ T8584]        rfkill_register+0x30/0x880
[  459.079180][ T8584]        hci_register_dev+0x4dd/0xa50
[  459.084553][ T8584]        vhci_create_device+0x310/0x590
[  459.090114][ T8584]        vhci_write+0x382/0x430
[  459.094996][ T8584]        vfs_write+0xacd/0xe50
[  459.099766][ T8584]        ksys_write+0x1a2/0x2c0
[  459.104622][ T8584]        do_syscall_64+0x3b/0xb0
[  459.109563][ T8584]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  459.115980][ T8584] 
[  459.115980][ T8584] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  459.123808][ T8584]        lock_acquire+0x1db/0x4f0
[  459.128839][ T8584]        __mutex_lock_common+0x1da/0x25a0
[  459.134562][ T8584]        mutex_lock_nested+0x17/0x20
[  459.139855][ T8584]        vhci_send_frame+0x8a/0xf0
[  459.144976][ T8584]        hci_send_frame+0x1af/0x2f0
[  459.150183][ T8584]        hci_tx_work+0xb2e/0x1a30
[  459.155209][ T8584]        process_one_work+0x8a1/0x10c0
[  459.160681][ T8584]        worker_thread+0xaca/0x1280
[  459.165883][ T8584]        kthread+0x3f6/0x4f0
[  459.170479][ T8584]        ret_from_fork+0x1f/0x30
[  459.175421][ T8584] 
[  459.175421][ T8584] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  459.184637][ T8584]        lock_acquire+0x1db/0x4f0
[  459.189657][ T8584]        __flush_work+0xeb/0x1a0
[  459.194583][ T8584]        hci_dev_do_close+0x20a/0x1070
[  459.200033][ T8584]        process_one_work+0x8a1/0x10c0
[  459.205522][ T8584]        worker_thread+0xaca/0x1280
[  459.210708][ T8584]        kthread+0x3f6/0x4f0
[  459.215286][ T8584]        ret_from_fork+0x1f/0x30
[  459.220216][ T8584] 
[  459.220216][ T8584] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  459.227853][ T8584]        lock_acquire+0x1db/0x4f0
[  459.232890][ T8584]        __mutex_lock_common+0x1da/0x25a0
[  459.238603][ T8584]        mutex_lock_nested+0x17/0x20
[  459.243874][ T8584]        bg_scan_update+0xa1/0x4a0
[  459.248971][ T8584]        process_one_work+0x8a1/0x10c0
[  459.254415][ T8584]        worker_thread+0xaca/0x1280
[  459.259601][ T8584]        kthread+0x3f6/0x4f0
[  459.264175][ T8584]        ret_from_fork+0x1f/0x30
[  459.269118][ T8584] 
[  459.269118][ T8584] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  459.278929][ T8584]        validate_chain+0x1649/0x5930
[  459.284288][ T8584]        __lock_acquire+0x1295/0x1ff0
[  459.289643][ T8584]        lock_acquire+0x1db/0x4f0
[  459.294668][ T8584]        __flush_work+0xeb/0x1a0
[  459.299588][ T8584]        __cancel_work_timer+0x519/0x6a0
[  459.305205][ T8584]        hci_request_cancel_all+0xcb/0x300
[  459.310996][ T8584]        hci_dev_do_close+0x51/0x1070
[  459.316354][ T8584]        hci_rfkill_set_block+0x114/0x1a0
[  459.322066][ T8584]        rfkill_set_block+0x1e7/0x430
[  459.327425][ T8584]        rfkill_fop_write+0x5b7/0x790
[  459.332783][ T8584]        vfs_write+0x30c/0xe50
[  459.337538][ T8584]        ksys_write+0x1a2/0x2c0
[  459.342375][ T8584]        do_syscall_64+0x3b/0xb0
[  459.347298][ T8584]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  459.353705][ T8584] 
[  459.353705][ T8584] other info that might help us debug this:
[  459.353705][ T8584] 
[  459.363933][ T8584] Chain exists of:
[  459.363933][ T8584]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  459.363933][ T8584] 
[  459.379749][ T8584]  Possible unsafe locking scenario:
[  459.379749][ T8584] 
[  459.387202][ T8584]        CPU0                    CPU1
[  459.392557][ T8584]        ----                    ----
[  459.397962][ T8584]   lock(rfkill_global_mutex);
[  459.402713][ T8584]                                lock(&data->open_mutex);
[  459.409810][ T8584]                                lock(rfkill_global_mutex);
[  459.417080][ T8584]   lock((work_completion)(&hdev->bg_scan_update));
[  459.423666][ T8584] 
[  459.423666][ T8584]  *** DEADLOCK ***
[  459.423666][ T8584] 
[  459.431828][ T8584] 1 lock held by syz.4.1019/8584:
[  459.436845][ T8584]  #0: ffffffff8ded1648 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790
[  459.446929][ T8584] 
[  459.446929][ T8584] stack backtrace:
[  459.452800][ T8584] CPU: 1 PID: 8584 Comm: syz.4.1019 Not tainted 5.15.179-syzkaller #0
[  459.460953][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  459.471001][ T8584] Call Trace:
[  459.474267][ T8584]  <TASK>
[  459.477201][ T8584]  dump_stack_lvl+0x1e3/0x2d0
[  459.481887][ T8584]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  459.487548][ T8584]  ? print_circular_bug+0x12b/0x1a0
[  459.492753][ T8584]  check_noncircular+0x2f8/0x3b0
[  459.497689][ T8584]  ? add_chain_block+0x850/0x850
[  459.502619][ T8584]  ? lockdep_lock+0x11f/0x2a0
[  459.507284][ T8584]  ? lockdep_hardirqs_on+0x94/0x130
[  459.512472][ T8584]  ? finish_lock_switch+0x8f/0x100
[  459.517578][ T8584]  validate_chain+0x1649/0x5930
[  459.522417][ T8584]  ? __switch_to_asm+0x34/0x60
[  459.527175][ T8584]  ? __schedule+0x12cc/0x45b0
[  459.531933][ T8584]  ? mark_lock+0x98/0x340
[  459.536251][ T8584]  ? reacquire_held_locks+0x660/0x660
[  459.541613][ T8584]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  459.547633][ T8584]  ? release_firmware_map_entry+0x190/0x190
[  459.553535][ T8584]  ? __lock_acquire+0x1295/0x1ff0
[  459.558551][ T8584]  ? mark_lock+0x98/0x340
[  459.562891][ T8584]  ? __lock_acquire+0x1295/0x1ff0
[  459.567904][ T8584]  ? mark_lock+0x98/0x340
[  459.572224][ T8584]  __lock_acquire+0x1295/0x1ff0
[  459.577070][ T8584]  lock_acquire+0x1db/0x4f0
[  459.581560][ T8584]  ? __flush_work+0xcf/0x1a0
[  459.586139][ T8584]  ? rcu_lock_release+0x5/0x20
[  459.590890][ T8584]  ? read_lock_is_recursive+0x10/0x10
[  459.596251][ T8584]  ? start_flush_work+0x776/0x820
[  459.601267][ T8584]  __flush_work+0xeb/0x1a0
[  459.605677][ T8584]  ? __flush_work+0xcf/0x1a0
[  459.610445][ T8584]  ? flush_work+0x20/0x20
[  459.614778][ T8584]  ? print_irqtrace_events+0x210/0x210
[  459.620226][ T8584]  ? lock_timer_base+0x260/0x260
[  459.625156][ T8584]  ? __cancel_work_timer+0x467/0x6a0
[  459.630430][ T8584]  __cancel_work_timer+0x519/0x6a0
[  459.635535][ T8584]  ? cancel_work_sync+0x20/0x20
[  459.640398][ T8584]  ? lockdep_hardirqs_on+0x94/0x130
[  459.645589][ T8584]  ? __cancel_work+0x2ef/0x380
[  459.650357][ T8584]  ? cancel_work+0x20/0x20
[  459.654933][ T8584]  ? print_irqtrace_events+0x210/0x210
[  459.660381][ T8584]  hci_request_cancel_all+0xcb/0x300
[  459.665662][ T8584]  hci_dev_do_close+0x51/0x1070
[  459.670498][ T8584]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  459.676124][ T8584]  ? rcu_lock_release+0x20/0x20
[  459.680967][ T8584]  hci_rfkill_set_block+0x114/0x1a0
[  459.686155][ T8584]  ? rcu_lock_release+0x20/0x20
[  459.691079][ T8584]  rfkill_set_block+0x1e7/0x430
[  459.695920][ T8584]  rfkill_fop_write+0x5b7/0x790
[  459.700760][ T8584]  ? lockdep_hardirqs_on+0x94/0x130
[  459.706472][ T8584]  ? rfkill_fop_read+0x470/0x470
[  459.711401][ T8584]  ? fsnotify_perm+0x64/0x590
[  459.716068][ T8584]  ? security_file_permission+0x75/0xa0
[  459.721612][ T8584]  ? rfkill_fop_read+0x470/0x470
[  459.726540][ T8584]  vfs_write+0x30c/0xe50
[  459.730805][ T8584]  ? file_end_write+0x250/0x250
[  459.735651][ T8584]  ? __fget_files+0x413/0x480
[  459.740319][ T8584]  ? __fdget_pos+0x1e9/0x380
[  459.745040][ T8584]  ? ksys_write+0x77/0x2c0
[  459.749460][ T8584]  ksys_write+0x1a2/0x2c0
[  459.753779][ T8584]  ? print_irqtrace_events+0x210/0x210
[  459.759225][ T8584]  ? __ia32_sys_read+0x80/0x80
[  459.763976][ T8584]  ? syscall_enter_from_user_mode+0x2e/0x240
[  459.769958][ T8584]  ? lockdep_hardirqs_on+0x94/0x130
[  459.775163][ T8584]  ? syscall_enter_from_user_mode+0x2e/0x240
[  459.781127][ T8584]  do_syscall_64+0x3b/0xb0
[  459.785528][ T8584]  ? clear_bhb_loop+0x15/0x70
[  459.790191][ T8584]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  459.796069][ T8584] RIP: 0033:0x7fb31ddab169
[  459.800472][ T8584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  459.820077][ T8584] RSP: 002b:00007fb31bbd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  459.828479][ T8584] RAX: ffffffffffffffda RBX: 00007fb31dfc4160 RCX: 00007fb31ddab169
[  459.836438][ T8584] RDX: 0000000000000008 RSI: 0000200000000300 RDI: 0000000000000007
[  459.844403][ T8584] RBP: 00007fb31de2c2a0 R08: 0000000000000000 R09: 0000000000000000
[  459.852359][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  459.860335][ T8584] R13: 0000000000000000 R14: 00007fb31dfc4160 R15: 00007ffe33752f38
[  459.868298][ T8584]  </TASK>