last executing test programs:

5m21.378991445s ago: executing program 32 (id=253):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
readlink(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=""/12, 0xc)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
ioctl$TCSETSW2(r1, 0x5425, 0x0)

4m11.80424927s ago: executing program 33 (id=557):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0xfe, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)

4m10.637428263s ago: executing program 34 (id=563):
timer_create(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000480)=<r5=>0xffffffffffffffff)
close(r5)

4m8.359546114s ago: executing program 35 (id=573):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000280)={0x6, "d046d971ea97850f88bed3731a3891a9c80deee5e1f5cc17fb6ff17ac7f59762", 0x1, 0x1, 0x4, 0xff0000, 0x200, 0x8})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00')
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
pread64(r2, &(0x7f0000000280)=""/169, 0xa9, 0x20000000008)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x80047441, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000680)="7bbe0654e8d6bcd4ff63baf8c4fd173c393b53ffc3611ae8d2eb5320d000d37fba21622b805b614edf8a6d913def1f349d5eb193379739f9c5e029784c9c609377bd8f54bf7c581afd1539c625ee4dd3dcb77bd92cfa176c690f2a889858fa95aa5dc7d6441cb615bd1dd5aaa3493edff21ada7cc7273b2fb8e46645625d84854589ad4ca0649414b0ac63d6", 0x8c, r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0xffff0000, 0xe, 0x0, &(0x7f0000000100)="ef8d1fa122123f790da710d8e5cd", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

4m5.659397428s ago: executing program 36 (id=581):
timer_create(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000480)=<r5=>0xffffffffffffffff)
close(r5)

4m1.890850078s ago: executing program 37 (id=589):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001640)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x208c00, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000328bd7000fddbdf251c0000000c009900fb000000230000f3"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6835849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db394", 0x23}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10000)

3m43.368652406s ago: executing program 6 (id=636):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
read$rfkill(r0, &(0x7f0000000040), 0x8)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
fcntl$getflags(r5, 0x40a)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0xfffffff7, 0xb, 0xc882, 0x5}, 0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103642, 0x0)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
r6 = socket(0x18, 0x1, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002040)="e410a4c9e96778bbcea38cfece992bfbec641c85eff85eb23662bde3c867cfc5e62167bbb3f44fca9ff432e5fa55054a9c4a0fe3f3c58a6686f6dc725fe52d638e16fa6e4750f496ce85f54271e1ef810bc5a66126c48b0b3ae7ae8bd0c5429ec100a001be2f6d4010fad555e516f3ca324ca841f7cf2bfa3aa767f688ceaf63e38f08c141155909e5d7f83dc1ac700fba6f5bed777f819e980e28bd2b4c4036d236824d2a3203e63e41f7a4409d9ac5d00ab7a36616a0fee3ee58334270dc59a2ddaa0a8de1b9c33e7e6107273015046b0b802642ba3b59220813f283a4c1b792875463bd34845d8325744627b5095ba4a6065831f117dda7a495e9fd225567ed173d3ebc6010154121b0740adc6968532bb3a321e8b8c4dba1edf62131cbe43b317c054d216d798f735a10b70426999b2a720107640b1ae58be4e9117d0d487b5f447230e2f000fd5275eb97b1b6e6c2ecc0e4bba5111fc8036d2b4e36121746f0c8fcce2d65c0a76e7db283221e9f2ee52a40662bba824f09d8da34f1a2078c09a17e8697e461fffc2fab1bdfb437f59d31e2957fec04f2230810ec7e536a0411f052ec85166165c2d4bbf47f884e40b1059e40ba6540cfde5b52da6bdecba5be58c33e66e988cd4205d624571a89392c215b3702e06a9d73ab07ceb3eb108e5c5a51a976b7b98842b6ddfa6d071b7338a7c885d77ee883cb0b9f1023c555740582bbcc1e720844fa1cd43ff44bb7d0d695fe21d61a2dff912688147e5a52e997b0719c0d841e76f2d931e7cd032f715b54ff664ec39c499f41705dd285128292600e8d7db2677410c291ec684c3a08318a91d4d6c7ba932d149a7898389bf667b6aa4c3361dfc254013cc47a32ff7b6376b8f52ddf9b236452451a53e805c096a0dd35b5f65a7681efd330393b3e529cec944411fd6a58dc6f8f904842434eef0b78328916ba8ae7657af2dcff5f2faa72161678915148144ea480361e494ee1b2c3cdadfb753ba4344168ce3510174dff4f936a61233035388da4d4bafd1941ee6371900cc64295b06db33fc2a580ea49d1d02b1550c7b000e2293ba3da52f585d2fb88bebd297b704b3caae996602ca9e9d26c1d55f69c2e5e451c4eed947be122e0db9959ac61994db92982c65d6abef32bd866a7278ae45cd6a98596b6c5bf1233eaab46c1bee66826662d29b889ea92ffa55a590b09fac0b342d03952457047f2e4ec09db44a21f76e2018bc6a90ad89304f83c80af4b236d905e6d30f868c3d962a66f0f7d750a4a41ed832f3297a84141cfdce65b6b01513d81b79e970e1c773411fbbccdc80740472e05300ed4c71e43a8debef712b4b004f3464ff8a740437c3839c0c6c7d1c79fd64c2f782119ef88304a7f147f68320bd6c119b8cc86e777cb612060e0536c590baf9a4a2383e35d95fee94ba59dec07a9c6b6713c3657e78c7a139b6cf561b18ae48b5794c68c60c98d9c84cd4ab71a768e54b8efe750bbf5ea98fb7352b65fa68719b6d61825c14536cc58686701a43a1122b8bb6769e391efe9dd67decaddc4f8ce5e8e44e9b2d22f12cd5df78cebbca22f3b44b7b072ad9f5427de39b4fef9a00fe7449123771ba7e517236f2e5ae132f171bfd0c985f8ce119cfef00e50edd2dccf546f158f412525f3a844eca8ec58699d7889e82828e2f23feea528d16740a078e3256ce6b920fb7f236b32c034d62ee3036ea9c5b09c6d23175c9e130ce125afa496e2d05657cee5e2a7cc6fe7afa16e49295e054d1097e4e1243d90ef719caf9d5a9fa6c3560cf91720e64fc5977aec66d971288753aee939d58f6140ed2b7ffbd8c53e1a617387d60432d0c63619ed2a8ddc54088251b2df261fd0891727715dbfc9071948a9328788cc7dc61ba7c34abbfb6c8a8c927e33599feabf901a6db816ee543089cca870fcab82199aa175821dced8251724cdc8a33c8285235603ec8e1bf10a246cb766be4c344f86e020979255e16a477f4bbe4afa13b7b7db7607769688972cb9bde3c0aef5b9143909f90cf8002241ca804db34de668a09a39d6cacf596f1bc7df49cae9cbf0de22a104aacf76be4c25f3bba31b7de3a1668c50346612898aff149227d9131d56231233d4c97a7897999ec1c902387038ed2225e7c06c22c544a9df9ef1069730b8cab4cd68746de299b5d7d618f803769c6d33b6d21969cbcfe722f99b5633078c02cc2a51e7570aeaa4d25618b238f841efaf4346a8dbeffa1d13ff86ff24f5713221f80aed8bfda53f3070d4711bb223518a002c38a3e2731ff947f50bdf2142a452436e821abcea96350c8179cdd1b41704d6d5bdbf76d21ab7609fafd53c83fd8a0644f20a2fe5b2ee3216b59c502b1b31ba4b1149d42a113aa82862f28195a06ed6d425cd80de8cecf58e0cec45fff5ab28483db7d2b37820a1db2b1f1d9f94dae6b113ea8d28d9cae4ccb6828daf578d2721ea1da3644863eafdfdb0d513265d1ab95fe19a26fd04a177c7e6f926778149640aa09e8b42e2ad71ee90dad665ac0e10e94f1404334f086f594637a89bf021b422946861bc200a964ccf325a9fdcdc7c83b5d7eee743c00da73858b73098affaa73e26f0cc4b9fc50061da678b180d4994b873d4dc41518f7670c1a50e8dc09ece4397f6bd6016bf9a09959e8a2afb29b48b52cbacf488a836f90ba03d7d178189e38e44c19a68dc47afe6bedfa5e02bde401028b240d73128c7fcade1bd540e5e3ab4626d3bbaafdcd1431475d72c27d69ddb525e6ada93e7f20cef4db65c2a04ae99284e889878a7a68ebb821279006e54dca07b1c5c24614f76208b22f5d8bc3857448f9717181c3d63ad47eae3098c319def23935dfdb5b48b4c1a9cf3a2508b9a580abeb39631db1f031f847a49864b6b1fd9f63094da8e2a13ad307b67800416f44dfe38d4603869d9ad46bf97726eba5c1d603c887aee36beabd342ef050db4eb810e1dd42afe5b6aea04612a733ed8c4b2964dd736394ffc8c73d87a6b59fd1cb47b335727a6298c5adbf5340cb0dd4dcd93780fc310a502d240fd14927f5b39eea690dfdc3e850e6c68cefed993ce321717b21a1440f1d56d23ec8906cd3b2e3bb1c7d6551e382fced9c841995be0f392dd0f2ccb8ff4949e760464cab911fa4ca55fe6730835b1419125de44c1992f5e5a091145785ba6c059e837c0e427f658dbbb0cf99dd274ab9166e7e2ec1e0a32c1aecdb56d687edf0236f452605cae2accbbbfef364a2bbaf171186fd1692645ff4cbf8376db15ae48ccb70158ffe33f7ad15cb4f72ebeed94e28f520e2defbf32caee56ede8c067d467aab516d303c0085e39384f015c1cc58da2d0a034b2f02286e4ba2324d2ec33686cca11ca1aa760073c68100fb5a99b83c1c9805e316bbcea8c9e5f4fc57c7b8f18c975129a6ed82ac5def56b45deafbc80ca696e427dafb3371834f5b6a61b62763dff839b7eb7dcb27ceea77cee7b6c804279a1176f8d413d4716c347bc8f78968530519e53a99da935602e7ebf9a9fb8f01c85bdefd54d96df7fa9722e5813aec2d3065acac63751c02b373a4ca184c678d10cd9362f0de3d3f64bb331009fc422964e8b46ed718b9ef881de560c290d922db3ba19045fa3b2fc2598e2171c76c709fab8aedd78f46612325d2728493a0cddf87b009c9f32ab2a18b9e1e36c9ec8aa52bc87d64be72bb99b2fab4adef4dc5206f6961d0613eec39b1cf90f68dd2d6af83e70a3b9b7c0da264456667deeb73631a310d8f4e1cb9224bce5240204c6df74ac2fa4904ac50739fc0b3b13028784d22ffbaa60a4b315b41619219ec28e7f55ef519a83dd36749fdfbb0846d6b515c43531cb8e12eccbeb34efc7f5d8da3f965592a3e469e370a21d22b2c48447627d1f31ccb961badb6300bfbcaf31384b5673637fb429d4648d16dbfd57ec4290051e717de04b91b201a55e382a8b93b3ff488bfd0662020c25198df941381f038ae16956193c1a928d20545a70f4c6a328ff5f79ead3ace8ad662907f6603860395813b8eebd6cc1b9f2b71060091f33d35157bba998d07e9ec34a47cb4e8ae7b4857e35a3005494387a31e13f3054380130c252ddf64938ef560e6a27d8af96903d3ebd633c2e9befd58d231e7e47b71a701ee134a8d9f9511250c7b45412f4cf33defa93e738adc7a0d173e6c8195a88923859e398f4b572d0dca6c36e62c2324612d77f3e015a478c13237410e77f2f6c953808f622fb8095cf7389bf58397002127d2f83c932351f99b2ca8efa59fdecf75c919856262041af7b3d7a9ba78ed42317b7cd5ec91a34323e7394ecc62c83d54e305c3a392ef020cbb96c0535cb6fd6cd3b4d79c653e1a90590c76971a1dd8a07004f9d49114dbbf31361114b6118d5ad0fc953555bdcbf3db6b9343fbb031f4a09afe9a4fc05933bd6d8da2c0c0a80649f7c8f1b31d0c3ea0ceee5d872fb73f0c142f9d6738f875beed15e08f21a3422f590f26fd0d16e2ae1efe2a94f3f1ab6b1ca4f60f917fed65e2a5c40321a0dbd14dfd3f1b233f5bd657dfe65b1560a2ae1bfa1d4dc72ebaf67c21b1f501fb03e6dd25c90d26be04484f0d95a01a2eacb8f3f18289f9ef390122c4618223f448a1ad38946b865bad1784f9ecde59fa6a3c8f48a022f415bacb55112cc89f896570045ad0b3c39634d3ecbf9f197df6ea6f4ed41fea9d53c781428a9b1fc5d4f64601c28266d1eb716a394ab9b8b5e12ba371fbe1ce376936d8ad72ae791d3aa4468ba2a0049d0096a254cac67bfc49789d7e32ee06c36d9162af94a395d2d80ff969a61eb495a3ebdc76a8cda75980886c7a189f16fb9dc518c2ddbd487f7c7eaf74fb475870852931ff5a178a0d6fad9648b19501b0162f708741e8b0853b0275ee07e5d309189d5b656e45d71b5fd7ac00cf064b3eb308cae2b3653d94f0e542bdfbcfb1c5013718e34b70a4be6e0d6081c33876a983f604d08beda08fd2cc1110f5ae3608941217832f3cddb58092d6e268b446e01c49a398a01a252a300b44174ceab9a5ec1527af0f5fa1fdb18e027bca08d2b37a9b7eee5f648888bbcf9b088fca8d91d9295575b8317a8bb3d9240d5fccd1c9d9ddb413e0052f43b7c295efc853027d3882f3bdcbfe14a42f84c46e4c0f43b3be2dc4e5736ac49149e744daa17bf76bd337bb15cd1d38fdc6a25f72acca057494b6544d34067dd96dec559cc8c9d924d44e351dcca24e5d4b2bafd596000d69fddffa2e849f7d37c9538901dbf580b1f20ad00b75ec2880de6ebfe37bbaa6a3a11ed7533e5ff8f4179e887aef1c8d6ae5e204df0240cc669d66a42fd3dc4ee368435671e2726db1d550ab7f7fedcd7a9b2f61117571ed41ffc03203b6b9b167a97fe355805e47f0e4ec693eb25f0f5c40bee7bf92cd57ec58faf1c048feefcba0f00bf4c4c85cc8bbb5c641895fb8ece2175462dfe1ee7267e4d0cdccf15cb19621caf2be5cacf0e750f0b9074c9b3bb4440a436c80381359629deaf0f51ba206ae0308089ca1d84a6468a12deb28b1aaa89d03b9835561e5116887554c8bcd30d97dccd85f741ae9380c98cd5672bb65b069c63915d4b532a4c5031f7742e65f7884c0c06ca6eb5de1ddf4a05c8c09b3667d7851729630955ab628a68f9b538a020439b184a0ce24ca4b369c3951f024398b416bc99344e0b7e0bb3a06182b300eb4e29c5ac048e53ceb9f772c5cd40c9a32b0997c7fcd6f7b995d0471ade39a1bb6b30a35f7284475ae39e999b2d9f504d5519b577997d890fd2834fd8dc2551ba1ab14c05248d19ba8ed8ffab3e102b9d347657976cad62c37998a0ff93ce2e6f7d0408061c14e88f5c67c0309e0c3a84c8438dc023d83ce43596d5e2ca77557ecba5d91aa781ead89dad5baab07b72e4d0257ba9a63664cd022aa009e935d1986fc78321c01218029f841e2de64e6965f260e42db37e41d455c559f205c8919d449db58598c87c8848d5611e48b79433650bed510d67022402a03e4004a37785be0d32603e027da2567949deb7e8b4517d146fa826760843ce7f091bde6a68876bf57e99301214654b985132aec79651c7184dab80b74850271af74964aa406c8c74006a44920e87d754295239ffe6a173c9f32b6d587046929e4803d53e8dc5813a1945b9136510bec44c26873a469eaa3ebe136ffaf75bb7cc9dede2c24592bc5c9d32b4c1b719bb787477a946c44087d423dc26181708cac702d6ab360b7033548878cf729fcfcf5a87caa7d666d177f77a58df363006dc2d9b5808007c31311cab48356193c9e698252fd80baa18c56de56b473e5f25df6f99e947486b1990d82bb43c288d4c65c98e0cad4a0935d40ca037bb2ff15b3857261c3eb297c5b4efd60bd5b3ad8c37e152c95bae2d48c15742897f90190618aa4106b1c480901e020cb057b9f6d1d0a4e734d13a7105eafd52caed5a5e6496430c8097a650e35ecee3bc615ed5289b2ce3b8e49b1217f2a49e64749a3e70123f4ede8bda1f2a3d8c13ff0eb9fc23af5533680619d742dc3ed44d94c49170c45e25cfd9882694c770eac2a1c2c9b1532a916a2dac66719b53239a08ac7b4dea029252b14a012f702b3496606d73fba663622f76fc83608ae9cb22f5588171531f3363f0f8908083c4fd9fe5f8f1bfdedbd9d9688f5db1a888b418f597250c618697b9fd067a271dce7302802fcebc8c9fa038f68223babc89984e8d780dc3e33aac598403c8d5daad2647b8a5088f089401d797b19668ea30987c413a80b0b6d7eb3cfe2d479c0f4578029c9792b88b37d827541b2973f00330bf2f988e4c962996ecfd63d7b5a2a083eb936ae2a739f86154382cdab5ee4c1ff0236383d7c9d96de75b5b20d1252504dd67f23d94ea5c1d05c73f2c9d3eac353a7616fdcba2b97112d36ea043385bd80460a82add081590d49670daeead151b6b79ea13f0cc4a73f6156e18f3e69cbd672c173452a21355cc5198ec75f96356a1eed0b3059aef67386e04c1059aa42e84355b693f36a046bb9e37963bbf42d76c9add54a88c7bc8bb9cae22190d46bb68daacb1e085d5fe40ffc24702fc41aa991a983799838e764b6e01f3570e440168c12c48dc1e6a05532fead540cd5505067ee9abe4bca4ec659714e2c8849678ceddd4046648dc06c347a9450d09f5b0bf41fcbc712825212070c034ba4b1bb76de8bde5f315243644370799abc142d73f1b85c51bff6014a007d0f18fa4c457f5a3d1efbab91ba3c99688a4e12867ae836d80f9553f2c62cfc947cf4a9f4a5d8cf46ce7cd6f89ee434c44748b408b26c55ebf0cc1201596287ae65338bc90d17cc94f13ae1db002579128860a97850132016a884691f0f2e0a771c229010d63655bebf4635bce576d5145479e436ff1c249c7cc2d9d5b6f1f43c5cb5dabaa04792f638fa7d21ee6f6670320be6c30e1c41555fa9be31828af8b01f2b82d30d70b078d93defde6beec48f2617d40d966f7c1429e9cfc52cef54bbf6b5804cbf4ebff6fa98ac0967e55f5f5c58b5038ae6d6503e065ede09503cac2d063db7df731ef0fb84911c85e17a2937af043e46a45e6f580c82ec27dba48ffdc7359e88a90e42314ceaf0037ac519e38dcbf3d4198302481a591a458a2f6de24b326a06a4a1b0038848d1853b7eaf3bac04ed00a8d2582b97df70676eba724f9162bc477b930416646b9826ace55559c4284dc81f4df4d26dc878a975eb3b2f9ab2f9b6268243eff72a2aff5ba1fd30e01d63647d97b58b7961ccce02adcf1887ff91b73516b73a4d4432e2f06901db37973c6157e6442535bf24514fc6580f7075b2a980ddb49a79caf38e47a487776eb1c84d2c6dbba922dcd641e2df009f8fc216f5e9b522a82d43c420d6c2ce2fa2a9adc388ec95317350689511a03180ed2d20ba1881a16e4663beb2195c611c4cda5851712c927a83bd88714cd1895eb8835454c2b712ed29e333315ada51d40aac95eef087a9008d1729c66cfc03466bd73370b1f6c348bca8298679f4b3ceb2ea9d760ab46d87161a9ae38c4771fae06dc053df24a0b76cfa22d4aadf340cfbb590304923ef65c65a6ce23719e46e44007dbd125c5ce07e0f82a542ee657942112dd1fd0e91d943e9e047fbf01ef1eae4c34c33b46632626200a102d6e507dc90a1fe1d2117735c5eada57aaece35670094443dfcd77f0700bf59da624eb8a8e8c5d5d9a78638f398ca2188cec0ba078f87fe92eb2cf1eedfb25d2707238a83b6b1331a8631e58202fab625132f840a5d59f5667f158faea54ed80b91e24d77b03b3cfb6de14b2c77e649aac97b8c9f1fd7c901ea05c06a52196745cbf7a132b629b3c0d6e0fcacef00128616c10764575bd4aee77231bc867f0f15cc485c0b6f522a571224d9978aa179c31611c9fc7aca10850bafe21832907c5da57f10ff2ea464b23e7cbd3a49120e792adcfb429a4e394e9b653c40c66de7a750fd723a47e4873024a4774998450cd4a0d0b0bbac27c283bd021a22157f2bb6ab2bcb06c7f56c1e8bdffe11d2c96f6b7516867a88e82d9111477bdee4854a8ac008826db4c8b39222cf45478fba35351581d96ba2aefc682d978d532e9825c385ffa0c77ae4059658669663abadc50ae62fbb7a156df659c1c08f39b4e5fb1f26fe571b36ce31ebaa944b4ed3068e9e53a152b32a69cc1ab0086b0610063dee3240da4e675d0436cd9328ad40a40c36565b877349ac1378f38f0e40711fe6e5544673b1121ae4b13418f592151b90bf574d35892c297aabf8807b3d563ccad624325e9444cc3b3d177633af90a3dd4de70427a44373672bc52b96a07d8a6cd8db0ed7a7d8893eb0e79bf2537a8cdad3baa759496db8a68e036d511f631ecf01886f839b59223286e1342824bd08fb6338961c38c72bc480bf434ce844b7744e9f82123c0ac9215180770dd63bd6bc547f3e4c92eb61eb0fff134d54da24fd239a8ec3fa9984abfafa06db7743669415e287da958ab727b9fc8ad8f8745cb09beffdfc5c2c138b2761451cddd76a50a9ed6c6557bf8afcaec329ab5c0e2ce0f0ed0c5a4b79003363a0e90bf3d0419efcbeec5869d655ffef53cf72086f9dcb0369d0ef3e248cc699aad901014b2734fa04e840c10b178153d6b3c79ae0ed1732a1a4b4f5b45924e89d43acf3139fe79441b0d17e7c1dde2532e7d095b907e999458836edce07444e0cc1d875a0800083a9d2732ef3ad281633294878d289a2972c16a2c8ab981fc8a2dd04ebc0ece1d513426bfe5569b73e26d35c5ac53956a0e259853add3bde02fd7c8d95fa5330af1b9ac4ac7a4407bcb6ccc7d444238e1d51e168848772a20fa4766cd599e709adf44b4a70225c0858fd1428f0e66f2d3f41bd8e928af6c5b399fa9cbbc1e3c835a27678853449a49c6eed23f16321e520a27fca1a20732d2f7e18712b064351f672b677fcea656850fb2e4c2a9bf60524ec5fa3c35ddbfc4855ea332db62498b123154af4ac2ad6985a2a12c5f736465bf86c03879fcd033bf822029aa16f8b7ae40457ef5f7063d4e0f859ccf9418e29d52bff38db8044abb86b951139c54e4ff4cd0b8099d18037dd1b024985977564ca1d939549d86e5c3f28cb6d94734909e4619fcef2263408492e1a5b289bc3061771e6b0ca9096deb46a82ecfe92874da519fdd8ae4457933e841cfb10673c0badf3329d25b8f4ff58b91042611f0738b4bb3ad64d3df0b57d0585dff458e8820d87e693a254d2f98d2538e5f9d1c265c55de645be5f7784f6d6e2e163362257b7c4a2734e659b35137cc36fd82f86645eff12b58c0b732c3c8546b1018196605257d6958f81200be7acc6f53e7a7585f8d33ed2a77a76c088bf1f617718275247ed6707fa2057d033b85dc3c3128c7bc665937e00c7826068873e4fd0ef92e404bdecec2a0e884e3d062d85c59ecb7f987b3a7404bef4c8a810d40b200d607b3b10de1c4d70ba918a5d1aeeaeacdb3c351006c3ac5abbb5faae99575428170ed15be6113dfb102014b6e8e052cea8b5d9b694f03bf4e83bccd5dbf7cbefe29264651709cd7b20fad5de1122364a5dcf3828a121f2cc03a6234f5783d66e5cf6a39271e156ccd63dfbd479863bfd599309dcd9700e1f5072b4bf5a88b3718c6274f1746ced3493d54df28c612cb7561251f1db410783563cd855c783aa283e1b2792af91072259a16b37cfc6e36d99ef6d6680d78bfebe6f4d952b69803540292fe37feaa48b32ac72ff27a4a5b0ccc3b12501687b1c157872a38267e4363fbbe9eed6be84441988d32eff3b3a4657f3df330a17881013ad2a9cb9e0d3a18b13c572ae682a3957a5fbcd6bd8a75ae408c56523a40383b71689e650a27e6ba007245712a1651bd62699fef688b6c49bebffc9a5b30a7f7939f530b621cbd313547e355bb62a0133382099d15c81ad702a6f7f67509f54f085b4f371a67c1ea8ba0e50f40ec666150d8a94ef2675fca2654fc1acd0dc942857745fc67e90969e17cead333707d92f91091e6f7d5460af8341251996d5bc456b0b021da2168a8ee18380adc0d828e3882d287f95500adbbef31e63693840937c82af66d15dc11424ab7b7117dfacd52ff6d6515deaad9a6437a19ae30b5bf1d73de861309a9289c761c637e3efa95bfea54c221e87bb060e29d000bcc0a6aa5bb5c88998b82bfb49f181f86b593773e7045545e290f9d0551b3ed2f0dead2be62c7d2dd45b53fadee7aa13b50ad7766cc7d51368f77c3ebdd83ed77849a8a0a9ecb5cfc182bdb63022c68bb09742abcfb8a950652ec9eb4904950159f218bb3b4d8bb4c159e67ad2dfd21053474aedca0514a059722c0fbc23ec335e8d0b73b135d2dac82a1294a33e5e1df8f9826deeec649bcb56dc6373f3b66923299a3d84a802dbea9e4f468da4736b53e4a4e47e0c3d04e9b5ccbdde4907671c2ddecc75fa1e7f3c6b9e06b028795a50c2db4a7055f2ad8621d075c38f243ef2a43221d69463b385f1cffb8ce098de52391dbde3a28eeff486d77adf9ee5606011fad0ee9e3653546829164dcde0b36e56a00410dc8d547857177990755b022dbb82576766ef09c1154d6cdf8cbfd493bd926e40f784e839f9d3d69e514f8e49e4b6c1653376596782705f5dbd03791dc03d87d3a3f43defd53fe842ea03aa2d4ba9e82e6e10d389ccd4b5a8b4ed4c5c3dfade105ee19f38886070513372507c035e7f44ecb689bc2fa8b5feb2bc92f7ea790b3d66e8dd5a415417d5595029f10c4e00934aa29e9cfe8efcfd45404806a343f9bcfc08a220db240439ff5aef7a0c9ea345621b036afec34742bd7f8d63be831e8e22d72861cc57e3747b52ba26f4eb22bec01c614e1ccff83470c26b36dbd3d32ae503e117f691433cb1fa3fa41e8e88c8f5c021067f05b90e603cb6488905730e070ddba35f43d8095c2159fbaeea1c96b0435ea2396b3c151bf672e1ca80a25e4db83ce47ebfa1a4811792efffaf699c3958c572dc73ab486499337df340a566b16584d11298800", 0x2000, 0xfffffffffffffffe)
socket$inet6_udp(0xa, 0x2, 0x0)
mprotect(&(0x7f000058f000/0x4000)=nil, 0x4000, 0x5)
connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'ip6_vti0\x00'}}, 0x1e)

3m40.415623281s ago: executing program 6 (id=640):
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000))
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000380))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
r5 = socket$kcm(0x10, 0x2, 0x4)
close(r5)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000200050001c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
setresuid(0x0, 0xee00, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2, 0x1, 0x1, 0x2, 0x3, 0xfffe}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r6, 0x8b32, &(0x7f0000000040))
sendto$inet6(r4, 0x0, 0x0, 0x4c880, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x100}, 0x1c)
r7 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000002c0)=0x6e, 0x9e3294f5b8375996)
connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
write$6lowpan_control(r3, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 2', 0x1b)
sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="ee", 0x1}], 0x1}}], 0x2, 0x404c484)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}}], {0x14}}, 0x7c}}, 0x0)

3m39.720372375s ago: executing program 6 (id=642):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000020000000000000000000009030000000000000000000001050000000800000000000000000000030000000002000000020000000002000000000000000000030000000001"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
syz_init_net_socket$ax25(0x3, 0x3, 0xca)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x204043, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
syz_init_net_socket$ax25(0x3, 0x5, 0x8)
getpeername$ax25(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000002c0)={<r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb3)
pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xfffffffdffffffff)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000240)={@hyper})

3m38.650808464s ago: executing program 6 (id=646):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
io_setup(0x8, &(0x7f0000002740))
r0 = socket(0x2b, 0x80801, 0x1)
syz_genetlink_get_family_id$tipc2(0x0, r0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
sendmsg$kcm(r2, 0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'memory'}]}, 0x8)

3m38.075319129s ago: executing program 38 (id=648):
r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x400)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
read$fb(r1, &(0x7f0000000680)=""/198, 0xc6) (fail_nth: 1)

3m37.979418825s ago: executing program 6 (id=654):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'})
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x20)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='bbr\x00', &(0x7f0000000040)='./file0\x00', r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)

3m36.778793748s ago: executing program 6 (id=657):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x24fc, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180), &(0x7f00000000c0))
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)

3m36.50698854s ago: executing program 39 (id=657):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01}, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r5, 0x5423, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$netlink(0x10, 0x3, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x24fc, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180), &(0x7f00000000c0))
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)

3m35.272092137s ago: executing program 9 (id=663):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200000, 0x152)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40)
r2 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0)

3m34.506392167s ago: executing program 9 (id=666):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'})
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x20)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='bbr\x00', &(0x7f0000000040)='./file0\x00', r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)

3m33.87801527s ago: executing program 9 (id=667):
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$inet_int(0xffffffffffffffff, 0x110, 0xd, 0x0, 0x0)

3m33.730348586s ago: executing program 9 (id=670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
io_setup(0x8, &(0x7f0000002740))
r0 = socket(0x2b, 0x80801, 0x1)
syz_genetlink_get_family_id$tipc2(0x0, r0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
fsopen(0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'})
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'memory'}]}, 0x8)

3m33.122559078s ago: executing program 9 (id=671):
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x83)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000786000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x3000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10)
modify_ldt$read(0x0, 0x0, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x389041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="1407000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x1}})
getpid()
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x8b}, 0x0)
inotify_init()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

3m32.059076367s ago: executing program 9 (id=676):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'})
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540100001800010000000000000000001d01000008000500040000001e010600fc00000000a667b51ee4532125e21a243c1685306f7c5d387de5cd8b8838cba7eb7069509fa783cabdcdfa6d242cca3df25f5dac4687ac8eac82c3ef67821f1fff7369acda843cafddb6410d0f75ce652118322448c2698fad839e889667f63cd45f2a55f7f29bffb2397f66f32db8a42dc52506a5f91fced1ecef0fffc7f0a92c2c7807d3cbfc8e1f2c9462588ced6cf3c6892e6c0f15edf9d6a0a3ca739dad9e6bde1ae53876d0e5ce3642a42efa1e918b8dc406679f10aa42b0cb14136f2be49dbc989672fc9c6e506ac3481ab4f6cf3653497ad26c3d4fce93fdd8ab015b1e8ad181f85e70bd17f680fff137e484a5ff1285ca414a5d5474e851022478168c5228160000d45c637c63381ef54f7b939bb9aba5df6218e9ac00001500030000000000ff000000150200000000000002"], 0x154}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x20)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='bbr\x00', &(0x7f0000000040)='./file0\x00', r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)

3m31.953076134s ago: executing program 40 (id=676):
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'})
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000000080)={0xb, {"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", 0x1000}}, 0x1006)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x20)
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='bbr\x00', &(0x7f0000000040)='./file0\x00', r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)

3m9.292267334s ago: executing program 0 (id=755):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000a094af8d1fdff6e7f7700020000001400004011000100000000997ad82d9c1c01470a00"/60], 0x3c}, 0x1, 0x0, 0x0, 0x890}, 0x0)

3m8.355219531s ago: executing program 0 (id=760):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0xfffffffe, 0x4, 0x12, 0x4420d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010401"], 0x14}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"})

3m8.120659653s ago: executing program 0 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x2d, 0x2, 0x3, "9e370e6b09000000963d5191c006d06f8e083df9f5e866fa83f27fffff0000e5", 0x41416770})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffd0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
utimensat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0xea60}, {0x77359400}}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000080)=0x80000001)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)

3m7.789556366s ago: executing program 0 (id=764):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_GET_SECCOMP(0x15)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000100)={0xad76, 0x3})
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0xfffffffc, 0x0, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x1, 0x3}})

3m1.423817042s ago: executing program 0 (id=799):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000700)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x25844, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x17, r0}, './file1\x00'})

3m1.222721909s ago: executing program 0 (id=801):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902850003010330010904000000010100000a24010700010201020a2407010100059861dd0904010000010200000904010101010200800924020105020600be0c24020159030eac49a2ee0c09050109000205030807250100004000090402000001020000090402010101020000072401101d040009058209080003040207250103018f23"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2a, 0xfffffffffffffffc)
r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x44, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x2, 0xe, 0x1, {0x22, 0x25d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0xb, 0x80, 0x40}, 0x40, &(0x7f0000000100)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a0fb89af257192a941a5b4a1508c961f"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x551c, 0xf, 0x1, [0x3f0f, 0x0, 0xff3f00, 0xffa0, 0x0, 0x0]}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}, {0x6f, &(0x7f00000004c0)=@string={0x6f, 0x3, "81930c36b179a010aabe08a414a77defe63793fb422e08fd76ac65efd4dc154cecb327d092f88c4123623c8b9728f03e801077fa913bcb3509ae29554064f975dff1c05ee946bd570d721c08836748d4deaf01337166158b58d6b367006385fe6dd4aa0cec1e65d4e74b834d39"}}, {0x102, &(0x7f0000000540)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2db5df297b36b152}}, {0xe5, &(0x7f00000006c0)=@string={0xe5, 0x3, "34670fa30b1418324940d82b69f8401f6797c26cd6b0bd762f80850209427ef8a92ed326677610372c7f0f58214211f1065a1e7f50a5f12b0f3a2ba3526049d2d670d1d38394163acb274fe0fccbf7af4c344a792af4418d310dab8beecf1b9d8d2f4cc33d6cf6b11d4a092b1726fe4ab56230fe9c0aebd784be8461fa17aab66dbb607ea74f32576061a5c5dd5e31818fc4d2c698c475f6b0778688554c6b3a72d0d9133268e40b19a11053feddd313911699f57cfadcd5b8265a6db41d7df614ea3860622fc5fed0087b39100c9dcd3c60dd2c1ec11180cc6f2149a6ad7bb1b1029c"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x426}}, {0x6a, &(0x7f0000000800)=@string={0x6a, 0x3, "35ff46d85f36b3a8a086d944ae974b3c2b0087cc875458c280a8c60480a867219fe131cec4c0ff3894499428a943d113f79f01ef49bdd727654c90af378d69cbc0604ff115b1b13b6e3c54c03960f1756dad9ae7a56d5a82044f12c6d51c2649092648945623a91b"}}]})
syz_usb_control_io$hid(r2, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x20, 0x23, 0x8b, {0x8b, 0x24, "6874088b9858e3a87dcb1c603241ca1be5ac3f9ff396d96c658280ea1f9a78a81989ed7d51924d3aa6e2a24c278885ed43fbaf9aff2c393123edb8778314f067386dd65ebcb3fa5e74d4bea6d71679c07b233ad1867031d616ad075eb1604058f5ec34a88dc8d6c6d6960606fa68f432f5cb147b5f6e3370b00a583575f5a94deddae8ddf0ba2043a5"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000e00)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x18, "bae92526"}, @main=@item_4={0x3, 0x0, 0x9, "62dad60a"}, @global=@item_4={0x3, 0x1, 0x0, "a94937c8"}, @main=@item_012={0x2, 0x0, 0xc, "67da"}, @local=@item_4={0x3, 0x2, 0x9, "f0c94783"}, @main=@item_012={0x1, 0x0, 0xc, '\\'}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x10, 0x1, {0x22, 0x60b}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x0, 0xd, 0xe1, "4c7398f58d8da29a62a027f9ef869ab7db53122c4ef715d8ea5e6cdd9e6a6f3f6ad328c31820a3f2960d7c53731faa1c9c280e23ff7bfcf730e16f2202f0ae0831f4697b81eaaa8316fb02030b6915837071996e44fc9d962f21cc0f385c4d6a2c307aabb90988df817d43526685a2b7278a562db9403ccd64f13fce2afb0dba1f439e516f6645078b7e1853fb3378bd9132f99f07f17fabce5d12ddbaf69a919837b1a3d40d8693823d1115c164e016910fab57f7f4fa31c377b993b1ff67396e075bef2f381d01d0f460abe516da5739a2da8d4bb15859adb3161845bf75cf06"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x14, "5a28930120cfa78843733dfc9e5bffc301d34550"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x3}})
r3 = syz_io_uring_setup(0x70db, &(0x7f00000003c0)={0x0, 0x110000, 0x0, 0xfffffe, 0x4000003}, &(0x7f0000000300), &(0x7f0000000340))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x2000ac0a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000e40), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000040)="fffeffff20", 0x5, r4)
keyctl$read(0xb, r4, &(0x7f00000002c0)=""/117, 0xffffffffffffff34)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400faff1000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32002e53a548f0df416f0001165eda0327784d7225905e0f3013349efb3bda6ae2e461439fca4c959443033226081c4b2a8e30f4fd9304b6bb72f717b3b21292ae60f0f4e2d6f75ad084a6e2a1da3a67c6b1777f4776fccda9b4a569dac6ad61550dee3c1ab1cc6beeef7512e70eb17f3e9094837f75ce6c992ea0d042ef", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES8=r0], 0x7c}}, 0x20040012)

2m46.008173293s ago: executing program 41 (id=801):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000900)=ANY=[@ANYBLOB="12010003000000086b1d01014000010203010902850003010330010904000000010100000a24010700010201020a2407010100059861dd0904010000010200000904010101010200800924020105020600be0c24020159030eac49a2ee0c09050109000205030807250100004000090402000001020000090402010101020000072401101d040009058209080003040207250103018f23"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2a, 0xfffffffffffffffc)
r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x20, 0xa, [{{0x9, 0x4, 0x0, 0x44, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x2, 0xe, 0x1, {0x22, 0x25d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x81, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x8, 0x1}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0xb, 0x80, 0x40}, 0x40, &(0x7f0000000100)={0x5, 0xf, 0x40, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a0fb89af257192a941a5b4a1508c961f"}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x551c, 0xf, 0x1, [0x3f0f, 0x0, 0xff3f00, 0xffa0, 0x0, 0x0]}]}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}, {0x6f, &(0x7f00000004c0)=@string={0x6f, 0x3, "81930c36b179a010aabe08a414a77defe63793fb422e08fd76ac65efd4dc154cecb327d092f88c4123623c8b9728f03e801077fa913bcb3509ae29554064f975dff1c05ee946bd570d721c08836748d4deaf01337166158b58d6b367006385fe6dd4aa0cec1e65d4e74b834d39"}}, {0x102, &(0x7f0000000540)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2db5df297b36b152}}, {0xe5, &(0x7f00000006c0)=@string={0xe5, 0x3, "34670fa30b1418324940d82b69f8401f6797c26cd6b0bd762f80850209427ef8a92ed326677610372c7f0f58214211f1065a1e7f50a5f12b0f3a2ba3526049d2d670d1d38394163acb274fe0fccbf7af4c344a792af4418d310dab8beecf1b9d8d2f4cc33d6cf6b11d4a092b1726fe4ab56230fe9c0aebd784be8461fa17aab66dbb607ea74f32576061a5c5dd5e31818fc4d2c698c475f6b0778688554c6b3a72d0d9133268e40b19a11053feddd313911699f57cfadcd5b8265a6db41d7df614ea3860622fc5fed0087b39100c9dcd3c60dd2c1ec11180cc6f2149a6ad7bb1b1029c"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x426}}, {0x6a, &(0x7f0000000800)=@string={0x6a, 0x3, "35ff46d85f36b3a8a086d944ae974b3c2b0087cc875458c280a8c60480a867219fe131cec4c0ff3894499428a943d113f79f01ef49bdd727654c90af378d69cbc0604ff115b1b13b6e3c54c03960f1756dad9ae7a56d5a82044f12c6d51c2649092648945623a91b"}}]})
syz_usb_control_io$hid(r2, &(0x7f0000000b80)={0x24, &(0x7f00000009c0)={0x20, 0x23, 0x8b, {0x8b, 0x24, "6874088b9858e3a87dcb1c603241ca1be5ac3f9ff396d96c658280ea1f9a78a81989ed7d51924d3aa6e2a24c278885ed43fbaf9aff2c393123edb8778314f067386dd65ebcb3fa5e74d4bea6d71679c07b233ad1867031d616ad075eb1604058f5ec34a88dc8d6c6d6960606fa68f432f5cb147b5f6e3370b00a583575f5a94deddae8ddf0ba2043a5"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f0000000e00)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x18, "bae92526"}, @main=@item_4={0x3, 0x0, 0x9, "62dad60a"}, @global=@item_4={0x3, 0x1, 0x0, "a94937c8"}, @main=@item_012={0x2, 0x0, 0xc, "67da"}, @local=@item_4={0x3, 0x2, 0x9, "f0c94783"}, @main=@item_012={0x1, 0x0, 0xc, '\\'}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x10, 0x1, {0x22, 0x60b}}}}, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x0, 0xd, 0xe1, "4c7398f58d8da29a62a027f9ef869ab7db53122c4ef715d8ea5e6cdd9e6a6f3f6ad328c31820a3f2960d7c53731faa1c9c280e23ff7bfcf730e16f2202f0ae0831f4697b81eaaa8316fb02030b6915837071996e44fc9d962f21cc0f385c4d6a2c307aabb90988df817d43526685a2b7278a562db9403ccd64f13fce2afb0dba1f439e516f6645078b7e1853fb3378bd9132f99f07f17fabce5d12ddbaf69a919837b1a3d40d8693823d1115c164e016910fab57f7f4fa31c377b993b1ff67396e075bef2f381d01d0f460abe516da5739a2da8d4bb15859adb3161845bf75cf06"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x14, "5a28930120cfa78843733dfc9e5bffc301d34550"}, &(0x7f0000000d80)={0x20, 0x3, 0x1, 0x3}})
r3 = syz_io_uring_setup(0x70db, &(0x7f00000003c0)={0x0, 0x110000, 0x0, 0xfffffe, 0x4000003}, &(0x7f0000000300), &(0x7f0000000340))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x13, 0x2000ac0a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000e40), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000040)="fffeffff20", 0x5, r4)
keyctl$read(0xb, r4, &(0x7f00000002c0)=""/117, 0xffffffffffffff34)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400faff1000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32002e53a548f0df416f0001165eda0327784d7225905e0f3013349efb3bda6ae2e461439fca4c959443033226081c4b2a8e30f4fd9304b6bb72f717b3b21292ae60f0f4e2d6f75ad084a6e2a1da3a67c6b1777f4776fccda9b4a569dac6ad61550dee3c1ab1cc6beeef7512e70eb17f3e9094837f75ce6c992ea0d042ef", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES8=r0], 0x7c}}, 0x20040012)

1m21.204960384s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1m3.594643435s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

54.170304104s ago: executing program 8 (id=1377):
syz_io_uring_setup(0xd2, &(0x7f0000000340)={0x0, 0x6299, 0x80, 0x80000, 0x334}, &(0x7f0000000280)=<r0=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0)
write$rfkill(r1, 0x0, 0x700)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
inotify_init1(0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendmsg$nl_route(r2, 0x0, 0x0)
r7 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r7, &(0x7f0000000b00)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0)

53.290420586s ago: executing program 8 (id=1381):
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private0}, &(0x7f0000000180)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000894)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "c2f2c962", {0x3, 0x186, 0x0, 0x8, 0x5, 0xf4, 0x40}})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

51.863848658s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

51.078692174s ago: executing program 8 (id=1389):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x375382, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000010000000"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket(0x848000000015, 0x805, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="5fda3d496fa235126ff4a2ea0c805fb5250f9201b5e9fc8c06a7b0e5afb5d9cb498c833b9d4ec81937", @ANYRES32=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0xfffffffffffffffc, r6, {0x7, 0x1f, 0xe0000000, 0x148, 0x2, 0x5, 0x0, 0x2, 0x0, 0x0, 0x10, 0x8}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x1860835, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRES8=r8, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030013134303030302c757365725f69643d", @ANYRESOCT=r7, @ANYBLOB="2c67726fca70df69643d", @ANYRESDEC=r8, @ANYBLOB=',allow_other,dont_hash,\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x203, 0x0)
r9 = syz_open_procfs(0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472e16ed5", @ANYRESHEX=r9, @ANYBLOB="1bc328635cb714868d02fab9f8e4de68c33d2978ff3cf46aa943f475d43b849aa6e03abfbc4af73de41abd66786baa2efa02418762a7adac2874554a9001e3c1d5f1e58e213b74466503f37f43ad2cc40c703635032e30f6d536b0ac482c17d6cbbe0150702fcbfbec659332b7d3", @ANYBLOB='\f'])

49.983862858s ago: executing program 8 (id=1393):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x1b3)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
listen(0xffffffffffffffff, 0xcdf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x2}, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18)
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
close(r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000040004000400000009000000001e0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
fcntl$getownex(r6, 0x10, &(0x7f0000000100))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1)

49.98335802s ago: executing program 1 (id=1394):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
write$binfmt_script(r0, &(0x7f0000000200), 0xfecc)

49.797116808s ago: executing program 1 (id=1396):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
open(&(0x7f0000000180)='./bus\x00', 0x1092fc, 0x0)

49.332633803s ago: executing program 1 (id=1398):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
iopl(0x3)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)

49.312226116s ago: executing program 8 (id=1399):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[])

47.307359662s ago: executing program 1 (id=1404):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2)
write$sndseq(r0, &(0x7f0000000040)=[{0x9, 0xe, 0x6, 0xdf, @time={0xa, 0x8}, {0x7, 0x6}, {0x3, 0x7b}, @quote={{0xc, 0x7}, 0x6}}], 0x1c)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={0x0, 0xe6c0}, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)

47.186940695s ago: executing program 1 (id=1405):
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

47.137382774s ago: executing program 1 (id=1406):
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x83)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x389041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="1407000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x1}})
getpid()
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x8b}, 0x0)
inotify_init()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

45.850711467s ago: executing program 8 (id=1411):
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet6(0x10, 0x3, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000280)="fd5e4b19e04aef4a5322562de447dd240bf4e6be8661a7f6831d9e76b30f72513c00732131daaacd9cd00044cb26a63d4aa260bb9edac93614148e0107ab14", 0x3f, 0x40000001, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000280)="fd5e4b19e04aef4a5322562de447dd240bf4e6be8661a7f6831d9e76b30f72513c00732131daaacd9cd00044cb26a63d4aa260bb9edac93614148e0107ab14", 0x3f, 0x40000001, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(r3, r2, 0x0, 0x20000008)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
preadv(r0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x3, 0x33ea) (async)
preadv(r0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x3, 0x33ea)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0)

45.313773409s ago: executing program 42 (id=1411):
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet6(0x10, 0x3, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000280)="fd5e4b19e04aef4a5322562de447dd240bf4e6be8661a7f6831d9e76b30f72513c00732131daaacd9cd00044cb26a63d4aa260bb9edac93614148e0107ab14", 0x3f, 0x40000001, 0x0, 0x0) (async)
sendto$inet6(r0, &(0x7f0000000280)="fd5e4b19e04aef4a5322562de447dd240bf4e6be8661a7f6831d9e76b30f72513c00732131daaacd9cd00044cb26a63d4aa260bb9edac93614148e0107ab14", 0x3f, 0x40000001, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendfile(r3, r2, 0x0, 0x20000008)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
preadv(r0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x3, 0x33ea) (async)
preadv(r0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2, 0x3, 0x33ea)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0)

34.949180185s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

31.163664948s ago: executing program 43 (id=1406):
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x83)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x389041)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)=ANY=[@ANYBLOB="1407000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x1}})
getpid()
syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x8b}, 0x0)
inotify_init()
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

18.214115156s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

7.154835547s ago: executing program 2 (id=1556):
timer_create(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000480)=<r4=>0xffffffffffffffff)
close(r4)

5.689827436s ago: executing program 4 (id=1559):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004cc0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="2f6718ee53d7077b94acbd5701efe28f1f1b5504429cf6aac1e8ee48f8c2e5324d0abd94979dc4469e4d317394eaf8d9", 0x30}], 0x1}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/74, 0x4a}], 0x1}, 0x8000}], 0x1, 0x0, 0x0)

5.462718051s ago: executing program 7 (id=1563):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)

5.386482379s ago: executing program 3 (id=1564):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x180, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x48)

5.306292806s ago: executing program 2 (id=1565):
timer_create(0x5, &(0x7f0000000000)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) (async)
timer_create(0x5, &(0x7f0000000000)={0x0, 0x3f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
clock_gettime(0x0, &(0x7f00000000c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r0, 0x1, &(0x7f0000000100)={{r1, r2+10000000}, {r3, r4+60000000}}, 0x0)
r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast2}, &(0x7f0000000180)=0x10, 0x80800)
recvmmsg(r5, &(0x7f00000001c0), 0x0, 0x40002000, &(0x7f0000000200)={0x77359400})
rt_sigaction(0x2f, &(0x7f00000002c0)={&(0x7f0000000240)="c4230568510b07f34090f2f20fc74b00430f0fa5655666669626f2acc40261042bc401575f302ef20f7dce0fa1c483b920830080000019", 0x4, &(0x7f0000000280)="0f01da26f3470f1ec4c40239deaa000000000fc7f8f3674524ac36369bf3440f1ee566450f2e8775150000c4a2c90b6c1b33f20f2c636b", {[0x2]}}, &(0x7f0000000380)={&(0x7f0000000300)="0f2e7013c401f458e2c482c59e7900c4e1fa52cec483fd09fd00260fae468f64660f38179806000000660f18702cd8b3e61b3feff3440faec1", 0x0, &(0x7f0000000340)="c4a3f90910d046c059b7220f38049b0f000000400f02047f363626f30f38f6b300000080c4c3bd6d7f14e9c4217d50df3e2640dfe90fae8f00008000f36d"}, 0x8, &(0x7f00000003c0))
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
rt_sigtimedwait(&(0x7f0000000400)={[0x9]}, &(0x7f0000000440), &(0x7f00000004c0), 0x8) (async)
rt_sigtimedwait(&(0x7f0000000400)={[0x9]}, &(0x7f0000000440), &(0x7f00000004c0), 0x8)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, 0x0, <r8=>0x0}, 0x2020)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002580)={0x5909, 0xffffff7f, {}, {<r9=>0xffffffffffffffff}, 0x3, 0x2})
newfstatat(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600), 0x9649dd77c7f56530) (async)
newfstatat(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x9649dd77c7f56530)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002680)={0xa8, 0x0, r6, [{{0x6, 0x1, 0x7fff, 0xa2d, 0xffffffff, 0x6, {0x3, 0x3, 0x8, 0x7, 0x1, 0x0, 0x0, 0x987e, 0xa, 0xc000, 0x800, r9, r10, 0x10000, 0x76400000}}, {0x3, 0xbee, 0x0, 0x200}}]}, 0xa8)
ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000002740))
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async)
r11 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r11, &(0x7f0000002780)={{0x7f, 0x45, 0x4c, 0x46, 0x7e, 0x1, 0x9, 0xfa, 0x2, 0x3, 0x5, 0x8, 0xb2, 0x40, 0x86, 0xfb, 0x200, 0x38, 0x3, 0x2, 0x3ff, 0xffff}, [{0x7, 0x9, 0x3ff, 0x8b4d, 0x1ff, 0xfffffffffffffffd, 0x2, 0x4d6d}, {0x7, 0x3ff, 0xbad, 0x7, 0x800, 0x6, 0x0, 0x1}, {0x4, 0xfffffff9, 0x2, 0x6ccd, 0x4, 0x1, 0x7ff, 0x9}], "98ba0c2cd6c075eee9a7b99c3fc915634238f25e38f5a80e63f0aed64f990a31a8a6ecfa05288322571fce620200cfdd59edfc4db756e5ccb0158b51bcc26388766a6025b435d62e208b35e7a5d2e80d73ac3088cd5e73a49679475511dc4baab46071c23189c8bc"}, 0x150)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002900)={0xfffffa5a}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x3, r8, 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x3, r8, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000002940)) (async)
clock_gettime(0x0, &(0x7f0000002940)={<r13=>0x0, <r14=>0x0})
timer_settime(r0, 0x0, &(0x7f0000002980)={{0x77359400}, {r13, r14+10000000}}, &(0x7f00000029c0))
connect(r5, &(0x7f0000002a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80)
r15 = signalfd4(r12, &(0x7f0000002a80)={[0xffffffffffffffff]}, 0x8, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f0000002b80)={'gretap0\x00', &(0x7f0000002b00)={'syztnl2\x00', <r16=>0x0, 0x8000, 0x7, 0x101, 0x3, {{0x15, 0x4, 0x0, 0x38, 0x54, 0x64, 0x0, 0xfa, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3a}, {[@generic={0x83, 0x6, "579f5674"}, @generic={0x82, 0x8, "78915a91fe80"}, @timestamp_addr={0x44, 0x24, 0x7, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0xb}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x4}]}, @ssrr={0x89, 0x7, 0x67, [@private=0xa010101]}, @generic={0x83, 0x6, "677bb5ce"}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000002bc0)={'vxcan1\x00', <r17=>0x0})
getpeername$packet(r15, &(0x7f0000002c00), &(0x7f0000002c40)=0x14) (async)
getpeername$packet(r15, &(0x7f0000002c00)={0x11, 0x0, <r18=>0x0}, &(0x7f0000002c40)=0x14)
sendmsg$nl_route(r15, &(0x7f0000002d40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)=@ipmr_delroute={0x60, 0x19, 0x400, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xcf, 0xfc, 0x2, 0xff, 0x3, 0x2800}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x2, 0xa, r16}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0xb}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}, @RTA_IIF={0x8, 0x3, r17}, @RTA_UID={0x8, 0x19, r7}, @RTA_SRC={0x8, 0x2, @broadcast}, @RTA_OIF={0x8, 0x4, r18}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
sendmsg$nl_route(r15, &(0x7f0000002d40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)=@ipmr_delroute={0x60, 0x19, 0x400, 0x70bd25, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xcf, 0xfc, 0x2, 0xff, 0x3, 0x2800}, [@RTA_MULTIPATH={0xc, 0x9, {0x2, 0x2, 0xa, r16}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0xb}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x40}}, @RTA_IIF={0x8, 0x3, r17}, @RTA_UID={0x8, 0x19, r7}, @RTA_SRC={0x8, 0x2, @broadcast}, @RTA_OIF={0x8, 0x4, r18}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r19 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_GET(r19, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

5.275720788s ago: executing program 7 (id=1566):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe5, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416440c05114d2f87e5940c05ab440c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df1", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_usb_connect(0x4, 0xdb, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0xcb, 0x56, 0x68, 0x8, 0x12d1, 0x75d7, 0x3d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x2, 0xe0, 0xb, 0x40, 0x4, [{{0x9, 0x4, 0xed, 0x5, 0x3, 0xff, 0x2, 0x66, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x8}, [@feature_unit={0xf, 0x24, 0x6, 0x4, 0x5, 0x4, [0x12, 0x1, 0xa, 0x2], 0x9}]}, @hid_hid={0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0xfe3}}], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0x5, 0x5, 0x31}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x2, 0x7, 0x2}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x2, 0x80, 0x7}}]}}, {{0x9, 0x4, 0xae, 0x6, 0x3, 0x9f, 0x26, 0x4b, 0x0, [@hid_hid={0x9, 0x21, 0xda95, 0x2, 0x1, {0x22, 0x77e}}, @generic={0x47, 0x1a, "4740c3c1a853db9870485c42c6a804e74870ba6804c4610d0b9d5d46b24645b1be836ad4757037da4cef5b84630933a2a1dfcca692a0c60267ae4b893e6be3bbb8d554fe8d"}], [{{0x9, 0x5, 0xb, 0xc, 0x400, 0x2, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xd884}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1c, 0x7f, 0xb3}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x3, 0xd, 0x2}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x30, 0x3, 0xe, 0x20, 0x8}, 0x9d, &(0x7f0000000480)={0x5, 0xf, 0x9d, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xce, 0x2, 0x5, 0x0, 0x4, [0x0, 0xffc0ff]}, @generic={0x44, 0x10, 0x1, "3467665af34dd4d892f458b81e6ec29c47e81d9f2a173b53c4fa384d0a592e362bc5f11399914c01559c77613f0977409a804df2fef50e566f4dae2fedb46aa8f7"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0xe, 0x78f, 0x3, [0xff0030, 0xc000, 0x0, 0xf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x68, 0x96, 0x7ff, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x6, 0x101}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2a, 0xc, 0x0, 0x5}]}, 0x3, [{0x71, &(0x7f0000000540)=@string={0x71, 0x3, "97fdd8219f25b10c50eab54f5e694f44ade42f4de082ff5735aa5624ebff4fe85f26882d3d42dde8b66f98a2e04a28f95b9fc6eebf9c2709edd84d36197821f670b17512fcd3d5992332fc074c98b8789de25d24373d384a71b64f3b4cfbcf7075d5c8d7f8eaff687bb619063febaa"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1401}}, {0x54, &(0x7f0000000600)=@string={0x54, 0x3, "ee5635c10a7a521b786ed65a83ba12998f84bfdaeca67fc824d212c60a07b5cc1852deac70256ae8b98b89b6e08215daccc2a60d3ebcb0c95f86e1ffdc466cbaa984776fe091f75008472c7e894fcc9c0674"}}]})
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000300)={[{@favordynmods}, {@subsystem='perf_event'}, {@none}, {@favordynmods}, {@noprefix}, {@cpuset_v2_mode}, {@xattr}, {@noprefix}, {@noprefix}]})
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r3 = dup(r2)
write$P9_RLERRORu(r3, &(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYRES8=r0], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])

5.166625028s ago: executing program 2 (id=1567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_open_procfs(r0, &(0x7f0000000280)='net/ip6_tables_names\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xd6e02105febe4196)
sendfile(r7, r6, 0x0, 0x17)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r10=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, 0x0, 0x0}, 0x20)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r10, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='timer_start\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)

4.788296209s ago: executing program 4 (id=1568):
socket(0x15, 0x5, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001b40))
gettid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000d0000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000004954657246e67ea49d13f139243ef7056f26a1531e3499577bec0e9b16bb6251415eea806bfcb5f1db1980a5ce4dcd26fe9fe1b41c9c0939ae969765"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

4.653146271s ago: executing program 2 (id=1569):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(0x0, 0xe97, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfbfffffd, 0x1}})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
close(r2)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

4.544229384s ago: executing program 2 (id=1570):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x60)

4.37763688s ago: executing program 3 (id=1571):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYRES32=r0], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES64=r5])
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00', <r6=>0x0})
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x5d, 0x1}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x2e]}}, &(0x7f00000006c0)=""/226, 0xfffffffffffffe10, 0xe2, 0x0, 0xf, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xbc76, 0x0, r4, 0x2, '\x00', r6, r7, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

3.841584039s ago: executing program 4 (id=1572):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(&(0x7f0000000700)='./file1\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0xe, 0xb09c}}, './file1\x00'}) (fail_nth: 4)

3.840533857s ago: executing program 7 (id=1573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x60)

3.063149562s ago: executing program 2 (id=1574):
r0 = getpid()
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = fcntl$dupfd(r1, 0x406, r1)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f00000000c0))
prlimit64(r0, 0x2, &(0x7f0000000080)={0x3ff, 0x5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x5}, 0x1c)
getsockopt$inet6_opts(r3, 0x29, 0x1, 0x0, &(0x7f0000000080))
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x94}}, 0x0)
close(r4)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r6, r6, 0x0, 0xb)

2.790817545s ago: executing program 7 (id=1575):
timer_create(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_open_dev$media(&(0x7f0000000440), 0x5, 0x88000)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000480)=<r4=>0xffffffffffffffff)
close(r4)

2.731437688s ago: executing program 4 (id=1576):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)

2.644546602s ago: executing program 4 (id=1577):
socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x5, 0x8, {}, {}, 0xfffffffffffffff8, 0x620})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x6, &(0x7f0000000380)=0x5)
r1 = getpid()
r2 = syz_open_dev$sg(&(0x7f0000000340), 0x4, 0x400040)
ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10)
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x44001}, 0x0)

2.382482658s ago: executing program 5 (id=1082):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee9, 0x8031, 0xffffffffffffffff, 0xe6446000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x4001031, 0xffffffffffffffff, 0xe948f000)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

905.058953ms ago: executing program 4 (id=1578):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text32={0x20, &(0x7f0000000680)="660f1a12b901010040b8404929babafe938f2f0f30c4c2118eb700000000b8010000000f01c13636660f38827900640fc71dea0000000f01df6664660f00d7b9070a00000f32260f01f5", 0x4a}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008004)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=<r3=>0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00e905cff8fc0ee54d000002000004080000000000000002000000000000000000000003000000000000000000000000000002000000000000000000000004000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
prlimit64(r3, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_aout(r5, &(0x7f00000002c0)={{0x49, 0x1, 0x1, 0x9d, 0x92, 0x3, 0x27e, 0x337}, "f1712064de63d855da1d5b0ed15a7ab475312a796ad01b6d91b6a7795a5b59a59ade573859ae3ace52d3c277a99873cf93b4c555d37a268e1bd9fe36467e431555dc90b3ea6b2ebe0cad0ac38a35b53008be64296db2b6fe64705d119de107bf866e20c9958de6c0014ac5a0d75dc76a458607fa53f65d701946ff1c04f71d171a6ac5b9226ad94ce4965a94c9ebc08113e6d37a9023540ea7692d60aed43d07bc9e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xac2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
r6 = landlock_create_ruleset(&(0x7f0000000dc0)={0x400, 0x3, 0x3}, 0x2, 0x1)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
read$msr(r6, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
syz_io_uring_submit(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

900.352485ms ago: executing program 3 (id=1579):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff00"/104], 0xc4}}, 0x0)

899.878044ms ago: executing program 7 (id=1580):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="9100"/16, 0x10}, {&(0x7f0000000200)="4002e94afcf413f3648d137f22f17094d6e7086d", 0x14}], 0x2}, 0x42)

764.276304ms ago: executing program 3 (id=1581):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="80003724090000ce", 0x8, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, 0x0)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00'})
r4 = socket$netlink(0x10, 0x3, 0x0)
close(r2)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)

664.092032ms ago: executing program 3 (id=1582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf250100000018000180140002006d616373656330000000000000000000100002800c00018008"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c050)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x528}}, 0xc000)

472.773147ms ago: executing program 3 (id=1583):
socket(0x15, 0x5, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
lstat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setreuid(0x0, r1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001600), &(0x7f0000001640)=0xc)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001b40))
gettid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x18, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000d0000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000004954657246e67ea49d13f139243ef7056f26a1531e3499577bec0e9b16bb6251415eea806bfcb5f1db1980a5ce4dcd26fe9fe1b41c9c0939ae969765"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 7 (id=1584):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000000000040095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

.7.1300 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  364.465394][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  364.465407][T12208] Call Trace:
[  364.465413][T12208]  <TASK>
[  364.465420][T12208]  dump_stack_lvl+0x16c/0x1f0
[  364.465450][T12208]  should_fail_ex+0x50a/0x650
[  364.465467][T12208]  ? kmem_cache_alloc_node_noprof+0x5f/0x3b0
[  364.465494][T12208]  should_failslab+0xc2/0x120
[  364.465518][T12208]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[  364.465540][T12208]  ? __pfx_tcp_current_mss+0x10/0x10
[  364.465560][T12208]  ? __alloc_skb+0x2b1/0x380
[  364.465587][T12208]  __alloc_skb+0x2b1/0x380
[  364.465611][T12208]  ? __pfx___alloc_skb+0x10/0x10
[  364.465638][T12208]  ? find_held_lock+0x2b/0x80
[  364.465663][T12208]  tcp_stream_alloc_skb+0x34/0x570
[  364.465683][T12208]  tcp_sendmsg_locked+0xf12/0x38e0
[  364.465713][T12208]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  364.465733][T12208]  ? do_raw_spin_lock+0x12d/0x2c0
[  364.465754][T12208]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  364.465779][T12208]  ? __local_bh_enable_ip+0xa4/0x120
[  364.465807][T12208]  tcp_sendmsg+0x2e/0x50
[  364.465823][T12208]  ? __pfx_tcp_sendmsg+0x10/0x10
[  364.465840][T12208]  inet_sendmsg+0xb9/0x140
[  364.465858][T12208]  __sys_sendto+0x42a/0x4f0
[  364.465883][T12208]  ? __pfx___sys_sendto+0x10/0x10
[  364.465921][T12208]  ? ksys_write+0x1ba/0x250
[  364.465941][T12208]  ? __pfx_ksys_write+0x10/0x10
[  364.465964][T12208]  __x64_sys_sendto+0xe0/0x1c0
[  364.465994][T12208]  ? do_syscall_64+0x91/0x250
[  364.466010][T12208]  ? lockdep_hardirqs_on+0x7c/0x110
[  364.466035][T12208]  do_syscall_64+0xcd/0x250
[  364.466052][T12208]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.466075][T12208] RIP: 0033:0x7ff33c58d169
[  364.466090][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.466105][T12208] RSP: 002b:00007ff33d465038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  364.466123][T12208] RAX: ffffffffffffffda RBX: 00007ff33c7a5fa0 RCX: 00007ff33c58d169
[  364.466133][T12208] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000004
[  364.466144][T12208] RBP: 00007ff33d465090 R08: 0000000000000000 R09: 0000000000000000
[  364.466154][T12208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.466162][T12208] R13: 0000000000000000 R14: 00007ff33c7a5fa0 R15: 00007fffc96b0608
[  364.466181][T12208]  </TASK>
[  364.468428][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.732188][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.215309][ T5863] usb 2-1: USB disconnect, device number 27
[  365.631295][   T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  365.686302][   T55] Bluetooth: hci0: command tx timeout
[  365.719374][   T10] ath9k_htc: Failed to initialize the device
[  365.794620][ T5863] usb 2-1: ath9k_htc: USB layer deinitialized
[  366.093150][T12061] team0: Port device team_slave_0 added
[  366.183182][T12061] team0: Port device team_slave_1 added
[  366.564483][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  366.617909][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.699201][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  366.713045][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  366.720057][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  366.746185][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.013684][T12061] hsr_slave_0: entered promiscuous mode
[  367.076010][T12061] hsr_slave_1: entered promiscuous mode
[  367.115116][T12061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  367.194389][T12061] Cannot create hsr debugfs directory
[  367.228110][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1307'.
[  367.289583][T12238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.780196][T12274] FAULT_INJECTION: forcing a failure.
[  368.780196][T12274] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.809141][T12274] CPU: 1 UID: 0 PID: 12274 Comm: syz.4.1313 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  368.809164][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  368.809172][T12274] Call Trace:
[  368.809177][T12274]  <TASK>
[  368.809183][T12274]  dump_stack_lvl+0x16c/0x1f0
[  368.809210][T12274]  should_fail_ex+0x50a/0x650
[  368.809226][T12274]  _copy_from_user+0x2e/0xd0
[  368.809243][T12274]  copy_msghdr_from_user+0x99/0x160
[  368.809266][T12274]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  368.809291][T12274]  ? __lock_acquire+0x5b6/0x1b80
[  368.809308][T12274]  ___sys_recvmsg+0xdc/0x1a0
[  368.809329][T12274]  ? __pfx____sys_recvmsg+0x10/0x10
[  368.809358][T12274]  ? __fget_files+0x20e/0x3b0
[  368.809380][T12274]  __sys_recvmsg+0x16b/0x220
[  368.809394][T12274]  ? __pfx___sys_recvmsg+0x10/0x10
[  368.809412][T12274]  ? rcu_is_watching+0x12/0xc0
[  368.809434][T12274]  do_syscall_64+0xcd/0x250
[  368.809449][T12274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.809469][T12274] RIP: 0033:0x7fba9698d169
[  368.809480][T12274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.809494][T12274] RSP: 002b:00007fba97777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  368.809510][T12274] RAX: ffffffffffffffda RBX: 00007fba96ba5fa0 RCX: 00007fba9698d169
[  368.809519][T12274] RDX: 0000000000010000 RSI: 0000200000000100 RDI: 0000000000000004
[  368.809528][T12274] RBP: 00007fba97777090 R08: 0000000000000000 R09: 0000000000000000
[  368.809537][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.809545][T12274] R13: 0000000000000000 R14: 00007fba96ba5fa0 R15: 00007ffc24c5b578
[  368.809562][T12274]  </TASK>
[  368.809929][T12061] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  368.894895][T12281] FAULT_INJECTION: forcing a failure.
[  368.894895][T12281] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  369.008639][T12061] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  369.043064][T12281] CPU: 1 UID: 0 PID: 12281 Comm: syz.8.1317 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  369.043090][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  369.043099][T12281] Call Trace:
[  369.043104][T12281]  <TASK>
[  369.043117][T12281]  dump_stack_lvl+0x16c/0x1f0
[  369.043148][T12281]  should_fail_ex+0x50a/0x650
[  369.043168][T12281]  _copy_from_user+0x2e/0xd0
[  369.043187][T12281]  copy_msghdr_from_user+0x99/0x160
[  369.043216][T12281]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  369.043248][T12281]  ___sys_sendmsg+0xff/0x1e0
[  369.043273][T12281]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.043296][T12281]  ? __lock_acquire+0x5b6/0x1b80
[  369.043328][T12281]  ? __fget_files+0x20e/0x3b0
[  369.043354][T12281]  __sys_sendmsg+0x16e/0x220
[  369.043370][T12281]  ? __pfx___sys_sendmsg+0x10/0x10
[  369.043391][T12281]  ? rcu_is_watching+0x12/0xc0
[  369.043418][T12281]  do_syscall_64+0xcd/0x250
[  369.043436][T12281]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.043458][T12281] RIP: 0033:0x7ff9ebb8d169
[  369.043470][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.043485][T12281] RSP: 002b:00007ff9e99f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.043503][T12281] RAX: ffffffffffffffda RBX: 00007ff9ebda5fa0 RCX: 00007ff9ebb8d169
[  369.043514][T12281] RDX: 0000000000000850 RSI: 0000200000000240 RDI: 000000000000000b
[  369.043524][T12281] RBP: 00007ff9e99f6090 R08: 0000000000000000 R09: 0000000000000000
[  369.043534][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.043545][T12281] R13: 0000000000000000 R14: 00007ff9ebda5fa0 R15: 00007ffce96de928
[  369.043564][T12281]  </TASK>
[  369.048939][T12061] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  369.244739][T12061] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  369.664431][T12061] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.705981][T12061] 8021q: adding VLAN 0 to HW filter on device team0
[  369.752221][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.759302][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.825890][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.833028][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.865798][   T30] audit: type=1400 audit(1742910388.910:1058): avc:  denied  { watch watch_reads } for  pid=12292 comm="syz.8.1319" path="/proc/537/task/537/net/tcp" dev="proc" ino=4026533820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
[  370.218957][   T30] audit: type=1400 audit(1742910389.280:1059): avc:  denied  { getopt } for  pid=12311 comm="syz.7.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  370.366210][T12319] FAULT_INJECTION: forcing a failure.
[  370.366210][T12319] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.379465][T12319] CPU: 1 UID: 0 PID: 12319 Comm: syz.8.1324 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  370.379490][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  370.379501][T12319] Call Trace:
[  370.379507][T12319]  <TASK>
[  370.379514][T12319]  dump_stack_lvl+0x16c/0x1f0
[  370.379545][T12319]  should_fail_ex+0x50a/0x650
[  370.379565][T12319]  _copy_from_user+0x2e/0xd0
[  370.379584][T12319]  do_sock_getsockopt+0x5f6/0x800
[  370.379607][T12319]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  370.379626][T12319]  ? __fget_files+0x204/0x3b0
[  370.379652][T12319]  ? __fget_files+0x20e/0x3b0
[  370.379677][T12319]  __sys_getsockopt+0x12f/0x260
[  370.379706][T12319]  __x64_sys_getsockopt+0xbd/0x160
[  370.379731][T12319]  ? do_syscall_64+0x91/0x250
[  370.379747][T12319]  ? lockdep_hardirqs_on+0x7c/0x110
[  370.379772][T12319]  do_syscall_64+0xcd/0x250
[  370.379789][T12319]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.379814][T12319] RIP: 0033:0x7ff9ebb8d169
[  370.379827][T12319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  370.379844][T12319] RSP: 002b:00007ff9e99b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  370.379861][T12319] RAX: ffffffffffffffda RBX: 00007ff9ebda6160 RCX: 00007ff9ebb8d169
[  370.379872][T12319] RDX: 0000000000000000 RSI: 0000000000000118 RDI: 0000000000000006
[  370.379882][T12319] RBP: 00007ff9e99b4090 R08: 0000000000000000 R09: 0000000000000000
[  370.379908][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.379918][T12319] R13: 0000000000000000 R14: 00007ff9ebda6160 R15: 00007ffce96de928
[  370.379937][T12319]  </TASK>
[  370.380419][   T55] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  370.560319][ T5818] Bluetooth: hci5: command 0x1003 tx timeout
[  370.735986][T12061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.559843][T12061] veth0_vlan: entered promiscuous mode
[  371.614987][T12061] veth1_vlan: entered promiscuous mode
[  371.762386][T12061] veth0_macvtap: entered promiscuous mode
[  371.786371][T12061] veth1_macvtap: entered promiscuous mode
[  371.837853][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.890171][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.931473][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.974128][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.018884][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.061566][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.091476][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.139264][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.152444][ T5863] libceph: connect (1)[c::]:6789 error -101
[  372.158793][ T5863] libceph: mon0 (1)[c::]:6789 connect error
[  372.169205][T12061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.186958][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.197535][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.207869][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.233393][T12374] ceph: No mds server is up or the cluster is laggy
[  372.296738][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.316918][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.390492][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.414184][T12061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  372.433358][ T5863] libceph: connect (1)[c::]:6789 error -101
[  372.449976][ T5863] libceph: mon0 (1)[c::]:6789 connect error
[  372.464547][T12061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.499667][T12061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.548309][T12061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.557356][T12061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.575263][T12061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.608141][T12061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.735176][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.763432][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.804752][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.841954][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.655228][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.891703][   T30] audit: type=1400 audit(1742910392.840:1060): avc:  denied  { ioctl } for  pid=12421 comm="syz.1.1340" path="socket:[40021]" dev="sockfs" ino=40021 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  374.281060][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.412496][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.692242][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.775172][   T13] bridge_slave_1: left allmulticast mode
[  374.781008][   T13] bridge_slave_1: left promiscuous mode
[  374.786846][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.796399][   T13] bridge_slave_0: left allmulticast mode
[  374.802373][   T13] bridge_slave_0: left promiscuous mode
[  374.808036][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.029112][T12484] 9pnet_fd: Insufficient options for proto=fd
[  375.113821][T12492] netlink: 'syz.7.1344': attribute type 9 has an invalid length.
[  375.199933][T12500] netlink: 'syz.4.1346': attribute type 1 has an invalid length.
[  375.228841][T12500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.246473][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  375.257868][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  375.275023][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  375.289674][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  375.317013][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  375.331631][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  375.374607][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.387028][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  375.397534][   T13] bond0 (unregistering): Released all slaves
[  375.422481][ T5909] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  375.541527][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  375.596989][ T5909] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  375.622663][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.662381][ T5909] usb 2-1: Product: syz
[  375.666691][ T5909] usb 2-1: Manufacturer: syz
[  375.683598][ T5909] usb 2-1: SerialNumber: syz
[  375.704052][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  375.725805][ T5909] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  375.744456][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  375.779105][ T5864] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  375.880590][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  375.947718][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  376.027844][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  376.048476][   T13] hsr_slave_0: left promiscuous mode
[  376.069939][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.070517][   T13] hsr_slave_1: left promiscuous mode
[  376.093019][   T10] usb 5-1: config 0 descriptor??
[  376.130705][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.151172][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.166303][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.173935][ T1201] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  376.175896][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.210591][ T5863] usb 2-1: USB disconnect, device number 28
[  376.237274][   T13] veth1_macvtap: left promiscuous mode
[  376.248358][   T13] veth0_macvtap: left promiscuous mode
[  376.254363][   T13] veth1_vlan: left promiscuous mode
[  376.259861][   T13] veth0_vlan: left promiscuous mode
[  376.403339][ T1201] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.418706][ T1201] usb 9-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00
[  376.439027][ T1201] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.502306][   T30] audit: type=1400 audit(1742910395.560:1061): avc:  denied  { create } for  pid=12504 comm="syz.4.1347" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  376.939851][ T5864] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  376.946858][ T5864] ath9k_htc: Failed to initialize the device
[  376.953674][ T1201] usb 9-1: config 0 descriptor??
[  376.959173][ T5863] usb 2-1: ath9k_htc: USB layer deinitialized
[  377.008250][   T30] audit: type=1400 audit(1742910395.560:1062): avc:  denied  { write } for  pid=12504 comm="syz.4.1347" name="file0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  377.055375][   T30] audit: type=1400 audit(1742910395.560:1063): avc:  denied  { open } for  pid=12504 comm="syz.4.1347" path="/163/file0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  377.408634][   T55] Bluetooth: hci0: command tx timeout
[  377.528420][ T1201] asus 0003:0B05:183D.000E: unknown main item tag 0x0
[  377.538994][ T1201] asus 0003:0B05:183D.000E: unknown main item tag 0x0
[  377.539052][ T1201] asus 0003:0B05:183D.000E: unknown main item tag 0x0
[  377.539075][ T1201] asus 0003:0B05:183D.000E: unknown main item tag 0x0
[  377.539094][ T1201] asus 0003:0B05:183D.000E: unknown main item tag 0x0
[  377.542006][ T1201] asus 0003:0B05:183D.000E: hidraw0: USB HID v0.01 Device [HID 0b05:183d] on usb-dummy_hcd.8-1/input0
[  377.580953][ T1201] asus 0003:0B05:183D.000E: Asus input not registered
[  377.594044][ T1201] asus 0003:0B05:183D.000E: probe with driver asus failed with error -12
[  377.661142][T12555] netlink: 'syz.7.1351': attribute type 39 has an invalid length.
[  377.698470][ T1201] usb 9-1: USB disconnect, device number 16
[  377.937648][   T13] team0 (unregistering): Port device team_slave_1 removed
[  378.000512][   T13] team0 (unregistering): Port device team_slave_0 removed
[  378.130022][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  378.136581][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  378.151633][   T30] audit: type=1400 audit(1742910397.210:1064): avc:  denied  { bind } for  pid=12578 comm="syz.8.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  378.174355][   T30] audit: type=1400 audit(1742910397.240:1065): avc:  denied  { listen } for  pid=12578 comm="syz.8.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  378.194172][   T30] audit: type=1400 audit(1742910397.240:1066): avc:  denied  { write } for  pid=12578 comm="syz.8.1353" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  378.319848][   T10] hdpvr 5-1:0.0: unexpected answer of status request, len -71
[  378.342968][   T10] hdpvr 5-1:0.0: device init failed
[  378.359105][   T30] audit: type=1400 audit(1742910397.420:1067): avc:  denied  { unlink } for  pid=8641 comm="syz-executor" name="file0" dev="tmpfs" ino=902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  378.396486][   T10] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  378.433092][   T10] usb 5-1: USB disconnect, device number 20
[  378.483392][ T5859] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  378.621635][T12588] FAULT_INJECTION: forcing a failure.
[  378.621635][T12588] name failslab, interval 1, probability 0, space 0, times 0
[  378.634750][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.4.1354 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  378.634775][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  378.634785][T12588] Call Trace:
[  378.634790][T12588]  <TASK>
[  378.634797][T12588]  dump_stack_lvl+0x16c/0x1f0
[  378.634828][T12588]  should_fail_ex+0x50a/0x650
[  378.634845][T12588]  ? __kvmalloc_node_noprof+0x11b/0x600
[  378.634870][T12588]  should_failslab+0xc2/0x120
[  378.634895][T12588]  __kvmalloc_node_noprof+0x12e/0x600
[  378.634917][T12588]  ? __pfx___mutex_lock+0x10/0x10
[  378.634932][T12588]  ? traverse.part.0.constprop.0+0x392/0x640
[  378.634953][T12588]  ? __mutex_lock+0x1cc/0xb10
[  378.634970][T12588]  ? traverse.part.0.constprop.0+0x392/0x640
[  378.634996][T12588]  traverse.part.0.constprop.0+0x392/0x640
[  378.635017][T12588]  ? __pfx___mutex_lock+0x10/0x10
[  378.635032][T12588]  ? find_held_lock+0x2b/0x80
[  378.635058][T12588]  seq_lseek+0x2b4/0x440
[  378.635081][T12588]  proc_reg_llseek+0x205/0x2f0
[  378.635108][T12588]  ksys_lseek+0xf0/0x1b0
[  378.635128][T12588]  do_syscall_64+0xcd/0x250
[  378.635144][T12588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.635166][T12588] RIP: 0033:0x7fba9698d169
[  378.635180][T12588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.635195][T12588] RSP: 002b:00007fba97756038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008
[  378.635211][T12588] RAX: ffffffffffffffda RBX: 00007fba96ba6080 RCX: 00007fba9698d169
[  378.635222][T12588] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009
[  378.635232][T12588] RBP: 00007fba97756090 R08: 0000000000000000 R09: 0000000000000000
[  378.635242][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.635251][T12588] R13: 0000000000000000 R14: 00007fba96ba6080 R15: 00007ffc24c5b578
[  378.635270][T12588]  </TASK>
[  378.914627][ T5859] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.933399][ T5859] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  378.956526][ T5859] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  379.006606][ T5859] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  379.018125][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.044488][ T5859] usb 9-1: Product: syz
[  379.049479][ T5859] usb 9-1: Manufacturer: syz
[  379.054890][T12502] chnl_net:caif_netlink_parms(): no params data found
[  379.062004][ T5859] usb 9-1: SerialNumber: syz
[  379.071197][ T5859] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found
[  379.082122][ T5859] cdc_ncm 9-1:1.0: bind() failure
[  379.269026][T12602] pim6reg1: entered promiscuous mode
[  379.296560][   T10] usb 9-1: USB disconnect, device number 17
[  379.323598][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.350282][T12602] pim6reg1: entered allmulticast mode
[  379.375818][T12502] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.406129][T12502] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.416985][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1358'.
[  379.435088][T12502] bridge_slave_0: entered allmulticast mode
[  379.462099][T12502] bridge_slave_0: entered promiscuous mode
[  379.479177][T12502] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.487005][   T55] Bluetooth: hci0: command tx timeout
[  379.518076][T12502] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.538322][T12502] bridge_slave_1: entered allmulticast mode
[  379.560460][T12502] bridge_slave_1: entered promiscuous mode
[  379.703012][T12502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  379.713712][T12502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  379.749451][T12502] team0: Port device team_slave_0 added
[  379.859649][   T30] audit: type=1400 audit(1742910398.840:1068): avc:  denied  { read } for  pid=12622 comm="syz.7.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  380.182568][T12502] team0: Port device team_slave_1 added
[  380.369104][T12502] batman_adv: batadv0: Adding interface: batadv_slave_0
[  380.386611][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.495468][T12502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  380.526136][T12502] batman_adv: batadv0: Adding interface: batadv_slave_1
[  380.533969][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  380.561093][T12502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  380.611486][ T8268] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  380.628168][T12502] hsr_slave_0: entered promiscuous mode
[  380.642066][T12502] hsr_slave_1: entered promiscuous mode
[  380.651187][T12502] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  380.661443][T12502] Cannot create hsr debugfs directory
[  380.788989][ T8268] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  380.817742][ T8268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.841711][ T8268] usb 9-1: Product: syz
[  380.845921][ T8268] usb 9-1: Manufacturer: syz
[  380.858520][ T8268] usb 9-1: SerialNumber: syz
[  380.866096][ T8268] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  380.879628][   T24] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  381.146267][T12502] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  381.156957][T12502] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  381.165693][T12502] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  381.186149][T12502] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  381.277796][T12502] 8021q: adding VLAN 0 to HW filter on device bond0
[  381.309936][T12502] 8021q: adding VLAN 0 to HW filter on device team0
[  381.315193][ T8268] usb 9-1: USB disconnect, device number 18
[  381.329898][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.337034][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.379702][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.386830][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.563464][   T55] Bluetooth: hci0: command tx timeout
[  381.720625][T12502] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.758037][T12712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.031774][   T24] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  382.039897][   T24] ath9k_htc: Failed to initialize the device
[  382.336650][ T8268] usb 9-1: ath9k_htc: USB layer deinitialized
[  382.794379][T12502] veth0_vlan: entered promiscuous mode
[  382.809884][T12502] veth1_vlan: entered promiscuous mode
[  382.856821][T12502] veth0_macvtap: entered promiscuous mode
[  382.916578][T12502] veth1_macvtap: entered promiscuous mode
[  382.933748][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.954991][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.993978][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.016386][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.041644][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.065974][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.082754][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.103615][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.142675][T12502] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.166027][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.178299][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.189067][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.202239][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.216132][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.226859][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.237197][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.249137][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.317149][ T5864] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  383.460088][T12502] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.502463][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short
[  383.521309][ T5864] usb 2-1: not running at top speed; connect to a high speed hub
[  383.540946][ T5864] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2
[  383.541662][T12502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.561767][ T5864] usb 2-1: config 219 interface 0 has no altsetting 0
[  383.578233][ T5864] usb 2-1: config 219 interface 0 has no altsetting 1
[  383.599004][T12502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.601044][ T5864] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[  383.610929][T12502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.663588][   T55] Bluetooth: hci0: command tx timeout
[  383.797231][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.941681][ T5864] usb 2-1: Product: ÐŽ
[  383.953859][ T5864] usb 2-1: Manufacturer: █뜈繨ᵡ놌ᓱ�﷨犾㗣ཤ晱瓰ꎶ련젯�⚈ᗘﺠ�飓ꯕ쪩㲔玴3Ⱎ裒個圕䎊孴玥��ˉὶḗﮙ凌�䣱䊟上쭨㋭рḊ㣉�헷ﺳ앖ᅔ晉➥擞全쪹�ㆹ짚袮핋낉≚祳﷪ꃕ뙮ힰ虙촩ợ㱯�῅쬂찡ꆇਧ立泼藣
[  384.002924][ T5864] usb 2-1: SerialNumber: 䀊
[  384.061478][T12502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.150871][T12791] x_tables: duplicate underflow at hook 2
[  384.260555][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.281216][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.298066][ T5864] usb 2-1: selecting invalid altsetting 0
[  384.358787][T12798] FAULT_INJECTION: forcing a failure.
[  384.358787][T12798] name failslab, interval 1, probability 0, space 0, times 0
[  384.371675][T12798] CPU: 1 UID: 0 PID: 12798 Comm: syz.7.1380 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  384.371699][T12798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  384.371710][T12798] Call Trace:
[  384.371715][T12798]  <TASK>
[  384.371722][T12798]  dump_stack_lvl+0x16c/0x1f0
[  384.371754][T12798]  should_fail_ex+0x50a/0x650
[  384.371771][T12798]  ? fs_reclaim_acquire+0xae/0x150
[  384.371793][T12798]  ? tomoyo_realpath_from_path+0xb9/0x720
[  384.371810][T12798]  should_failslab+0xc2/0x120
[  384.371836][T12798]  __kmalloc_noprof+0xcb/0x510
[  384.371863][T12798]  tomoyo_realpath_from_path+0xb9/0x720
[  384.371882][T12798]  ? tomoyo_profile+0x47/0x60
[  384.371903][T12798]  tomoyo_path_number_perm+0x248/0x590
[  384.371931][T12798]  ? tomoyo_path_number_perm+0x235/0x590
[  384.371956][T12798]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  384.371980][T12798]  ? find_held_lock+0x2b/0x80
[  384.372020][T12798]  ? find_held_lock+0x2b/0x80
[  384.372044][T12798]  ? __fget_files+0x204/0x3b0
[  384.372069][T12798]  ? __fget_files+0x20e/0x3b0
[  384.372093][T12798]  security_file_ioctl+0x9b/0x240
[  384.372120][T12798]  __x64_sys_ioctl+0xb7/0x200
[  384.372141][T12798]  do_syscall_64+0xcd/0x250
[  384.372159][T12798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.372183][T12798] RIP: 0033:0x7ff33c58d169
[  384.372197][T12798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  384.372214][T12798] RSP: 002b:00007ff33d423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  384.372230][T12798] RAX: ffffffffffffffda RBX: 00007ff33c7a6160 RCX: 00007ff33c58d169
[  384.372242][T12798] RDX: 0000200000000080 RSI: 00000000000089e2 RDI: 0000000000000006
[  384.372252][T12798] RBP: 00007ff33d423090 R08: 0000000000000000 R09: 0000000000000000
[  384.372263][T12798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.372272][T12798] R13: 0000000000000000 R14: 00007ff33c7a6160 R15: 00007fffc96b0608
[  384.372292][T12798]  </TASK>
[  384.372300][T12798] ERROR: Out of memory at tomoyo_realpath_from_path.
[  384.517667][ T5864] usb 2-1: selecting invalid altsetting 0
[  384.531887][ T2147] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  384.545776][ T5864] usb 2-1: USB disconnect, device number 29
[  384.598362][   T30] audit: type=1400 audit(1742910403.580:1069): avc:  denied  { ioctl } for  pid=12789 comm="syz.7.1380" path="socket:[40739]" dev="sockfs" ino=40739 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  384.650680][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.673476][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.712966][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.732216][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.745561][ T2147] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  384.764860][ T2147] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.781617][ T2147] usb 9-1: Product: syz
[  384.793678][ T2147] usb 9-1: Manufacturer: syz
[  384.801503][ T2147] usb 9-1: SerialNumber: syz
[  384.823587][ T2147] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  384.847182][ T5859] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  385.266850][ T5864] usb 9-1: USB disconnect, device number 19
[  385.414833][ T2147] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  385.478937][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.510037][T12836] netlink: 'syz.4.1387': attribute type 15 has an invalid length.
[  385.526542][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'.
[  385.602751][ T2147] usb 2-1: config 4 has an invalid interface number: 231 but max is 0
[  385.610957][ T2147] usb 2-1: config 4 has no interface number 0
[  385.619491][ T2147] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  385.629722][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.638101][ T2147] usb 2-1: Product: syz
[  385.644791][ T2147] usb 2-1: Manufacturer: syz
[  385.649403][ T2147] usb 2-1: SerialNumber: syz
[  385.658989][ T2147] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  385.753575][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.823469][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.882658][ T5859] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  385.889642][ T5859] ath9k_htc: Failed to initialize the device
[  385.900200][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.913105][ T5864] usb 9-1: ath9k_htc: USB layer deinitialized
[  385.976021][   T13] bridge_slave_1: left allmulticast mode
[  385.982769][   T13] bridge_slave_1: left promiscuous mode
[  385.988584][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.999685][   T13] bridge_slave_0: left allmulticast mode
[  386.006053][   T13] bridge_slave_0: left promiscuous mode
[  386.014561][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.064930][   T10] Process accounting resumed
[  386.074279][ T2147] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  386.093611][ T2147] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  386.113237][ T2147] usb 2-1: USB disconnect, device number 30
[  386.234206][   T30] audit: type=1400 audit(1742910405.300:1070): avc:  denied  { map } for  pid=12869 comm="syz.8.1389" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  386.285100][   T30] audit: type=1400 audit(1742910405.330:1071): avc:  denied  { execute } for  pid=12869 comm="syz.8.1389" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  386.695852][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.717923][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.798583][   T13] bond0 (unregistering): Released all slaves
[  386.810558][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  386.820644][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  386.829929][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  386.838299][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  386.846838][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  386.855173][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  387.005355][T12885] FAULT_INJECTION: forcing a failure.
[  387.005355][T12885] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  387.048830][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.1.1391 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  387.048855][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  387.048866][T12885] Call Trace:
[  387.048871][T12885]  <TASK>
[  387.048878][T12885]  dump_stack_lvl+0x16c/0x1f0
[  387.048909][T12885]  should_fail_ex+0x50a/0x650
[  387.048935][T12885]  _copy_from_user+0x2e/0xd0
[  387.048955][T12885]  copy_msghdr_from_user+0x99/0x160
[  387.048983][T12885]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  387.049013][T12885]  ? __lock_acquire+0x5b6/0x1b80
[  387.049034][T12885]  ___sys_recvmsg+0xdc/0x1a0
[  387.049060][T12885]  ? __pfx____sys_recvmsg+0x10/0x10
[  387.049094][T12885]  ? __fget_files+0x20e/0x3b0
[  387.049120][T12885]  __sys_recvmsg+0x16b/0x220
[  387.049136][T12885]  ? __pfx___sys_recvmsg+0x10/0x10
[  387.049159][T12885]  ? rcu_is_watching+0x12/0xc0
[  387.049185][T12885]  do_syscall_64+0xcd/0x250
[  387.049203][T12885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.049226][T12885] RIP: 0033:0x7f3e30d8d169
[  387.049239][T12885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.049255][T12885] RSP: 002b:00007f3e31c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  387.049272][T12885] RAX: ffffffffffffffda RBX: 00007f3e30fa5fa0 RCX: 00007f3e30d8d169
[  387.049283][T12885] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  387.049293][T12885] RBP: 00007f3e31c61090 R08: 0000000000000000 R09: 0000000000000000
[  387.049303][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.049313][T12885] R13: 0000000000000000 R14: 00007f3e30fa5fa0 R15: 00007ffd9d2a5978
[  387.049332][T12885]  </TASK>
[  387.070240][T12889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.233604][T12878] chnl_net:caif_netlink_parms(): no params data found
[  387.315918][   T30] audit: type=1400 audit(1742910406.370:1072): avc:  denied  { watch } for  pid=12895 comm="syz.8.1393" path="/190/bus" dev="overlay" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  387.424836][T12899] FAULT_INJECTION: forcing a failure.
[  387.424836][T12899] name failslab, interval 1, probability 0, space 0, times 0
[  387.460606][   T30] audit: type=1400 audit(1742910406.430:1073): avc:  denied  { mounton } for  pid=12895 comm="syz.8.1393" path="/190/bus/file0" dev="configfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  387.511541][T12899] CPU: 0 UID: 0 PID: 12899 Comm: syz.4.1395 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  387.511567][T12899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  387.511578][T12899] Call Trace:
[  387.511583][T12899]  <TASK>
[  387.511590][T12899]  dump_stack_lvl+0x16c/0x1f0
[  387.511623][T12899]  should_fail_ex+0x50a/0x650
[  387.511640][T12899]  ? kmem_cache_alloc_node_noprof+0x5f/0x3b0
[  387.511670][T12899]  should_failslab+0xc2/0x120
[  387.511694][T12899]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[  387.511718][T12899]  ? __alloc_skb+0x2b1/0x380
[  387.511746][T12899]  __alloc_skb+0x2b1/0x380
[  387.511769][T12899]  ? __pfx___alloc_skb+0x10/0x10
[  387.511796][T12899]  ? avc_has_perm_noaudit+0x119/0x3a0
[  387.511820][T12899]  alloc_skb_with_frags+0xe4/0x850
[  387.511837][T12899]  ? __lock_acquire+0x5b6/0x1b80
[  387.511859][T12899]  sock_alloc_send_pskb+0x7f1/0x980
[  387.511886][T12899]  ? __mutex_unlock_slowpath+0x164/0x6a0
[  387.511916][T12899]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  387.511940][T12899]  ? lockdep_unlock+0x64/0xe0
[  387.511962][T12899]  ? __lock_acquire+0xf79/0x1b80
[  387.511986][T12899]  l2cap_sock_alloc_skb_cb+0xca/0x500
[  387.512010][T12899]  ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10
[  387.512030][T12899]  ? __pfx___mutex_trylock_common+0x10/0x10
[  387.512052][T12899]  ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10
[  387.512075][T12899]  l2cap_chan_send+0x98a/0x2a30
[  387.512101][T12899]  ? __mutex_lock+0x1cc/0xb10
[  387.512117][T12899]  ? l2cap_sock_sendmsg+0x21a/0x300
[  387.512140][T12899]  ? __pfx_l2cap_chan_send+0x10/0x10
[  387.512174][T12899]  l2cap_sock_sendmsg+0x228/0x300
[  387.512197][T12899]  sock_write_iter+0x4fe/0x5b0
[  387.512218][T12899]  ? __pfx_sock_write_iter+0x10/0x10
[  387.512244][T12899]  ? bpf_lsm_file_permission+0x9/0x10
[  387.512267][T12899]  ? security_file_permission+0x71/0x210
[  387.512284][T12899]  ? rw_verify_area+0xcf/0x680
[  387.512304][T12899]  vfs_write+0x5ae/0x1150
[  387.512325][T12899]  ? __pfx_sock_write_iter+0x10/0x10
[  387.512346][T12899]  ? __pfx_vfs_write+0x10/0x10
[  387.512365][T12899]  ? find_held_lock+0x2b/0x80
[  387.512389][T12899]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  387.512423][T12899]  ksys_write+0x207/0x250
[  387.512443][T12899]  ? __pfx_ksys_write+0x10/0x10
[  387.512463][T12899]  ? rcu_is_watching+0x12/0xc0
[  387.512490][T12899]  do_syscall_64+0xcd/0x250
[  387.512507][T12899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.512531][T12899] RIP: 0033:0x7fba9698d169
[  387.512545][T12899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.512561][T12899] RSP: 002b:00007fba97777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  387.512577][T12899] RAX: ffffffffffffffda RBX: 00007fba96ba5fa0 RCX: 00007fba9698d169
[  387.512589][T12899] RDX: 000000000000fecc RSI: 0000200000000200 RDI: 0000000000000004
[  387.512599][T12899] RBP: 00007fba97777090 R08: 0000000000000000 R09: 0000000000000000
[  387.512609][T12899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.512618][T12899] R13: 0000000000000000 R14: 00007fba96ba5fa0 R15: 00007ffc24c5b578
[  387.512638][T12899]  </TASK>
[  388.032950][   T13] hsr_slave_0: left promiscuous mode
[  388.050344][   T13] hsr_slave_1: left promiscuous mode
[  388.056726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.064398][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  388.127854][T12912] FAULT_INJECTION: forcing a failure.
[  388.127854][T12912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.141049][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.4.1397 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  388.141071][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  388.141081][T12912] Call Trace:
[  388.141087][T12912]  <TASK>
[  388.141093][T12912]  dump_stack_lvl+0x16c/0x1f0
[  388.141124][T12912]  should_fail_ex+0x50a/0x650
[  388.141143][T12912]  _copy_from_user+0x2e/0xd0
[  388.141162][T12912]  copy_msghdr_from_user+0x99/0x160
[  388.141189][T12912]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  388.141213][T12912]  ? __lock_acquire+0xa92/0x1b80
[  388.141235][T12912]  ? kvm_sched_clock_read+0x11/0x20
[  388.141258][T12912]  ? sched_clock+0x38/0x60
[  388.141281][T12912]  ___sys_sendmsg+0xff/0x1e0
[  388.141307][T12912]  ? __pfx____sys_sendmsg+0x10/0x10
[  388.141332][T12912]  ? __lock_acquire+0x5b6/0x1b80
[  388.141360][T12912]  ? __fget_files+0x20e/0x3b0
[  388.141386][T12912]  __sys_sendmsg+0x16e/0x220
[  388.141406][T12912]  ? __pfx___sys_sendmsg+0x10/0x10
[  388.141421][T12912]  ? sched_clock_cpu+0x6d/0x4d0
[  388.141437][T12912]  ? find_held_lock+0x2b/0x80
[  388.141463][T12912]  ? trace_csd_function_exit+0x17f/0x1f0
[  388.141488][T12912]  do_syscall_64+0xcd/0x250
[  388.141505][T12912]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.141528][T12912] RIP: 0033:0x7fba9698d169
[  388.141542][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.141558][T12912] RSP: 002b:00007fba97756038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  388.141575][T12912] RAX: ffffffffffffffda RBX: 00007fba96ba6080 RCX: 00007fba9698d169
[  388.141587][T12912] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006
[  388.141597][T12912] RBP: 00007fba97756090 R08: 0000000000000000 R09: 0000000000000000
[  388.141607][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.141617][T12912] R13: 0000000000000000 R14: 00007fba96ba6080 R15: 00007ffc24c5b578
[  388.141636][T12912]  </TASK>
[  388.340461][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  388.366364][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  388.597666][   T13] veth1_macvtap: left promiscuous mode
[  388.629975][   T13] veth0_macvtap: left promiscuous mode
[  388.640138][   T13] veth1_vlan: left promiscuous mode
[  388.652554][   T13] veth0_vlan: left promiscuous mode
[  388.976919][ T5818] Bluetooth: hci0: command tx timeout
[  390.305560][   T13] team0 (unregistering): Port device team_slave_1 removed
[  390.354142][   T13] team0 (unregistering): Port device team_slave_0 removed
[  391.012568][ T5818] Bluetooth: hci0: command tx timeout
[  391.212582][   T30] audit: type=1400 audit(1742910410.280:1074): avc:  denied  { ioctl } for  pid=12945 comm="syz.4.1409" path="socket:[42309]" dev="sockfs" ino=42309 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  391.300812][T12878] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.309260][T12878] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.316603][T12878] bridge_slave_0: entered allmulticast mode
[  391.323351][T12878] bridge_slave_0: entered promiscuous mode
[  391.330724][T12878] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.337901][T12878] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.345084][T12878] bridge_slave_1: entered allmulticast mode
[  391.351752][T12878] bridge_slave_1: entered promiscuous mode
[  391.411084][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.439185][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.781701][   T30] audit: type=1400 audit(1742910410.760:1075): avc:  denied  { write } for  pid=12953 comm="syz.7.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  392.102192][T12878] team0: Port device team_slave_0 added
[  392.157246][T12878] team0: Port device team_slave_1 added
[  392.441325][T12977] FAULT_INJECTION: forcing a failure.
[  392.441325][T12977] name failslab, interval 1, probability 0, space 0, times 0
[  392.454026][T12977] CPU: 1 UID: 0 PID: 12977 Comm: syz.7.1414 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  392.454051][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  392.454062][T12977] Call Trace:
[  392.454067][T12977]  <TASK>
[  392.454074][T12977]  dump_stack_lvl+0x16c/0x1f0
[  392.454105][T12977]  should_fail_ex+0x50a/0x650
[  392.454122][T12977]  ? kmem_cache_alloc_node_noprof+0x5f/0x3b0
[  392.454150][T12977]  should_failslab+0xc2/0x120
[  392.454175][T12977]  kmem_cache_alloc_node_noprof+0x72/0x3b0
[  392.454198][T12977]  ? find_held_lock+0x2b/0x80
[  392.454221][T12977]  ? __alloc_skb+0x2b1/0x380
[  392.454246][T12977]  ? netlink_autobind.isra.0+0x29c/0x5f0
[  392.454274][T12977]  __alloc_skb+0x2b1/0x380
[  392.454297][T12977]  ? __pfx___alloc_skb+0x10/0x10
[  392.454324][T12977]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  392.454352][T12977]  netlink_alloc_large_skb+0x69/0x130
[  392.454378][T12977]  netlink_sendmsg+0x686/0xd70
[  392.454407][T12977]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.454457][T12977]  sock_write_iter+0x4fe/0x5b0
[  392.454478][T12977]  ? __pfx_sock_write_iter+0x10/0x10
[  392.454504][T12977]  ? bpf_lsm_file_permission+0x9/0x10
[  392.454528][T12977]  ? security_file_permission+0x71/0x210
[  392.454547][T12977]  ? rw_verify_area+0xcf/0x680
[  392.454568][T12977]  vfs_write+0x5ae/0x1150
[  392.454624][T12977]  ? __pfx_sock_write_iter+0x10/0x10
[  392.454645][T12977]  ? __pfx_vfs_write+0x10/0x10
[  392.454664][T12977]  ? find_held_lock+0x2b/0x80
[  392.454687][T12977]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  392.454724][T12977]  ksys_write+0x207/0x250
[  392.454745][T12977]  ? __pfx_ksys_write+0x10/0x10
[  392.454767][T12977]  ? rcu_is_watching+0x12/0xc0
[  392.454794][T12977]  do_syscall_64+0xcd/0x250
[  392.454812][T12977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.454834][T12977] RIP: 0033:0x7ff33c58d169
[  392.454846][T12977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.454863][T12977] RSP: 002b:00007ff33d423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  392.454879][T12977] RAX: ffffffffffffffda RBX: 00007ff33c7a6160 RCX: 00007ff33c58d169
[  392.454891][T12977] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003
[  392.454902][T12977] RBP: 00007ff33d423090 R08: 0000000000000000 R09: 0000000000000000
[  392.454912][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  392.454922][T12977] R13: 0000000000000000 R14: 00007ff33c7a6160 R15: 00007fffc96b0608
[  392.454941][T12977]  </TASK>
[  393.311850][ T5818] Bluetooth: hci0: command tx timeout
[  393.715769][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  393.732683][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  393.741620][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  393.750728][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  393.758959][   T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  393.766328][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  393.821285][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.961543][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.002370][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.040315][T12984] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1415'.
[  394.096427][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.134242][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.167439][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.249977][T12878] hsr_slave_0: entered promiscuous mode
[  394.261933][T12878] hsr_slave_1: entered promiscuous mode
[  394.267770][T12878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  394.285816][   T30] audit: type=1400 audit(1742910413.350:1076): avc:  denied  { bind } for  pid=12992 comm="syz.7.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  394.318124][T12878] Cannot create hsr debugfs directory
[  394.344236][   T30] audit: type=1400 audit(1742910413.350:1077): avc:  denied  { name_bind } for  pid=12992 comm="syz.7.1418" src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[  394.391836][T13000] FAULT_INJECTION: forcing a failure.
[  394.391836][T13000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  394.404993][   T30] audit: type=1400 audit(1742910413.350:1078): avc:  denied  { node_bind } for  pid=12992 comm="syz.7.1418" saddr=2001:: src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[  394.418062][T13000] CPU: 0 UID: 0 PID: 13000 Comm: syz.7.1419 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  394.418086][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  394.418095][T13000] Call Trace:
[  394.418100][T13000]  <TASK>
[  394.418105][T13000]  dump_stack_lvl+0x16c/0x1f0
[  394.418133][T13000]  should_fail_ex+0x50a/0x650
[  394.418151][T13000]  _copy_from_user+0x2e/0xd0
[  394.418173][T13000]  move_addr_to_kernel+0x74/0x160
[  394.418193][T13000]  __sys_bind+0x11c/0x260
[  394.418213][T13000]  ? __pfx___sys_bind+0x10/0x10
[  394.418237][T13000]  ? __pfx_ksys_write+0x10/0x10
[  394.418256][T13000]  ? rcu_is_watching+0x12/0xc0
[  394.418278][T13000]  __x64_sys_bind+0x72/0xb0
[  394.418296][T13000]  ? lockdep_hardirqs_on+0x7c/0x110
[  394.418318][T13000]  do_syscall_64+0xcd/0x250
[  394.418333][T13000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.418353][T13000] RIP: 0033:0x7ff33c58d169
[  394.418366][T13000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  394.418380][T13000] RSP: 002b:00007ff33d465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  394.418395][T13000] RAX: ffffffffffffffda RBX: 00007ff33c7a5fa0 RCX: 00007ff33c58d169
[  394.418405][T13000] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003
[  394.418414][T13000] RBP: 00007ff33d465090 R08: 0000000000000000 R09: 0000000000000000
[  394.418423][T13000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.418432][T13000] R13: 0000000000000000 R14: 00007ff33c7a5fa0 R15: 00007fffc96b0608
[  394.418448][T13000]  </TASK>
[  394.657532][   T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.781786][   T30] audit: type=1400 audit(1742910413.380:1079): avc:  denied  { setopt } for  pid=12988 comm="syz.4.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  394.843016][   T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.932582][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  394.962018][   T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.057765][   T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.106499][   T24] usb 5-1: Using ep0 maxpacket: 8
[  395.123759][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a
[  395.141558][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.160086][   T24] usb 5-1: config 0 descriptor??
[  395.173390][   T24] pwc: Logitech QuickCam Notebook Pro USB webcam detected.
[  395.180622][   T24] pwc: Warning: more than 1 configuration available.
[  395.274229][ T5907] kernel read not supported for file /dsp1 (pid: 5907 comm: kworker/0:7)
[  395.321707][   T55] Bluetooth: hci0: command tx timeout
[  395.383048][   T13] bridge_slave_1: left allmulticast mode
[  395.388725][   T13] bridge_slave_1: left promiscuous mode
[  395.436611][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.466191][   T13] bridge_slave_0: left allmulticast mode
[  395.484314][   T13] bridge_slave_0: left promiscuous mode
[  395.490136][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.806907][   T55] Bluetooth: hci3: command tx timeout
[  395.961861][T13039] syz.7.1424: attempt to access beyond end of device
[  395.961861][T13039] nbd7: rw=0, sector=16, nr_sectors = 1 limit=0
[  395.977278][T13039] qnx6: unable to read the first superblock
[  395.986524][T13039] syz.7.1424: attempt to access beyond end of device
[  395.986524][T13039] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  395.999465][T13039] qnx6: unable to read the first superblock
[  396.008286][T13039] qnx6: unable to read the first superblock
[  396.051982][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  396.065346][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  396.081263][   T13] bond0 (unregistering): Released all slaves
[  396.234945][   T13] bond1 (unregistering): Released all slaves
[  396.255878][   T24] pwc: Failed to set LED on/off time (-71)
[  396.271921][   T24] pwc: send_video_command error -71
[  396.281656][   T24] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  396.304785][   T13] tipc: Disabling bearer <udp:syz2>
[  396.310073][   T13] tipc: Left network mode
[  396.321757][   T24] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  396.352870][   T24] usb 5-1: USB disconnect, device number 21
[  396.377483][T12980] chnl_net:caif_netlink_parms(): no params data found
[  396.617025][T12980] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.633767][T12980] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.649267][T12980] bridge_slave_0: entered allmulticast mode
[  396.663457][T12980] bridge_slave_0: entered promiscuous mode
[  396.685569][T12980] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.695248][T12980] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.704885][T12980] bridge_slave_1: entered allmulticast mode
[  396.713905][T12980] bridge_slave_1: entered promiscuous mode
[  396.751571][T12878] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  396.779984][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.789652][T12878] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  396.801112][   T13] hsr_slave_0: left promiscuous mode
[  396.811130][   T13] hsr_slave_1: left promiscuous mode
[  396.816791][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.826401][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.845702][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.859248][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.884901][   T13] veth1_macvtap: left promiscuous mode
[  396.901774][   T13] veth0_macvtap: left promiscuous mode
[  396.907338][   T13] veth1_vlan: left promiscuous mode
[  396.927440][   T13] veth0_vlan: left promiscuous mode
[  397.050446][   T55] block nbd7: Receive control failed (result -32)
[  397.057569][ T5818] block nbd7: Receive control failed (result -32)
[  397.065734][T13044] block nbd7: shutting down sockets
[  397.216201][   T30] audit: type=1400 audit(1742910416.280:1080): avc:  denied  { setattr } for  pid=13076 comm="iou-wrk-13078" name="" dev="pipefs" ino=22544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  397.638329][   T13] team0 (unregistering): Port device team_slave_1 removed
[  397.692910][   T13] team0 (unregistering): Port device team_slave_0 removed
[  397.881704][ T5818] Bluetooth: hci3: command tx timeout
[  398.233426][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.271453][T12878] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  398.343423][T12980] team0: Port device team_slave_0 added
[  398.366510][T12878] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  398.400433][T12980] team0: Port device team_slave_1 added
[  398.475497][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.494613][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.555060][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.578135][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.587631][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.671522][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.753822][   T13] IPVS: stop unused estimator thread 0...
[  398.815776][T12980] hsr_slave_0: entered promiscuous mode
[  398.824966][T12980] hsr_slave_1: entered promiscuous mode
[  398.835839][T12980] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.846352][T12980] Cannot create hsr debugfs directory
[  399.027260][T12878] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.111573][T12878] 8021q: adding VLAN 0 to HW filter on device team0
[  399.172728][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.179835][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.422850][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.429999][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.961515][   T55] Bluetooth: hci3: command tx timeout
[  400.034320][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.336890][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.568046][   T30] audit: type=1400 audit(1742910419.620:1081): avc:  denied  { mounton } for  pid=13156 comm="syz.7.1436" path="/proc/600/cgroup" dev="proc" ino=42755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[  400.759447][T12980] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  400.780439][T12980] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  400.812731][T12980] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  400.842390][T12980] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  400.908377][T13146] xt_CT: No such helper "snmp_trap"
[  400.948260][T12878] veth0_vlan: entered promiscuous mode
[  400.986443][T12878] veth1_vlan: entered promiscuous mode
[  401.049661][T13179] Illegal XDP return value 4294967294 on prog  (id 175) dev N/A, expect packet loss!
[  401.063420][T12878] veth0_macvtap: entered promiscuous mode
[  401.077157][T12980] 8021q: adding VLAN 0 to HW filter on device bond0
[  401.090497][T12878] veth1_macvtap: entered promiscuous mode
[  401.107191][T12980] 8021q: adding VLAN 0 to HW filter on device team0
[  401.119508][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.126622][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.163794][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.170866][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.195975][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.208426][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.218661][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.229512][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.245869][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.264425][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.278419][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.310022][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.326074][ T8269] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  401.354708][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.364800][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.375699][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.401679][T12878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.421427][T12878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.456170][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.479829][T12878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.499380][T12878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.518347][T12878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.533745][ T8269] usb 5-1: Using ep0 maxpacket: 16
[  401.549411][T12878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.559208][ T8269] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  401.571482][ T8269] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.612751][ T8269] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  401.661019][ T8269] usb 5-1: config 1 has no interface number 1
[  401.690849][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.691522][ T8269] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  401.722197][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.735336][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.757972][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.766088][ T8269] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  401.825698][ T8269] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  401.861459][ T8269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.869503][ T8269] usb 5-1: Product: syz
[  401.883959][ T8269] usb 5-1: Manufacturer: syz
[  401.888611][ T8269] usb 5-1: SerialNumber: syz
[  401.921570][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.027043][T12980] veth0_vlan: entered promiscuous mode
[  402.043273][ T5818] Bluetooth: hci3: command tx timeout
[  402.062800][T12980] veth1_vlan: entered promiscuous mode
[  402.087851][T12980] veth0_macvtap: entered promiscuous mode
[  402.101333][T12980] veth1_macvtap: entered promiscuous mode
[  402.132661][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.167549][ T8269] usb 5-1: USB disconnect, device number 22
[  402.173568][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.194737][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.219414][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.241453][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.267834][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.279737][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  402.297393][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.308011][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.424551][   T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.473905][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.489621][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.499579][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.510167][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.520068][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.531068][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.541293][T12980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  402.554075][T12980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  402.564757][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1
[  402.604346][   T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.620251][T12980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  402.630338][T12980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  402.650622][T12980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  402.661573][T12980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.743531][   T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.816555][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.838578][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.860517][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.891592][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.955786][   T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.202052][   T53] bridge_slave_1: left allmulticast mode
[  403.207727][   T53] bridge_slave_1: left promiscuous mode
[  403.240434][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.302155][   T53] bridge_slave_0: left allmulticast mode
[  403.322095][   T53] bridge_slave_0: left promiscuous mode
[  403.329484][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.517265][T13266] 9pnet_fd: Insufficient options for proto=fd
[  404.524544][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  404.535708][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  404.545434][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  404.553824][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  404.562234][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  404.571691][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  404.696058][T13269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1444'.
[  404.757140][   T30] audit: type=1400 audit(1742910423.820:1082): avc:  denied  { map } for  pid=13270 comm="syz.3.1445" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  404.888393][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.901537][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.911271][   T53] bond0 (unregistering): Released all slaves
[  405.001689][ T1201] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  405.252747][ T1201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.680015][ T1201] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  405.689296][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.709916][ T1201] usb 4-1: config 0 descriptor??
[  405.928487][T13271] autofs: Bad value for 'fd'
[  405.969255][T13271] input: syz0 as /devices/virtual/input/input37
[  405.995799][T13283] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  406.002346][T13283] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  406.018323][T13283] vhci_hcd vhci_hcd.0: Device attached
[  406.044278][   T53] hsr_slave_0: left promiscuous mode
[  406.063882][   T53] hsr_slave_1: left promiscuous mode
[  406.139148][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.179697][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.256399][ T5909] vhci_hcd: vhci_device speed not set
[  406.285575][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  406.302010][   T53] batman_adv: batadv0: Removing interface: batadv_slave_1
[  406.360584][ T5909] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  406.397185][   T53] veth1_macvtap: left promiscuous mode
[  406.419669][   T53] veth0_macvtap: left promiscuous mode
[  406.437889][   T53] veth1_vlan: left promiscuous mode
[  406.445164][   T53] veth0_vlan: left promiscuous mode
[  406.577373][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  406.592761][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  406.601126][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  406.616837][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  406.624716][   T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  406.633599][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  406.702288][   T55] Bluetooth: hci0: command tx timeout
[  406.814855][T13284] vhci_hcd: connection reset by peer
[  406.828187][ T3564] vhci_hcd: stop threads
[  406.834677][ T3564] vhci_hcd: release socket
[  406.842786][ T3564] vhci_hcd: disconnect device
[  407.327958][   T53] team0 (unregistering): Port device team_slave_1 removed
[  407.365379][   T53] team0 (unregistering): Port device team_slave_0 removed
[  407.837439][T13264] chnl_net:caif_netlink_parms(): no params data found
[  407.986099][ T1201] usbhid 4-1:0.0: can't add hid device: -71
[  407.993137][ T1201] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  408.013246][ T1201] usb 4-1: USB disconnect, device number 9
[  408.541841][T13311] bridge_slave_0: left allmulticast mode
[  408.547582][T13311] bridge_slave_0: left promiscuous mode
[  408.556760][T13311] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.566986][   T30] audit: type=1400 audit(1742910427.630:1083): avc:  denied  { read } for  pid=13310 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  408.589426][T13311] bridge_slave_1: left allmulticast mode
[  408.596808][T13311] bridge_slave_1: left promiscuous mode
[  408.604173][T13311] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.616393][T13311] bond0: (slave bond_slave_0): Releasing backup interface
[  408.625836][T13311] bond0: (slave bond_slave_1): Releasing backup interface
[  408.648092][T13311] team0: Port device team_slave_0 removed
[  408.719627][T13311] team0: Port device team_slave_1 removed
[  408.729494][T13322] input: syz0 as /devices/virtual/input/input38
[  408.738726][T13311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  408.746399][T13311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  408.754729][T13311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  408.766148][ T5818] Bluetooth: hci2: command tx timeout
[  408.771693][   T55] Bluetooth: hci0: command tx timeout
[  408.777910][T13311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.793668][T13264] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.801727][T13264] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.810969][T13264] bridge_slave_0: entered allmulticast mode
[  408.832315][T13264] bridge_slave_0: entered promiscuous mode
[  408.857910][T13264] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.866619][T13264] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.879696][T13264] bridge_slave_1: entered allmulticast mode
[  408.895490][T13264] bridge_slave_1: entered promiscuous mode
[  408.931076][   T30] audit: type=1326 audit(1742910427.990:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9698d169 code=0x7ffc0000
[  408.943407][T13320] bridge_slave_0: left allmulticast mode
[  408.966492][T13320] bridge_slave_0: left promiscuous mode
[  408.974376][T13320] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.009529][T13320] bridge_slave_1: left allmulticast mode
[  409.016549][T13320] bridge_slave_1: left promiscuous mode
[  409.025515][T13320] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.079385][T13320] bond0: (slave bond_slave_0): Releasing backup interface
[  409.106283][   T30] audit: type=1326 audit(1742910427.990:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13321 comm="syz.4.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9698d169 code=0x7ffc0000
[  409.130648][T13320] bond0: (slave bond_slave_1): Releasing backup interface
[  409.305633][T13320] team_slave_0: left promiscuous mode
[  409.351041][T13320] team0: Port device team_slave_0 removed
[  409.360476][T13320] team_slave_1: left promiscuous mode
[  409.369051][T13320] team0: Port device team_slave_1 removed
[  409.377994][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.389984][T13320] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.401229][T13320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  409.410840][T13320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.477477][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.507858][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.629245][T13334] FAULT_INJECTION: forcing a failure.
[  409.629245][T13334] name failslab, interval 1, probability 0, space 0, times 0
[  409.659447][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.7.1461 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  409.659473][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  409.659484][T13334] Call Trace:
[  409.659490][T13334]  <TASK>
[  409.659497][T13334]  dump_stack_lvl+0x16c/0x1f0
[  409.659526][T13334]  should_fail_ex+0x50a/0x650
[  409.659543][T13334]  ? fs_reclaim_acquire+0xae/0x150
[  409.659562][T13334]  ? tomoyo_realpath_from_path+0xb9/0x720
[  409.659584][T13334]  should_failslab+0xc2/0x120
[  409.659609][T13334]  __kmalloc_noprof+0xcb/0x510
[  409.659634][T13334]  tomoyo_realpath_from_path+0xb9/0x720
[  409.659652][T13334]  ? tomoyo_profile+0x47/0x60
[  409.659671][T13334]  tomoyo_path_number_perm+0x248/0x590
[  409.659693][T13334]  ? tomoyo_path_number_perm+0x235/0x590
[  409.659717][T13334]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  409.659740][T13334]  ? find_held_lock+0x2b/0x80
[  409.659776][T13334]  ? find_held_lock+0x2b/0x80
[  409.659798][T13334]  ? __fget_files+0x204/0x3b0
[  409.659821][T13334]  ? __fget_files+0x20e/0x3b0
[  409.659844][T13334]  security_file_ioctl+0x9b/0x240
[  409.659870][T13334]  __x64_sys_ioctl+0xb7/0x200
[  409.659890][T13334]  do_syscall_64+0xcd/0x250
[  409.659906][T13334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.659928][T13334] RIP: 0033:0x7ff33c58d169
[  409.659940][T13334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.659956][T13334] RSP: 002b:00007ff33d465038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.659972][T13334] RAX: ffffffffffffffda RBX: 00007ff33c7a5fa0 RCX: 00007ff33c58d169
[  409.659983][T13334] RDX: 0000200000000500 RSI: 00000000c0d05605 RDI: 0000000000000003
[  409.659993][T13334] RBP: 00007ff33d465090 R08: 0000000000000000 R09: 0000000000000000
[  409.660002][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.660012][T13334] R13: 0000000000000000 R14: 00007ff33c7a5fa0 R15: 00007fffc96b0608
[  409.660029][T13334]  </TASK>
[  409.660035][T13334] ERROR: Out of memory at tomoyo_realpath_from_path.
[  409.691055][T13264] team0: Port device team_slave_0 added
[  409.884996][T13264] team0: Port device team_slave_1 added
[  410.137848][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'.
[  410.858581][ T5818] Bluetooth: hci2: command tx timeout
[  410.858590][   T55] Bluetooth: hci0: command tx timeout
[  410.920169][T13352] FAULT_INJECTION: forcing a failure.
[  410.920169][T13352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  410.933623][T13352] CPU: 0 UID: 0 PID: 13352 Comm: syz.3.1466 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  410.933646][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  410.933656][T13352] Call Trace:
[  410.933661][T13352]  <TASK>
[  410.933668][T13352]  dump_stack_lvl+0x16c/0x1f0
[  410.933698][T13352]  should_fail_ex+0x50a/0x650
[  410.933718][T13352]  _copy_to_user+0x32/0xd0
[  410.933739][T13352]  simple_read_from_buffer+0xe0/0x170
[  410.933761][T13352]  proc_fail_nth_read+0x198/0x270
[  410.933784][T13352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  410.933806][T13352]  ? rw_verify_area+0xcf/0x680
[  410.933824][T13352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  410.933844][T13352]  vfs_read+0x1df/0xbf0
[  410.933867][T13352]  ? __pfx___mutex_lock+0x10/0x10
[  410.933883][T13352]  ? __pfx_vfs_read+0x10/0x10
[  410.933908][T13352]  ? __fget_files+0x20e/0x3b0
[  410.933935][T13352]  ksys_read+0x12b/0x250
[  410.933955][T13352]  ? __pfx_ksys_read+0x10/0x10
[  410.933976][T13352]  ? __x64_sys_read+0x11/0xb0
[  410.933996][T13352]  ? __x64_sys_read+0x4f/0xb0
[  410.934019][T13352]  do_syscall_64+0xcd/0x250
[  410.934036][T13352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  410.934060][T13352] RIP: 0033:0x7fb791b8bb7c
[  410.934073][T13352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  410.934090][T13352] RSP: 002b:00007fb792958030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  410.934106][T13352] RAX: ffffffffffffffda RBX: 00007fb791da6080 RCX: 00007fb791b8bb7c
[  410.934117][T13352] RDX: 000000000000000f RSI: 00007fb7929580a0 RDI: 0000000000000005
[  410.934127][T13352] RBP: 00007fb792958090 R08: 0000000000000000 R09: 0000000000000000
[  410.934137][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  410.934147][T13352] R13: 0000000000000000 R14: 00007fb791da6080 R15: 00007ffeda154468
[  410.934166][T13352]  </TASK>
[  411.359662][T13293] chnl_net:caif_netlink_parms(): no params data found
[  411.389499][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.399859][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.426708][T13357] netlink: 'syz.7.1467': attribute type 39 has an invalid length.
[  411.446402][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.458476][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.465705][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.471520][ T5909] vhci_hcd: vhci_device speed not set
[  411.497080][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.514204][T13359] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  411.521511][T13357] veth0_macvtap: left promiscuous mode
[  411.577259][T13264] hsr_slave_0: entered promiscuous mode
[  411.585407][T13264] hsr_slave_1: entered promiscuous mode
[  411.591164][T13264] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  411.598785][T13264] Cannot create hsr debugfs directory
[  411.624493][T13293] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.632374][T13293] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.639562][T13293] bridge_slave_0: entered allmulticast mode
[  411.646475][T13293] bridge_slave_0: entered promiscuous mode
[  411.664412][T13293] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.671710][T13293] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.678889][T13293] bridge_slave_1: entered allmulticast mode
[  411.685898][T13293] bridge_slave_1: entered promiscuous mode
[  411.736592][T13293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.753988][T13293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.796165][T13293] team0: Port device team_slave_0 added
[  411.807846][T13293] team0: Port device team_slave_1 added
[  411.840322][T13293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.847568][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.874085][T13293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.888000][T13293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.895014][T13293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  411.921498][T13293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.942408][ T6144] bridge_slave_1: left allmulticast mode
[  411.948081][ T6144] bridge_slave_1: left promiscuous mode
[  411.957433][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.965595][ T6144] bridge_slave_0: left allmulticast mode
[  411.971226][ T6144] bridge_slave_0: left promiscuous mode
[  411.978793][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.300415][T13369] FAULT_INJECTION: forcing a failure.
[  412.300415][T13369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.313606][T13369] CPU: 0 UID: 0 PID: 13369 Comm: syz.3.1469 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  412.313629][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  412.313640][T13369] Call Trace:
[  412.313646][T13369]  <TASK>
[  412.313652][T13369]  dump_stack_lvl+0x16c/0x1f0
[  412.313683][T13369]  should_fail_ex+0x50a/0x650
[  412.313703][T13369]  _copy_from_user+0x2e/0xd0
[  412.313724][T13369]  copy_msghdr_from_user+0x99/0x160
[  412.313750][T13369]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  412.313779][T13369]  ? __lock_acquire+0xa92/0x1b80
[  412.313803][T13369]  ___sys_sendmsg+0xff/0x1e0
[  412.313830][T13369]  ? __pfx____sys_sendmsg+0x10/0x10
[  412.313870][T13369]  ? __fget_files+0x20e/0x3b0
[  412.313898][T13369]  __sys_sendmsg+0x16e/0x220
[  412.313914][T13369]  ? __pfx___sys_sendmsg+0x10/0x10
[  412.313937][T13369]  ? rcu_is_watching+0x12/0xc0
[  412.313963][T13369]  do_syscall_64+0xcd/0x250
[  412.313981][T13369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  412.314004][T13369] RIP: 0033:0x7fb791b8d169
[  412.314017][T13369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  412.314034][T13369] RSP: 002b:00007fb792937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  412.314051][T13369] RAX: ffffffffffffffda RBX: 00007fb791da6160 RCX: 00007fb791b8d169
[  412.314062][T13369] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000a
[  412.314073][T13369] RBP: 00007fb792937090 R08: 0000000000000000 R09: 0000000000000000
[  412.314083][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  412.314093][T13369] R13: 0000000000000000 R14: 00007fb791da6160 R15: 00007ffeda154468
[  412.314112][T13369]  </TASK>
[  412.851215][T13375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  412.891687][ T6144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.922639][ T5818] Bluetooth: hci2: command tx timeout
[  412.928115][ T5818] Bluetooth: hci0: command tx timeout
[  412.956866][ T6144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.999062][ T6144] bond0 (unregistering): Released all slaves
[  413.116604][T13293] hsr_slave_0: entered promiscuous mode
[  413.184913][T13293] hsr_slave_1: entered promiscuous mode
[  413.191058][T13293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  413.198944][T13293] Cannot create hsr debugfs directory
[  413.205365][T13385] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1476'.
[  413.221175][T13385] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1476'.
[  413.827519][T13394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.907365][T13264] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  413.934716][T13264] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  413.946378][T13264] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  414.024837][T13264] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  414.203170][T13264] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.271175][T13264] 8021q: adding VLAN 0 to HW filter on device team0
[  414.432015][ T6144] hsr_slave_0: left promiscuous mode
[  414.447862][ T6144] hsr_slave_1: left promiscuous mode
[  414.453721][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  414.461268][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  414.804816][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1484'.
[  414.843360][ T6144] team0 (unregistering): Port device team_slave_1 removed
[  414.879522][ T6144] team0 (unregistering): Port device team_slave_0 removed
[  415.014873][   T55] Bluetooth: hci2: command tx timeout
[  415.234330][T13425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  415.258118][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.265231][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[  415.314724][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.321860][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  415.344919][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1488'.
[  416.122525][   T30] audit: type=1400 audit(1742910435.180:1086): avc:  denied  { connect } for  pid=13450 comm="syz.4.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  416.206880][T13453] overlayfs: failed to resolve './file2': -2
[  416.213654][   T10] libceph: connect (1)[c::]:6789 error -101
[  416.219695][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  416.248331][T13445] ceph: No mds server is up or the cluster is laggy
[  416.300791][T13293] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  416.320916][T13264] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.360686][T13293] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  416.386127][T13293] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  416.407652][T13293] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  416.649464][   T30] audit: type=1326 audit(1742910435.710:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  416.825459][   T30] audit: type=1326 audit(1742910435.750:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  416.861877][T13293] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.901191][T13293] 8021q: adding VLAN 0 to HW filter on device team0
[  416.913106][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.920201][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.930681][   T30] audit: type=1326 audit(1742910435.830:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  416.972178][   T30] audit: type=1326 audit(1742910435.830:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  416.988611][T13264] veth0_vlan: entered promiscuous mode
[  417.034607][   T30] audit: type=1326 audit(1742910435.830:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  417.092611][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.099678][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.150380][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'.
[  417.188688][T13264] veth1_vlan: entered promiscuous mode
[  417.235806][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'.
[  417.236503][   T30] audit: type=1326 audit(1742910435.830:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  417.317060][T13264] veth0_macvtap: entered promiscuous mode
[  417.350924][T13264] veth1_macvtap: entered promiscuous mode
[  417.367237][   T30] audit: type=1326 audit(1742910435.830:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  417.423576][T13264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.445907][T13264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.458668][   T30] audit: type=1326 audit(1742910435.830:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13465 comm="syz.3.1497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb791b8d169 code=0x7ffc0000
[  417.521570][T13264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  417.533870][T13264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.563183][T13264] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.570514][   T30] audit: type=1400 audit(1742910436.620:1095): avc:  denied  { bind } for  pid=13494 comm="syz.4.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  417.663960][T13495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.728977][T13293] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.753146][T13264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.773885][T13264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.795392][T13264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.817206][T13264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.838066][T13264] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.869758][T13495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.919114][T13264] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.931198][T13264] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.946709][T13264] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.970361][T13264] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.014920][T13495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.144524][T13495] bond0: (slave netdevsim0): Releasing backup interface
[  418.158884][T13495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.195399][T13293] veth0_vlan: entered promiscuous mode
[  418.227332][T13293] veth1_vlan: entered promiscuous mode
[  418.277816][ T8705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.287129][ T8705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.314085][T13293] veth0_macvtap: entered promiscuous mode
[  418.324979][T13293] veth1_macvtap: entered promiscuous mode
[  418.340787][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.341830][ T5909] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  418.362481][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.381066][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.396456][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.416646][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  418.437614][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.453077][T13293] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.475865][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.477745][T13495] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.495961][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.527979][T13495] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.540349][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.551014][ T5909] usb 4-1: Using ep0 maxpacket: 8
[  418.556295][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.566345][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.577354][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.587543][T13293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  418.598256][T13293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  418.610084][ T5909] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  418.614381][T13293] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.621515][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.647354][T13495] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.651506][ T5909] usb 4-1: Product: syz
[  418.659732][ T5909] usb 4-1: Manufacturer: syz
[  418.668368][T13293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.682587][T13293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.691358][ T5909] usb 4-1: SerialNumber: syz
[  418.694397][T13293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.705165][T13293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.711045][ T5909] usb 4-1: config 0 descriptor??
[  418.722966][ T5909] gspca_main: se401-2.14.0 probing 047d:5003
[  418.732510][T13495] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.874434][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.883540][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.906704][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.914966][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.465209][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.579208][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.738851][ T5909] gspca_se401: read req failed req 0x06 error -19
[  419.749210][ T5909] usb 4-1: USB disconnect, device number 10
[  419.908089][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.138563][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.224118][   T12] bridge_slave_1: left allmulticast mode
[  420.229845][   T12] bridge_slave_1: left promiscuous mode
[  420.236853][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  420.248287][   T12] bridge_slave_0: left allmulticast mode
[  420.254749][   T12] bridge_slave_0: left promiscuous mode
[  420.260415][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  420.474811][T13638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.391577][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1512'.
[  421.421298][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  421.430027][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  421.437686][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  421.445445][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  421.452741][ T5818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  421.460025][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.625607][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  421.638757][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  421.656721][   T12] bond0 (unregistering): Released all slaves
[  422.631524][T13687] FAULT_INJECTION: forcing a failure.
[  422.631524][T13687] name failslab, interval 1, probability 0, space 0, times 0
[  422.674601][T13687] CPU: 0 UID: 0 PID: 13687 Comm: syz.3.1520 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  422.674633][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  422.674644][T13687] Call Trace:
[  422.674650][T13687]  <TASK>
[  422.674657][T13687]  dump_stack_lvl+0x16c/0x1f0
[  422.674689][T13687]  should_fail_ex+0x50a/0x650
[  422.674708][T13687]  ? fs_reclaim_acquire+0xae/0x150
[  422.674729][T13687]  ? tomoyo_realpath_from_path+0xb9/0x720
[  422.674745][T13687]  should_failslab+0xc2/0x120
[  422.674770][T13687]  __kmalloc_noprof+0xcb/0x510
[  422.674797][T13687]  tomoyo_realpath_from_path+0xb9/0x720
[  422.674815][T13687]  ? tomoyo_profile+0x47/0x60
[  422.674836][T13687]  tomoyo_path_number_perm+0x248/0x590
[  422.674858][T13687]  ? tomoyo_path_number_perm+0x235/0x590
[  422.674882][T13687]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  422.674905][T13687]  ? find_held_lock+0x2b/0x80
[  422.674944][T13687]  ? find_held_lock+0x2b/0x80
[  422.674967][T13687]  ? __fget_files+0x204/0x3b0
[  422.674991][T13687]  ? __fget_files+0x20e/0x3b0
[  422.675015][T13687]  security_file_ioctl+0x9b/0x240
[  422.675042][T13687]  __x64_sys_ioctl+0xb7/0x200
[  422.675062][T13687]  do_syscall_64+0xcd/0x250
[  422.675079][T13687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.675102][T13687] RIP: 0033:0x7fb791b8d169
[  422.675115][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  422.675131][T13687] RSP: 002b:00007fb792979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  422.675147][T13687] RAX: ffffffffffffffda RBX: 00007fb791da5fa0 RCX: 00007fb791b8d169
[  422.675158][T13687] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  422.675168][T13687] RBP: 00007fb792979090 R08: 0000000000000000 R09: 0000000000000000
[  422.675178][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  422.675188][T13687] R13: 0000000000000000 R14: 00007fb791da5fa0 R15: 00007ffeda154468
[  422.675206][T13687]  </TASK>
[  422.675220][T13687] ERROR: Out of memory at tomoyo_realpath_from_path.
[  422.886398][   T12] hsr_slave_0: left promiscuous mode
[  422.893291][   T12] hsr_slave_1: left promiscuous mode
[  422.898946][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.932980][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.964601][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.982940][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  423.051479][   T12] veth1_macvtap: left promiscuous mode
[  423.069948][   T12] veth0_macvtap: left promiscuous mode
[  423.089909][   T12] veth1_vlan: left promiscuous mode
[  423.110092][   T12] veth0_vlan: left promiscuous mode
[  423.495054][ T5818] Bluetooth: hci0: command tx timeout
[  423.911162][T13741] hugetlbfs: Unknown parameter 'Ç'
[  424.539880][   T12] team0 (unregistering): Port device team_slave_1 removed
[  424.587065][   T12] team0 (unregistering): Port device team_slave_0 removed
[  425.116747][T13660] chnl_net:caif_netlink_parms(): no params data found
[  425.136605][T13701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1523'.
[  425.348544][T13660] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.362438][T13660] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.381752][T13660] bridge_slave_0: entered allmulticast mode
[  425.397342][T13660] bridge_slave_0: entered promiscuous mode
[  425.571746][ T5818] Bluetooth: hci0: command tx timeout
[  425.580013][T13660] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.587288][T13660] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.595081][T13660] bridge_slave_1: entered allmulticast mode
[  425.602386][T13660] bridge_slave_1: entered promiscuous mode
[  425.641518][ T7212] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  425.672032][T13660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  425.903319][ T7212] usb 5-1: config 0 has an invalid interface number: 183 but max is 0
[  426.025420][ T7212] usb 5-1: config 0 has no interface number 0
[  426.120511][ T7212] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x2 has invalid maxpacket 528, setting to 64
[  426.156413][ T7212] usb 5-1: config 0 interface 183 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  426.225296][T13660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.245872][ T7212] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[  426.265578][ T7212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.294109][ T7212] usb 5-1: Product: syz
[  426.304051][ T7212] usb 5-1: Manufacturer: syz
[  426.318817][ T7212] usb 5-1: SerialNumber: syz
[  426.335593][ T7212] usb 5-1: config 0 descriptor??
[  426.345666][T13763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  426.393503][T13763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  426.405708][T13660] team0: Port device team_slave_0 added
[  426.454710][T13660] team0: Port device team_slave_1 added
[  426.552351][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  426.553161][   T30] audit: type=1400 audit(1742910445.620:1097): avc:  denied  { getopt } for  pid=13783 comm="syz.3.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  426.999018][T13660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.040898][T13763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  427.094701][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.120612][    C1] vkms_vblank_simulate: vblank timer overrun
[  427.254703][T13792] input: syz0 as /devices/virtual/input/input40
[  427.301539][T13763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  427.308822][T13660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.322568][T13660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.329516][T13660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.391642][T13660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.418613][ T7212] net1080 5-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 8a:f6:b5:71:c4:04
[  427.456437][   T30] audit: type=1326 audit(1742910446.520:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a7f8d169 code=0x7ffc0000
[  427.595976][T13660] hsr_slave_0: entered promiscuous mode
[  427.663795][ T5818] Bluetooth: hci0: command tx timeout
[  427.710292][   T30] audit: type=1326 audit(1742910446.520:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13791 comm="syz.2.1540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a7f8d169 code=0x7ffc0000
[  427.733820][    C1] vkms_vblank_simulate: vblank timer overrun
[  427.788081][T13660] hsr_slave_1: entered promiscuous mode
[  427.961857][T13660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  428.025712][T13660] Cannot create hsr debugfs directory
[  428.312790][T13816] libceph: resolve '0.' (ret=-3): failed
[  428.638912][T13823] FAULT_INJECTION: forcing a failure.
[  428.638912][T13823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.666738][T13823] CPU: 0 UID: 0 PID: 13823 Comm: syz.7.1545 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  428.666764][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  428.666775][T13823] Call Trace:
[  428.666780][T13823]  <TASK>
[  428.666788][T13823]  dump_stack_lvl+0x16c/0x1f0
[  428.666819][T13823]  should_fail_ex+0x50a/0x650
[  428.666840][T13823]  _copy_from_user+0x2e/0xd0
[  428.666861][T13823]  copy_msghdr_from_user+0x99/0x160
[  428.666888][T13823]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  428.666922][T13823]  ___sys_sendmsg+0xff/0x1e0
[  428.666949][T13823]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.666973][T13823]  ? __lock_acquire+0x5b6/0x1b80
[  428.667007][T13823]  ? __fget_files+0x20e/0x3b0
[  428.667032][T13823]  __sys_sendmsg+0x16e/0x220
[  428.667048][T13823]  ? __pfx___sys_sendmsg+0x10/0x10
[  428.667068][T13823]  ? rcu_is_watching+0x12/0xc0
[  428.667103][T13823]  do_syscall_64+0xcd/0x250
[  428.667121][T13823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.667145][T13823] RIP: 0033:0x7ff33c58d169
[  428.667159][T13823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  428.667175][T13823] RSP: 002b:00007ff33d465038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.667192][T13823] RAX: ffffffffffffffda RBX: 00007ff33c7a5fa0 RCX: 00007ff33c58d169
[  428.667204][T13823] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  428.667214][T13823] RBP: 00007ff33d465090 R08: 0000000000000000 R09: 0000000000000000
[  428.667225][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.667235][T13823] R13: 0000000000000000 R14: 00007ff33c7a5fa0 R15: 00007fffc96b0608
[  428.667256][T13823]  </TASK>
[  429.636368][ T5909] usb 5-1: USB disconnect, device number 23
[  429.636425][T13660] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  429.643000][ T5909] net1080 5-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT
[  429.721515][ T5818] Bluetooth: hci0: command tx timeout
[  429.779658][T13660] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  429.838357][T13660] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  429.862951][T13660] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  429.890470][T13866] input: syz0 as /devices/virtual/input/input41
[  429.997557][T13660] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.041334][T13660] 8021q: adding VLAN 0 to HW filter on device team0
[  430.068236][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.075334][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.105058][   T30] audit: type=1326 audit(1742910449.160:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.7.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33c58d169 code=0x7ffc0000
[  430.136678][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.143792][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.151688][ T1201] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  430.175504][   T30] audit: type=1326 audit(1742910449.160:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13865 comm="syz.7.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33c58d169 code=0x7ffc0000
[  430.289257][T13660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  430.309999][T13660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  430.445615][ T1201] usb 4-1: Using ep0 maxpacket: 8
[  430.462665][ T1201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.489566][ T1201] usb 4-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12
[  430.590932][ T1201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.611313][ T1201] usb 4-1: config 0 descriptor??
[  431.082319][T13660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  431.255424][T13902] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1557'.
[  431.342356][ T5902] usb 4-1: USB disconnect, device number 11
[  431.666513][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1560'.
[  431.758893][T13660] veth0_vlan: entered promiscuous mode
[  431.792447][T13660] veth1_vlan: entered promiscuous mode
[  431.849644][T13660] veth0_macvtap: entered promiscuous mode
[  431.870840][T13660] veth1_macvtap: entered promiscuous mode
[  431.908009][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.933824][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  431.961953][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  431.981505][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.013534][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  432.047382][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.083965][T13660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  432.099633][T13942] cgroup: noprefix used incorrectly
[  432.121371][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.143586][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.466159][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.476753][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.486686][T13660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  432.497435][T13660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  432.508279][T13660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  432.517536][T13660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  432.530468][T13660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  432.539615][T13660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  432.548516][T13660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  432.710655][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.733826][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.764183][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.777412][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.919331][T13964] xt_hashlimit: size too large, truncated to 1048576
[  433.491537][ T7212] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  434.213308][ T7212] usb 4-1: Using ep0 maxpacket: 32
[  434.480015][ T7212] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  434.520896][ T7212] usb 4-1: config 0 has no interface number 0
[  434.584091][ T7212] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  434.736924][ T7212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.764217][ T7212] usb 4-1: Product: syz
[  434.768420][ T7212] usb 4-1: Manufacturer: syz
[  434.773850][ T7212] usb 4-1: SerialNumber: syz
[  434.783195][ T7212] usb 4-1: config 0 descriptor??
[  434.792854][ T7212] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  434.911564][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  435.204504][   T53] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.242259][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  435.286752][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  435.372401][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  435.424955][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  435.456103][ T7212] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  435.474993][   T10] usb 3-1: Product: syz
[  435.487091][ T7212] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  435.499482][   T10] usb 3-1: Manufacturer: syz
[  435.514707][   T10] usb 3-1: SerialNumber: syz
[  435.741842][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  435.750115][ T5859] usb 4-1: USB disconnect, device number 12
[  435.793195][ T5859] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  435.805570][   T10] usb 3-1: config 0 descriptor??
[  435.814140][   T10] usb 3-1: selecting invalid altsetting 0
[  435.845697][   T53] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.860237][ T5859] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  435.876109][ T5859] quatech2 4-1:0.51: device disconnected
[  435.933093][   T53] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.063448][   T53] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  436.167774][   T53] bridge_slave_1: left allmulticast mode
[  436.180168][   T53] bridge_slave_1: left promiscuous mode
[  436.187207][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.199380][   T53] bridge_slave_0: left allmulticast mode
[  436.205743][   T53] bridge_slave_0: left promiscuous mode
[  436.211421][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.437013][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'.
[  436.822049][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  436.832058][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  436.840796][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  436.849439][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  436.856885][   T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  436.864267][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  437.015891][   T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  437.138137][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.193634][   T24] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  437.203155][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  437.216116][   T24] usb 5-1: config 0 has an invalid descriptor of length 134, skipping remainder of the config
[  437.232271][   T53] bond0 (unregistering): Released all slaves
[  437.244888][   T24] usb 5-1: config 0 has no interface number 0
[  437.259541][   T24] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  437.299663][T13986] ------------[ cut here ]------------
[  437.305250][T13986] UBSAN: array-index-out-of-bounds in kernel/bpf/core.c:2384:29
[  437.312949][T13986] index 16 is out of range for type '<unknown> *[16]'
[  437.319786][T13986] CPU: 1 UID: 0 PID: 13986 Comm: syz.2.1574 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  437.319813][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  437.319824][T13986] Call Trace:
[  437.319829][T13986]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  437.319836][T13986]  dump_stack_lvl+0x16c/0x1f0
[  437.319870][T13986]  __ubsan_handle_out_of_bounds+0x110/0x150
[  437.319896][T13986]  bpf_prog_select_runtime+0x665/0x6f0
[  437.319921][T13986]  ? selinux_bpf_prog_load+0x15f/0x1c0
[  437.319945][T13986]  bpf_prog_load+0xe70/0x2480
[  437.319978][T13986]  ? __pfx_bpf_prog_load+0x10/0x10
[  437.320001][T13986]  ? avc_has_perm_noaudit+0x143/0x3a0
[  437.320034][T13986]  ? selinux_bpf+0xde/0x130
[  437.320055][T13986]  __sys_bpf+0x478f/0x49f0
[  437.320078][T13986]  ? __pfx_futex_wake+0x10/0x10
[  437.320100][T13986]  ? __pfx___sys_bpf+0x10/0x10
[  437.320129][T13986]  ? do_futex+0x123/0x350
[  437.320145][T13986]  ? __pfx_do_futex+0x10/0x10
[  437.320169][T13986]  ? xfd_validate_state+0x5d/0x180
[  437.320195][T13986]  ? rcu_is_watching+0x12/0xc0
[  437.320223][T13986]  __x64_sys_bpf+0x78/0xc0
[  437.320246][T13986]  ? lockdep_hardirqs_on+0x7c/0x110
[  437.320273][T13986]  do_syscall_64+0xcd/0x250
[  437.320291][T13986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.320317][T13986] RIP: 0033:0x7fe9a7f8d169
[  437.320331][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.320348][T13986] RSP: 002b:00007fe9a8d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  437.320365][T13986] RAX: ffffffffffffffda RBX: 00007fe9a81a5fa0 RCX: 00007fe9a7f8d169
[  437.320377][T13986] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  437.320388][T13986] RBP: 00007fe9a800e2a0 R08: 0000000000000000 R09: 0000000000000000
[  437.320398][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.320409][T13986] R13: 0000000000000000 R14: 00007fe9a81a5fa0 R15: 00007ffc2b657068
[  437.320429][T13986]  </TASK>
[  437.320435][T13986] ---[ end trace ]---
[  437.503400][   T30] audit: type=1400 audit(1742910456.410:1102): avc:  denied  { write } for  pid=5806 comm="syz-executor" path="pipe:[4614]" dev="pipefs" ino=4614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  437.509031][   T24] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 9728, setting to 64
[  437.558459][T13986] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  437.565666][T13986] CPU: 1 UID: 0 PID: 13986 Comm: syz.2.1574 Not tainted 6.14.0-syzkaller-00826-g327ecdbc0fda #0 PREEMPT(full) 
[  437.577497][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  437.587554][T13986] Call Trace:
[  437.590827][T13986]  <TASK>
[  437.593743][T13986]  dump_stack_lvl+0x3d/0x1f0
[  437.598345][T13986]  panic+0x71d/0x800
[  437.602238][T13986]  ? __pfx_panic+0x10/0x10
[  437.606652][T13986]  ? __pfx__printk+0x10/0x10
[  437.611239][T13986]  check_panic_on_warn+0xab/0xb0
[  437.616175][T13986]  __ubsan_handle_out_of_bounds+0x137/0x150
[  437.622061][T13986]  bpf_prog_select_runtime+0x665/0x6f0
[  437.627507][T13986]  ? selinux_bpf_prog_load+0x15f/0x1c0
[  437.632952][T13986]  bpf_prog_load+0xe70/0x2480
[  437.637623][T13986]  ? __pfx_bpf_prog_load+0x10/0x10
[  437.642720][T13986]  ? avc_has_perm_noaudit+0x143/0x3a0
[  437.648081][T13986]  ? selinux_bpf+0xde/0x130
[  437.652565][T13986]  __sys_bpf+0x478f/0x49f0
[  437.656968][T13986]  ? __pfx_futex_wake+0x10/0x10
[  437.661814][T13986]  ? __pfx___sys_bpf+0x10/0x10
[  437.666565][T13986]  ? do_futex+0x123/0x350
[  437.670872][T13986]  ? __pfx_do_futex+0x10/0x10
[  437.675530][T13986]  ? xfd_validate_state+0x5d/0x180
[  437.680626][T13986]  ? rcu_is_watching+0x12/0xc0
[  437.685375][T13986]  __x64_sys_bpf+0x78/0xc0
[  437.689776][T13986]  ? lockdep_hardirqs_on+0x7c/0x110
[  437.694962][T13986]  do_syscall_64+0xcd/0x250
[  437.699445][T13986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.705322][T13986] RIP: 0033:0x7fe9a7f8d169
[  437.709717][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  437.729306][T13986] RSP: 002b:00007fe9a8d63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  437.737700][T13986] RAX: ffffffffffffffda RBX: 00007fe9a81a5fa0 RCX: 00007fe9a7f8d169
[  437.745648][T13986] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  437.753598][T13986] RBP: 00007fe9a800e2a0 R08: 0000000000000000 R09: 0000000000000000
[  437.761553][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.769510][T13986] R13: 0000000000000000 R14: 00007fe9a81a5fa0 R15: 00007ffc2b657068
[  437.777466][T13986]  </TASK>
[  437.780671][T13986] Kernel Offset: disabled
[  437.784970][T13986] Rebooting in 86400 seconds..