last executing test programs:

10m56.252668957s ago: executing program 3 (id=148):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
socket$inet6_udp(0xa, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x80079a0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x8000, 0x0)
preadv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f000001f840)=""/4096, 0x1000}], 0x2, 0x4, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x24a6}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2fb74000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0xee01, 0x0, 0x0)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0)
write$binfmt_misc(r5, &(0x7f0000001280), 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)

10m53.856974609s ago: executing program 3 (id=153):
openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$session_to_parent(0x12)
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [<r9=>0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000100)={r9})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0)

10m46.599985332s ago: executing program 3 (id=164):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48)
lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x2d5, 0xe, 0x1, "1e6c6821abd4618b073c5a2cc252fb91", "3631d2c8396c6100e2b97ae4ee426afbcdd9dd65765fb1d50ab5d69d5c6ecf6dc91259c1ee3eeb176f4b033da93e7f9a97c277f141c7571aa12e7d9c846995fc958e3808a0c3e90b80cb4cd9de45ffc59f3c5f88ae9d5b2b77fc01ddc4af1bf49fe23911333fce5ee0ab1e7b5b942a2f905c8ab1f77ccf1b4e243878cbadf71e696155653b4194a7e954a8620cc6ae2d559b895988b808a6b4c82c92edf5e144ecfece33e69dfe330f0d732657d4b8eab63be3a199a63c035a9912d3f9c0806cdeaf20f79b76096b4706c43c1fcb89d5ab4726194430f403e7ccdbc0ce19b77e91f2529ffde4ffc4fb8527dad5fb516fd258c87ca90f00960444ebe24620709d10a1a0858a6d58d3d79ab80e81753bb27d3b14379f6179cc497a8b505376da27a94dac0c4d880d7b8e38cdaa6c91f409512bc168b17aa2dbb47f0d7dc4a88d8d385d5d35ad534ef600f6d1811a5429fc24e733ef351089a058c0a2f8046b6149a8aeefcf1783e4e53daeeb25503f06400a48fb3a3df56098022d4140254cc0d8a7725b122788df93c811de58d1d26b4cb1e01c379da72fbb0f6dc2af3d413139df9fdf28738d9a5adc64238dbb771fa9b400cdaaa6edf23aa427122697c8cf4fd5f1eaa945cbf41114f27fd68957740d865ea48fca6389a49bce73f4344ca0d580a6e4ae5d038d826e61ef44bfbbe02ebb21e8f9512e26b965d371622f6a15a774248d0faccfd3886e5bf6b4fb2f35ddd1d8173c060367f2ed25615a073e4af3fb960d3d3a47522361d948b76a4da68f1650004190942f83bcc245e633f1beaabd8bcd703f64fdeb924947e756e214f5afe432bfc1b58fa922c348cd12a9f55f2df7b06d5b97116b59d2a5913a6f672f238614662fc859ee9a134c48941faccf52640ae979280ccfe3056aeb7fa5e6589b1e639dd97ea280c246ad62c267cf01dae9e9bcfb87b3b0865c46a1f43d06d0763e278ec5cfb81257dd42e83dd76cbf"}, 0x2d5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000cc000000e800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast}}}})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x6, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10m36.307995459s ago: executing program 3 (id=177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x4, 0x0)
socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = dup2(r3, r4)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x6)
sendto$inet(r3, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=""/173, 0xa6, 0xad, 0x1, 0xa2}, 0x28)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r5, 0x1, 0x1, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40)
openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x62040, 0x100)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

10m31.462310859s ago: executing program 3 (id=183):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = syz_io_uring_setup(0x2e4f, 0x0, &(0x7f0000000280), &(0x7f0000000500))
sendfile(r2, r1, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r3, 0x0, 0x0)
shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil)
syz_genetlink_get_family_id$nfc(&(0x7f0000004380), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0x5, &(0x7f0000000180)={0x4f9})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xf, 0x0, &(0x7f0000000300))
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
membarrier(0x4, 0x0)
sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x200c4041)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000040)}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)

10m27.802556838s ago: executing program 3 (id=189):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000"], 0x5c}}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TCFLSH(r6, 0x400455c8, 0x2)
ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

10m13.368777642s ago: executing program 2 (id=207):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getrlimit(0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000001d00010000001800b57f00000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802a6cf1d47dd46bdb2e8f100000200000000000000000000008500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xd, 0x0, &(0x7f0000000500)="ba7114d8af50aa3e1c6ed2459d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x189802)
r6 = creat(0x0, 0xe5)
r7 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0, r6}, 0x68)

10m11.891458178s ago: executing program 32 (id=189):
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r4=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000"], 0x5c}}, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$TCFLSH(r6, 0x400455c8, 0x2)
ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

10m11.741829616s ago: executing program 2 (id=211):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
unshare(0x4000280)
landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

10m9.539928087s ago: executing program 2 (id=214):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), 0x0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8}, 0x94)
add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000be2f7de0fa0000ff01400000000000000000000e00000084e8323990d564b70572e11d000000000000000000000000000000000000000040000000000000000000000000000000000000000200"/99])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x3130000, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {r2, <r4=>r3}}, './file0\x00'})
mount$9p_unix(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x1c2caa, &(0x7f0000000500)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@debug={'debug', 0x3d, 0xcf}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@noxattr}, {@cache_fscache}]}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1e00010000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000006000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000feffff07000000000000000000000000000000002abd7000000000000a0002012000000000000000"], 0xf0}, 0x1, 0xe}, 0x10)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[], 0x0)

10m4.635240977s ago: executing program 2 (id=219):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x20000)
ioctl$EVIOCSCLOCKID(r1, 0x40084504, &(0x7f0000000000)=0x1)
poll(&(0x7f00000020c0)=[{r0, 0x20c}], 0x1, 0xfffffffd)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4)
write$cgroup_devices(r0, &(0x7f0000002080)={'a', ' *:* ', 'rw\x00'}, 0x9)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = semget$private(0x0, 0x4000000009, 0x208)
semop(r3, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000037c000018003780130003007174722834141faa532df09a"], 0x2c}}, 0x0)
r5 = semget$private(0x0, 0x4, 0x29b)
syslog(0x9, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f00000000c0)="510003000000", 0x6)
semtimedop(r5, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0)
semop(r5, &(0x7f0000000180)=[{}, {}], 0x2)
semctl$GETZCNT(r5, 0x0, 0xf, 0x0)
fanotify_init(0x0, 0x2)
semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0xa8f, 0x8])
bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)='5', 0x1}], 0x1}, 0x4003)
recvmmsg(r2, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x7fc}], 0x1, 0x22, 0x0)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)

10m2.237953055s ago: executing program 2 (id=223):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
socket$netlink(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket(0x80000000000000a, 0x5, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
socket$inet(0x2, 0x3, 0x8)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x200800c, &(0x7f0000000840)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000000c0)=0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
close_range(r5, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24}, 0x94)

10m0.233341193s ago: executing program 2 (id=227):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
waitid(0x11, 0x0, 0x0, 0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

9m44.271573638s ago: executing program 33 (id=227):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
waitid(0x11, 0x0, 0x0, 0x8, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7)
renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

5m23.715817348s ago: executing program 4 (id=582):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getrlimit(0x6, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000001d00010000001800b57f00000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802a6cf1d47dd46bdb2e8f100000200000000000000000000008500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd, 0x0, &(0x7f0000000500)="ba7114d8af50aa3e1c6ed2459d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x189802)
r5 = creat(0x0, 0xe5)
r6 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0, r5}, 0x68)

5m21.784987993s ago: executing program 4 (id=585):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x9, 0x1, {0xffffffffffffffff}, {<r0=>0xee00}, 0x8001, 0xffffffff})
r1 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r2, r1}, &(0x7f00000001c0)=""/241, 0xf1, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}})
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0)
recvmmsg(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r7, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x8000000, 0xfc, &(0x7f0000000480)=""/252}, {0x1, 0xf, &(0x7f0000000240)=""/15}]})
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000003c0)={0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10, 0xb, {}, {0x5, 0x8, 0x0, 0xb, 0x3, 0x10, "6e4f3cf2"}, 0x101, 0x1, {0x0}, 0x6})
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000), 0x830400, &(0x7f0000000200)={[{@inode32}, {@uid={'uid', 0x3d, r0}}, {@noswap}, {@size={'size', 0x3d, [0x37]}}, {@huge_always}]})

5m17.420972684s ago: executing program 4 (id=591):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pptp(0x18, 0x1, 0x2)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008)
r1 = socket(0x1d, 0x2, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x2, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8040)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x1)
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xef7}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x400a055)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x4, 0x20000002, 0x101)

5m12.693053489s ago: executing program 4 (id=596):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68201, 0x0)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0xc0c01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r4 = fanotify_init(0x8, 0x1000)
fanotify_mark(r4, 0x105, 0x2a, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0x90e7d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
read$midi(r7, 0x0, 0x14)
socket$inet6_tcp(0xa, 0x1, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setpriority(0x2, 0x0, 0x3)
syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}})
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16)
ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000003c0))

5m10.115838614s ago: executing program 4 (id=602):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'security.', ':\x00'}, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9e, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x10000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
gettid()

5m0.871335602s ago: executing program 4 (id=615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r1=>0x0})
execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800)
r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2, 0xa5)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0xf}}, './file0\x00'})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040), &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f00000016c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r3)
socket(0x22, 0x2, 0x3)
close(0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000003c0)=0x800, 0x4)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)
r8 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [0xffffffff, 0x2, 0x5, 0x0, 0x92, 0x1e], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000040)=0x78)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, 0x0)
r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
writev(r10, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x21f}], 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4m42.655174688s ago: executing program 34 (id=615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r1=>0x0})
execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800)
r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc2, 0xa5)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>r0, {0xf}}, './file0\x00'})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040), &(0x7f0000000400)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f00000016c0))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r3)
socket(0x22, 0x2, 0x3)
close(0x3)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000003c0)=0x800, 0x4)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000032680)=""/102392, 0x18ff8)
r8 = socket$inet(0x2b, 0x801, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x0, [0xffffffff, 0x2, 0x5, 0x0, 0x92, 0x1e], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000040)=0x78)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, 0x0)
r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
writev(r10, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x21f}], 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

40.555977617s ago: executing program 6 (id=972):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0xffffff47}], 0x2}}], 0x1, 0x4000800)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0xa)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)

39.247505226s ago: executing program 6 (id=973):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffd)
execve(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)
r2 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r4 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000002880)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
r5 = add_key$user(&(0x7f0000000040), &(0x7f0000001180)={'syz', 0x3}, &(0x7f00000000c0)="2538a31458875a3834", 0x9, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r4, r5}, &(0x7f0000000180)=""/4093, 0xffd, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff})
close_range(r6, r6, 0x2)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local})
bind$netlink(r1, 0x0, 0x0)
fchdir(r2)
fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, <r8=>0x0})
syz_open_procfs(r8, &(0x7f0000000340)='ns\x00')
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000001080))
sendmsg$NFT_BATCH(r1, &(0x7f0000001240)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000002940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x5bcc, 0xe, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5b84, 0x3, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x18}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, {0xc4, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xb4, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x30}, @NFTA_INNER_EXPR={0x5c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_EXPR={0x20, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}}}]}]}, {0x1098, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1094, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x5f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x488, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x478, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_TO_DATA={0x464, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "83b30d90b901ea972cf43e383ebd634d0c3e09375583becbc8a896634be7cf3036e389e890a39af64686bd71d9c317374fe8bf10838ebb4ec19ae29aa0b9bcb0faf3fecadf499792b0206cd88f766ab1cfac75307fffcceb"}, @NFTA_DATA_VALUE={0x80, 0x1, "96900910b27c46776afebce9beeeb8bf0680d4a500cbe530f04e46a2461d943eea4355268e5a56632667e28bc6fe5f9c6b0dbef9a21e0ebd72361116783135ddef42cc46e565bb409edecc2a0a1430bbc332711e85c879044d070098675eb2012817980536678515c105e0a34ad8045d7d683e1a0dcbbb56febf5290"}, @NFTA_DATA_VALUE={0xef, 0x1, "2ea90b7b2ca353eb4bc29f942cf87f8f48265f6b11484f793be5cd01cd487ced91d8b2106faf2b40de6029fa747262f17dfd0bf2b4852927aa006fb099e4cac20cd7f351ed033e094d867b60a3f67558616e7941dd539012c9f4dbdcf386dfca7907d6ff3db534050b0dcb81782106865779b39129f475089060c098de20f3bba55087d6b86049f13af5e63c08ba02b0e53d04d7d4c476e6dc2b90286c7832af9b99baedcea4acd67abbdc241362bf7df3637153c17e6189002b24609bd72efa0a17bc611cf660d3f7054273908fd00bbe71ff2846d834f6ba67db6829f7e16bf975c6cde57a891dd1e093"}, @NFTA_DATA_VALUE={0xd, 0x1, "e58edeb4b1342fd7f0"}, @NFTA_DATA_VALUE={0xd2, 0x1, "d0662d8e549737013f1a5014d096c01794beb4700f3415c67b1ff4232758a0221a40617c89ad0965bd6691d0d3b5ac41c65b4ea69e9ff803fcd969bb1949c4b2c94eec251763500eebeebc53df02a9ecbe5270f37110b02415a13dca68e3058905224856ccf68a7a6e92c8f93ec6663931c56fcd3a16294dd88354a345ef79893a64096c92148ca2fcce98fe56426e00f9ae87dc5a762b129ad0593123d7eb39946e25957a6fbbbd6c999d69ec83b082975aa93e7b89f36d715c557dded013b971f12e519c591011a96d03b4d605"}, @NFTA_DATA_VALUE={0x3f, 0x1, "61e9e1d4b703834cf02720d91b71ee45a0b0d6f0df785694282f77b511fa40acfed5c9d0c017fe2754c9c85fb29840e441db1817bb9eee9859ca1b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xdf, 0x1, "80d7b409fd25c444d1fbcd4546fdc2d4bc60a4d9a746b26e1997b103cdd61aa87c1622a39fb7010244d1edd796cace9c96c5fcfbe6b43669c3e8724db0658e5a9e1b6fc5603c949541bab4f712e3d5df7d655608ad017dc915a7e1f6874556bdf2bc3b37a36c7e32e320047ad8ed0075e0988078991531fd27982f4ca70eb002e80b8184b1477691f0cc4e29896d59e7f3b08efe7a3cddce9ee5566b32258357451261a0716a05e1d4cac02d4e2e56009baada1bca9d3f8c06f2d805161f48c20a1796b31c70a0c20d5ade124ecbe70e50aaac438b9c3b128a1347"}, @NFTA_DATA_VALUE={0x66, 0x1, "a2641942e0fe8a6f87c5262f84d5a231ac9ac54e5a2bdd15c1ca97fe5ca36a48e5a4cc49ccee5d1cc1578587086eef550af486ea903ba3c8dc87d62ad4db7785f1907cc9df02117d72668269fb656f3fb31761bef0cbd19904e882964a3bddd1ac8b"}]}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x150, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "6953e117bd9712d95aaa45736b6e2143cb26255fbf5e348c0dc3cd49e0718590bc9619d6e09ae02c22356ef0647df97285f0167940b458560580eff93b93fd1dfd6681cfdf22be176f91cf3c91166cd1b45d6f0a695b2342cbbadcd60bb077c7bd74ec24ce6363f12c6d733cb4c331c6d4024db9da"}, @NFTA_DATA_VALUE={0x71, 0x1, "f809639743171da0e1191ae39ecdb8adf175895b73b30e864694d58ff8856da677bf368b128151c9d2a61b04359ae609eca2431b1ed68444a060168c9376697fc7b46cc41edab49de9b88f6d913c3a6f6bb91c529e094b1bb8775bdc998a2ef5ee36b0360dfc2f1a0a76bd9173"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x91}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x115c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1124, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "626d706aa6c53467d6051671626551d9fc42a2b54dff5e5b6d1cbeb7b74b2b1942e7e3a1bfbab2ca90685dd0d24a8945e78b7e5c0b8fa29f2403d230b0d748eaac1c78a1d3fd549a87426ce4439c0f8e95ffbaeaee5d17548cba3965a018f09ca5034994454623e6ce5b9b9ca6a45aa9f8fb0718a4faeec879b723c1f9a77e22ad03088ddf09e47b1453ab1a9764d839125a706b88a179ee39582e62a707c32696aace244a536942951bc79fcd2eb7894c70d889eb8aec884dd17c068e5a2c6bb702221ec8acc5dfa0381054a361008a78a3215f15d6601f59dd1b128dc36139a06dcf6e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0x25, 0x6, 0x1, 0x0, "e944f8982e0e73e0d19db183153596da1932a01596fab729f6c1ffa22c2c899a08"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf14a}]}, {0x31ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3174, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "27fc2043e4c945ebe48b6b8083fb2a793f6fdf964957b591eec8765d63ab47e4519ac24ae0f207fffd6dd42154b1a602a30ed51bf1b4ebb531b36da6b0ffffb98ae66a9703033ec5d114f4f3a01796231e6a42352eddaa6b16768ecf3bd4beed39506bedbffb8f9c8fde23f43fb907b434ee0c825edd32315ccaf0652102cff2810e3d6a508f8144f1f976e88d96cdc1a14ef5078e3daefc23544f7c35f26510079d3c61d4b4fb20bf1827efe54ffb3652fa6f85819bd01169d6777652e827ebf4f93f37488fc7f0927b8c203ee36277d0f6b766d801676abb2891de2ea8be1b096e33d03d72b3cfefd60ee8f00670435ffd5ddc2dd1e2edf24365bc822b55ba120f4ed4234c57de3b91179d5ec14645428542046299d085039bbea84ae03ef09a435154ca66bc19781e27584d906b391805587bc5a65d89aebe1903626a886863193b51e442045ecb66f8d6ea796697be4ab57dddddef2b71ed034acb1de33daf9ba5a79bfae1b613d22576e2ff90e1b770cb74e26b9cb2b78cab3bb776e124d9480898913970e1b4efbd208a44664172891cac654a07103bd9c34f9614008f7f72d6ff2ddfb8d1b2dee5fffcdd74839ea37b9918efe4931f33529a1559346f978d17211409e67a04d0e76bbb63201899b80e7c7b556634fd229e8424f067a39c18e767304fc69746f09cb1ecadf3af509ca173da6b01ba31d5325f683658b321a7920714c03a3030cee7c70a462116551c20cc3943dc395c870efe34e6dbc9b9b63320f2a64b564b72b6b9f62086e5cf908d354b88117dfaf147fa5d333fbffb66274a3b374c6378d0839ab5b2458376ab9fe4664591c06b76431c94f7cb8d93df8e9a4723c9d3b6dd6e8746f59722ad8f32eeff518ccf7f892f89222ae4e27b79bbab66e96a991f8caeffed5e798532af64f94d7ceea29422956e208afdf028dc2120b0a40fd8252fcd63662c371ffac1a804ddd84acf4741ad20d4bacaaed309913b94a78c7372432891541c0d685ea31076ff473a4345f535086e8a55a226d7235f0bfc9a582d740a2c1af1b208f1911f76a5de4be9eb966cd1a452bdfb4d8cfe7627d58cc1d259c518ae646cabae912d13a2e4d2a307a74439b0323215109554695c00346eb5e9a84de1965eacbf711d0c215a11067edc51e461b43b8f540260cba7ff57015308da3800cd779ebd5943551b1d243ea7dd8d05c60b6c5792c480c231be24cc518214a1deda3c0e13d6e3f03318a8cc6f7486b86784e63165fee4fc55bb6a04eea6e27c198d63fce7d3f58051c4721958398f106975c6dc9e6d01493b51dbba088cf97fe78621bc3add5afefd9fcf81c5297a99814a6ae7bb9f6944ffbe8f5ea16db89020659b811e9e7e73a6305a43001e7ee0083641e7b1663ca1af6f28ef330215c04cd4ccc82c438388a9120dd531f1c3a1401b81317bc7904d555db0fec7d09669ae19d65c9ec82616650c69acf425f3da71e2d40439c5b3411c895fd674ee13009cd04accce1e11cfbec2353191536dcc3e4939fac5a7d94d5ce7f158f71a8e3e9255648b2cf6763a37a9b989d68567426e588198454f605715554e550d8ea5974ce721c274b391ba050df7815460804888baa4f6c447f6d6967f6ef33f262e7cd8ed6ab5c1f3342f84663864f636a03faf584c5f630e1e30b79e27eaeadbd445c3aff93c883e52678fcc1146304ca98d76b313b59cc877a121c673865f34b0c08e186d1876ed8e68958c8d0ee8d0f6daba044717fbd94ae45c11ca7acfaf1e6c3e81bb7396155f891e9e11bc12c871364b4ac5f4a44d63342db8eb3305ff542ace783a7bf324cc6e26a02cf73f74f16a2378c8a9653004babef27fdbef1db748f77f4b32a7493bb28957cda4cbaaf7828bf27371a3f17d1dcc591a63a59c8088bdf0512b8be41e7e2ca8d1ddee64ec33904f51b1182a6c9e0fc36a8ce29b9e15a7db042f2a7263033be8f955fc52c755c97efd3258c81cedba397cad6afcad62dfe6666468e1541831a886edd0910a9031147dbfb822bfdb2edc678b6dd06ea10d26f70ab8a6633a4edcddcec877e19a5030068b0109008425b39962c844ed8868b3c1278c80b9abb9c993e2fbe5ec18457549d3175aeae32400917cb5ca4c10671d002eebf05a9ca9ce2a22b45fbf87e2055e5ae1975e9bdafa581a490b4859bc6d07ffd2fe4b61d3fd3ab15c7f98d574395ff51b5d68cb2cb5ffce65f70511d0bffae648e3a3aaeb193580f96efdbf7e3966fd98e3ebea22b14600a7e16b435657ba9fb5277a2630da2e4c54683dc1a33e22cdf21c3273dcdca699ad84cd9b4d66acf0793e41d2aa79705fb2d5760ff87be03df5ddb4808c9bbe6d4410526426144acc506a98daaff06b0d01d7c9ecab18e12b0c422fb0ff22007d085fcf9ce695a0aab52e5cf685e8653d11d413ddfa8fbf3d5918fd79909c31ea5d6e0f2d8272f27b3e92c306921d34edc3498d76420daa866e82574f2a28bdd2092962c406af2a0bc74b8a6f4a5c6587b2560afc69b47c643d0a21123ad1b915fe88a48237db42e69834ffed68ec408866f399bf0dd022a3c84aa06d28478399e50d4026ede251d6e3aac6fe57bac3e79e5bd2bf1517d6f5c093c8ffbcb694042f17da3c4139acfc12f86d0a88346e58c91817b68e1b4c5fed195ba8df1c0d344ba9930c39deba16f1be8a581409d4e60e9feef114151011207ef9ffc42a54607c691d6e8f43ad878730903dd75a3f8a183b92dd579a86edbecd886533ca5310a9816086dcfd446c102ac05c58d1ffeee1f4925fec3746b8d421cd6cbaef7447d9afe9bab9febfeab0bd1b39618af22e3d25c3d8ab7fa44b445a807e400ecb9eea70ab6c5ca9711268c29b88f8b0158e6313ba94d9846ee32d8627b94cb2e8d25721f7182360be340aa0446fee17a0828cdf22f4b23e6644ef98b824a0014f09cd547b0172cef7ae2481f55a36bb2a7e7fd125859b37b56831ce8eeaffe83678b2eb6c3adc1646c2e61b2f71cee6d94864ef9fbc419f948d9471934804e14eb7631172d423951b1f5d397a2fa519cd69b3e37e074599d4d673598ab70d13d73ade13b0bfb00efc59f5c328e519f9aa4ecf7a289ba7f541466b721bb3ef1e5ae66b837ee83512393b1439f4b83f6216a879e74204c5feca3789429e9c39fe6aad72af90e0c69827c0f715f477e52b4f271d4fbfe135993cb4c8653ea8d420f8363e8f89eaedf64bf4b5dc35306eab1ccc76b45d56853ed47d5497729babf82e1ded33b0a029792e24128a7daca2b2f0f9a76afef2a7e39e184d0819d50b2002fdf09b0ca467a5b9a5d7b39e4a42d4ef12535bcabe0e1c5566317bd12082f48e33a8e1962c35c6437cb4bb3dd847646fe8cfbce8d5ee597b83cc072d694388fcd7d00871d69884862cc1935efb34456ab5abfcd07fa44639e369fea6a27629b3b277f30a6ce9976fb8803958e171d1fb7696b1d2c6d78704bcecbdc3e59badfeda66a9b76ad553f2533ed97da3e75d7623ff82390d048271275470e1d4d44c9662510df37ce28014bbf6139bb2a50de5784c61a0a4f5d6aa473ef015b8a13a8bcb903bbd4e25e221c3e458a2150214aa1071d06de18473e309c23d4269fac2bcc64ed63b3954c9abe5a815f4ca6caae6101280929dd770320345dff7389c17fac9a99025b8f166cd4ed669427b5ffe4e3f22b474b8240bf0fd005731de590d73da83ffc72767802fbd28cd04c9d09882f247627570b1a3aa7003db758a8a2f37c709c7d50c36ad8e862411771b81e30a89b6f3fd2414ffc876c57ab8fffd844f370926fe434e9cf55d655f58dd5ea0a832849c78a6a49f00a0860e2457caa84aad6202ebafdd1d49ebd81b2f91cb74f563c90666f90a69e187c4d22181843515da3572565da21fa1cf60ce9f87eea2b64a45d0143915b756881580caa8c67d47c48cfd2050b3f12f9f0b67d62fb24b895a46b8d7644466298d36ff0b91345dfb1593f0b9a3f3beaef842b7f681cc116a36ad90da00381e00342746b22dc9d75859bfa2605936ff302a193a56dd63eb3e171869725a522d1b95b31411179b57348ccfac9f61ae7000a5da36879f8a76d9e98ee0564c653cfe84559a68afc1feb66f25f8039fe9dfc8bcfb8087173c7a29de3208b97defd4c6dc8e3ee6833b83e0fb25c39865c9cea49f2964c5fad4ec96a292d3e40d5fa30227d9377fdbd1ecd450131bc9ad6de71bb55cc4e76bbc3990196a4ad7da0858a116f30584721ac84cc66c3addfe7d9096a21a23ce56c6efebc0d705f1fba3dc030bcd067116b0a1552d3e503dfed1846fd6c26d613c79c2f3dd755ec4f7d8b8ae1c5dce4c71dcb125f004fe23adb837ba6866b3a3f2eeaa80fb98cdfdbd2665e50368248ccbce6373bc43a10cbd814ddaf648c2f9583baf4fa5bb6047552fe1466f1a2ff2f817efb7ce53d5b8983d73f1ffee562a142b4567a55c3d8d23d5927ac3e31c9f8261463c27bfc91aaa161021a6994965d45aa80ec9f0b895da0f1ce30e9cf2b9232e3644d26f57c0abe4bd239c45d0b9468189c203b0997cbd70bacca5f65a431e0747c619a15afa4c8e8f612af4dd00507353de1bb3898b7a5117581f90d24e729af3009ae03f570d8797dec6276a210655255103ba695ff2fe45075c1dd223cbda1526f4e6d5483f97993a696b26e3cfb758d3d9cab7f6e19ed225f6e4e6c52ce4c46f56e0600ea11522a386378c6018e6d214eef76bf72d1699be7f3a883428280485b66def2aa0ddc83545d208ab7a6d85aeb98c58db2175d7d6ef77136bbfd58273dca2dbb1fa475f8052d6f05ea544a14afd872b3afcff660127fffae85e71265bfb9615e081e1848abd7bd99e6c94cc7ceab89aca52c8174548ec4c772fabb202ce6b5011ccd93f46fc48f3cf1c0f6c4e5c3ce2b113d8ff53d7b157e8559db51691af4ffb2a2d7160a7db7eface95e13155f9f7a760888c13b6c55c8dc24f2ac30313b629745a1ad4539f18ea8becc3d233a39abd47e24e736d040eed5c89362176c653cf29c1a2e531c1e2cdf8b870b8b9c8cbe2a8e39ac013a0ea01b4bc8ba9e7f4946563c8ba8782bacc51816575dddaa1b73a17fab738968bbcff7ae032998029d46a74bdad3cd9a309defb1713c45cbb5eebce7ce1d3034c431e5b1bc2b3ec09c957ada6e4ad985dd94fe582c960e83a66d389b2f57cdd2022623a5669924ffcaad8f234bace67daa2edd709f221f4c893d307e7c787f3e107a46ccf0788c08cc5574ba0a20e8d0be5a4b2defb57bd2eb2a640ad20ae612b3bebe70bc63aa232f47aef87c9ff412edb6b139b055b73ce3d73d0bca73543c47b015c14d108f11e14a1bd71a933ad002b31e76b5df3b3bba99138913d287046583c18c13196418a6445a10406ebb83ebe546ee64b39d11042103fe38d48dc8b0400d4407f8a5913c318713744c5b5f1a13a75089aa75d717f0eb77a21d91854093eec756610be1af8c5c2aed87d6000acc254a0323653ea88c768bac50959acc6d5b8113e08ab32049d8367b64a3e293013d5b4ef9c7da3ffabf580ccdb927e230534a9f21f40494808e9ab567bb36a813b490d6b5889bbf3d7ef8cf33909f00fcb16db8ea98ee4f233b0cf1c0d59fb8d8112f17dc1141868e7cd22769285a076a57a3451d7fa99dfadeea02e72855289e02f8956c4c2cd6cf17a5688f1fe3c1639dd3af700f188afbe55544664b01c62e7952891bcc18be9676ad5b6f21ff9775adc996d2c5f04cc766b78d73a706415754b85108dd3243c771ea058dd9c"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_CT_DIRECTION={0x5}]}}}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xda}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0xa8, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_USERDATA={0x67, 0xd, 0x1, 0x0, "280cd58899bb3e5f16fbc07889535bc80a362a59cb3f0609911fdfb51dcfa651864cd864beb05b18d40e13a2302ffc8f03eed2e3509aa9648c34261da07ebbeb74064af1825fad0d7ce98b842a8231866df905b8e8c8e87dac8b4bf65b1b7cfee7c5c0"}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "cd44df3fc55be522dc16d2e2de9a194fe6dd3d7ac982542bf958958337e0ba5904c51f1a8c6aaa913fde5d6d5a19a912f7f3f3c4aad06cfe366ac9bb1fea106ce7125b2f4532533702ce75e9b29b015f190aa910b46f00ce0ff8"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xef, 0x6, "60910ecc32c5d5aaa75e33dadaf70fef3e9dd0a7de795865caed21ac6957f25762caec1c45661860a757c346c5944e0fd12e603334c0da8a8bfe969cd61e35c4d61d098976bb3cd815ff0ba7af42835cef7b9e43774cd11a85a22400431c782b1d16ba3e9b4d02e77709eb9ba7e808b5abaa5d2507de5c9bcb7771d28ef8bfd1d4e21bf5011d3e9e8dfa04912718961f87a0757488a3112da201e10bd0b5f0e8c080e1238b79155c68012b672eb04dc7082f6d3796b084933f7a6833a5976e916c040f8c3c102c01ddbfa6b33c5fc7add5e4941f0975f377c40ed3c030ec7f8f42d301a547c19c4af67feb"}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x268, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0xd0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60cc}, 0x1, 0x0, 0x0, 0x40010}, 0x20048080)

37.369082756s ago: executing program 6 (id=978):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000020400"/28], 0x50)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7)
setpriority(0x0, 0x1, 0xa7a8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}})
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[])
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0)
accept4(r0, 0x0, 0x0, 0x0)

35.900072842s ago: executing program 6 (id=980):
r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0xb, 0x6, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, 0x0, 0x4040004)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)

27.552844266s ago: executing program 6 (id=996):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r2 = syz_clone(0x80008000, 0x0, 0xffd3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x844)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400007daa8c38fc9bb94f000000010007000006000001000700"/36], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000"], 0x0, 0x3d76, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

20.18692173s ago: executing program 6 (id=1004):
socket$netlink(0x10, 0x3, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r1, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0], 0x0}, 0x40)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x36, 0x800000000004, @tid=r4}, &(0x7f00000000c0))
socket$inet_icmp(0x2, 0x2, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
userfaultfd(0x801)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x11})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)

14.784077279s ago: executing program 5 (id=1012):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
recvmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@rc={0x1f, @none}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000002c0)=""/124, 0x7c}, 0x9}, {{&(0x7f0000000440)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/206, 0xce}], 0x1}, 0x2}, {{&(0x7f0000000680)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000740)=""/59, 0x3b}, 0x1}], 0x4, 0x2, 0x0)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

14.748138502s ago: executing program 0 (id=1013):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
socket$netlink(0x10, 0x3, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

13.672255122s ago: executing program 0 (id=1015):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r0, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)

13.491628101s ago: executing program 0 (id=1016):
socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x60}}, 0x4000)
sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000002000200229bd7000fbdbdf250200000840000006080000000800020000000000080017004e244e2108000b00010001005b1a728667e3a677"], 0x34}, 0x1, 0x0, 0x0, 0xc040}, 0x4000055)
setgid(0x0)
connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x1, "0d9c6e9f9c929c0f2bf87cb3e6da5bc11efab4b594828e344082b7ec45049cc9", 0x0, 0x1, 0xfffff86d, 0x4}, 0x3c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800)
gettid()
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f00000005c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000440)={{0x6, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48)
accept$netrom(r2, 0x0, 0x0)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000100)=0x1, 0x4)
getegid()
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYBLOB="80000000ffffffffff6bb8383437cc9d18961d9b524f3174ff0802110000005050505050500000000000000400000000000000000301b005"], 0x45)

13.372664519s ago: executing program 1 (id=1017):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x1b0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0)
readlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fsetxattr$smack_xattr_label(r1, &(0x7f00000003c0)='security.SMACK64IPIN\x00', &(0x7f00000004c0)={'\x00'}, 0x2, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')
write$vhost_msg(r4, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4)
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)
lseek(r3, 0xfffffffffffffff5, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x40, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "120ea152977bdb26", "6ec680c0cfe8c5c52ea288ac8f73305059421b92a5890c21d1806fbf9247fafa", "d52a410e", "5cba09c4c523f1dd"}, 0x38)
clock_gettime(0x0, &(0x7f0000003f00)={<r5=>0x0, <r6=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYRES16=r6, @ANYBLOB="0d0e00000000000000000000000000000000006e47f9be28a456b1a06df7984d59719000", @ANYRESHEX=r6, @ANYRES32, @ANYRESHEX=r5], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d0000000a000000040000000500000000000000", @ANYRES32], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

12.121884176s ago: executing program 5 (id=1018):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x0, 0x20, 0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r5)
r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000080), 0x12)

11.716985819s ago: executing program 0 (id=1020):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8)
io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)

10.580967453s ago: executing program 1 (id=1021):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48)
lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x2d5, 0xe, 0x1, "1e6c6821abd4618b073c5a2cc252fb91", "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"}, 0x2d5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000cc000000e800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast}}}})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x6, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10.548184113s ago: executing program 5 (id=1022):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
ioprio_set$pid(0x1, r1, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000180)=""/114)
poll(0x0, 0x0, 0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="05000000010001", 0x7)
r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(r5, 0x851, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r6=>0x0})
socket$inet6(0xa, 0x80002, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94)
syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000", @ANYRES32=0x0], 0x0)

7.416098821s ago: executing program 7 (id=1024):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', <r5=>0x0, 0x1, 0x8, 0x6, 0x8, {{0x9, 0x4, 0x0, 0x18, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x10}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x3, 0xd3}]}}}}})
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x8000002)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)

6.19241997s ago: executing program 1 (id=1025):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
socket$netlink(0x10, 0x3, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

6.142006272s ago: executing program 7 (id=1026):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000001d00010000001800b57f00000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802a6cf1d47dd46bdb2e8f100000200000000000000000000008500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xd, 0x0, &(0x7f0000000500)="ba7114d8af50aa3e1c6ed2459d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x189802)
r6 = creat(0x0, 0xe5)
r7 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0, r6}, 0x68)

5.894663596s ago: executing program 5 (id=1027):
r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0xb, 0x6, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, 0x0, 0x4040004)
ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)

5.130693192s ago: executing program 35 (id=1004):
socket$netlink(0x10, 0x3, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001180)={@fallback=r1, 0x2e, 0x1, 0x5, 0x0, 0x0, 0x0, &(0x7f0000001080)=[0x0], &(0x7f00000010c0)=[0x0], 0x0}, 0x40)
r2 = syz_open_procfs(0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r4 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x36, 0x800000000004, @tid=r4}, &(0x7f00000000c0))
socket$inet_icmp(0x2, 0x2, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
userfaultfd(0x801)
r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x11})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)

5.087995227s ago: executing program 7 (id=1029):
syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc090507"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

4.603092751s ago: executing program 0 (id=1030):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
getrlimit(0x6, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000001d00010000001800b57f00000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802a6cf1d47dd46bdb2e8f100000200000000000000000000008500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xd, 0x0, &(0x7f0000000500)="ba7114d8af50aa3e1c6ed2459d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_dev$I2C(0x0, 0x0, 0x189802)
r6 = creat(0x0, 0xe5)
r7 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0, r6}, 0x68)

3.890618789s ago: executing program 1 (id=1031):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = msgget$private(0x0, 0x2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3)
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000000)=[{0x10, 0x84, 0x7}, {0x10}], 0x20}, 0x51)
r5 = epoll_create1(0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
close(r1)
r7 = fcntl$dupfd(r5, 0x0, r3)
setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000400), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=<r8=>0xffffffffffffffff, 0x4, 0x1, 0xffff, &(0x7f00000000c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, <r9=>0x0}, 0x40)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback=r3, r6, 0x16, 0x8, r7, @void, @value=r10, @void, @void, r9}, 0x20)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00')
pread64(r11, &(0x7f0000033240)=""/102400, 0x19000, 0x100008)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r13=>r1, {<r14=>r0}}, './file0\x00'})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r12, 0xffffffffffffffff, 0x18, 0x18, 0x0, @void, @value=r14, @void, @void, r9}, 0x20)
msgsnd(r2, &(0x7f0000000080)={0x1, "a7f4a194a04808dedb02148eed89fcd92ace381a31acf3f3cfc0bbf87d85c514a7ce7862acfba80bdab90c2177101f01f647c29f75dd0187bab6095c131a06a1cbe1c4dafe702521646662594c97d137675a9bc3735b519050ad0f9b5fc560a4746c9ceeabb4052e082a8b5a8fc72d79d512595c2b3da73bd620cda8dccd4967e38590c04cb76a63b5bf54d3c51ff9c31da325bf1777244c413e6479616eadfb5ff512c01988c14f2345fdcf15107b824bb48a3a87da05c664ef66f8b3f504f9"}, 0xc8, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r17=>0x0})
sendmsg$nl_route(r16, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r17}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, <r18=>0x0, &(0x7f0000000380)=""/131, 0x83}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x26, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc7f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @ldst={0xa66f0b657e70b158, 0x0, 0x6, 0x4, 0x3, 0x4, 0x1}, @ldst={0x0, 0x0, 0x3, 0x6, 0x4, 0xfffffffffffffff8, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0xfb, 0x3, 0xc, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x8, 0x9, 0x5, 0xfff, 0x3}, @generic={0xe4, 0x7, 0x7, 0x8, 0x7fff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x1d95, 0x9e, &(0x7f00000005c0)=""/158, 0x40f00, 0x8, '\x00', r17, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x4, 0x3, 0xa8}, 0x10, r18, r10, 0x6, 0x0, &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x5}, {0x1, 0x1, 0x0, 0xa}, {0x4, 0x1, 0x5, 0x8}, {0x0, 0x2, 0x4, 0x9}, {0x1, 0x3, 0x5, 0x9}, {0x5, 0x3, 0x10, 0x2}], 0x10, 0x9}, 0x94)

3.308519935s ago: executing program 5 (id=1032):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, 0x0, 0x118)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8)
io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1})
syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650)

3.24547834s ago: executing program 1 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200090}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x8}, 0x18)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00')
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2, 0x0, 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x2c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000002900)={0x2020}, 0x2020)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001c0001000000", @ANYRES32=r7, @ANYBLOB="8000f2000a000200aaaa6aab401f75044d7faaf00bf427aaaa0c00000600050001000000b1b392e4a53dd9d6f9d1ee627961800e18a4fad21565f88d4916fc834b96b204ab2b8935c07189336875fb10c337d9335bab8fa415700fbe4c058ed02013e5ac4aaa39543997bf729c041065529b3d344fde75d71183d7a7f946d5d8832a6f337a02"], 0x30}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8)

1.992259901s ago: executing program 7 (id=1034):
r0 = fanotify_init(0x8, 0x800)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x3a1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = dup(r9)
fanotify_mark(r0, 0x201, 0x20, r10, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write$binfmt_elf64(r11, &(0x7f0000000040)=ANY=[], 0x10132)
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4)
sendfile(r13, r12, 0x0, 0x400000000000f40c)
socket$inet(0x2, 0x2, 0x0)

1.838943785s ago: executing program 7 (id=1035):
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r1, &(0x7f0000000000)="fa", 0xfffffdef)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48)
lsetxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x2d5, 0xe, 0x1, "1e6c6821abd4618b073c5a2cc252fb91", "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"}, 0x2d5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000cc000000e800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @private=0x10000}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast}}}})
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x6, r3}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

854.795418ms ago: executing program 0 (id=1036):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
socket$netlink(0x10, 0x3, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

122.032402ms ago: executing program 7 (id=1037):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
gettid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', <r5=>0x0, 0x1, 0x8, 0x6, 0x8, {{0x9, 0x4, 0x0, 0x18, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x10}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x3, 0xd3}]}}}}})
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
sendfile(r7, r7, 0x0, 0x8000002)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)

94.441948ms ago: executing program 5 (id=1038):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
socket$netlink(0x10, 0x3, 0x8)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

0s ago: executing program 1 (id=1039):
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc090507"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r4 = socket(0x22, 0x2, 0x24)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)

kernel console output (not intermixed with test programs):

: left allmulticast mode
[  256.543641][ T6024] bridge_slave_0: left promiscuous mode
[  256.572539][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.777817][ T7073] netlink: 252 bytes leftover after parsing attributes in process `syz.4.242'.
[  258.609612][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.620141][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.633328][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.661419][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.671625][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  258.684761][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  258.697409][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  258.719800][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  258.730131][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  258.747510][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.372826][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.402671][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.428104][ T6024] bond0 (unregistering): Released all slaves
[  259.459556][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.550837][ T6024] IPVS: stopping master sync thread 6346 ...
[  260.839241][ T6939] team0: Port device team_slave_0 added
[  260.856979][ T5818] Bluetooth: hci1: command tx timeout
[  260.860905][ T6939] team0: Port device team_slave_1 added
[  262.176590][ T7120] siw: device registration error -23
[  262.664651][ T7121] netlink: 'syz.1.249': attribute type 10 has an invalid length.
[  262.944602][ T5818] Bluetooth: hci1: command tx timeout
[  263.074404][ T7121] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.105797][ T7121] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  263.710915][ T7118] overlayfs: overlapping lowerdir path
[  264.139599][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.151436][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.434607][ T5818] Bluetooth: hci1: command tx timeout
[  265.481705][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.703097][ T7137] netlink: 'syz.1.252': attribute type 10 has an invalid length.
[  266.666487][ T7084] lo speed is unknown, defaulting to 1000
[  266.883767][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1
[  266.906573][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.028182][ T7145] virtio-fs: tag </dev/md0> not found
[  267.333704][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.486234][ T5818] Bluetooth: hci1: command tx timeout
[  267.663800][ T6024] hsr_slave_0: left promiscuous mode
[  267.679266][ T6024] hsr_slave_1: left promiscuous mode
[  267.694058][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.764391][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.512955][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.541490][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.620045][ T6024] veth1_macvtap: left promiscuous mode
[  268.636238][ T6024] veth0_macvtap: left promiscuous mode
[  268.641978][ T6024] veth1_vlan: left promiscuous mode
[  268.657852][ T6024] veth0_vlan: left promiscuous mode
[  270.031569][ T6024] team0 (unregistering): Port device team_slave_1 removed
[  270.064067][ T6024] team0 (unregistering): Port device team_slave_0 removed
[  270.670495][ T6939] hsr_slave_0: entered promiscuous mode
[  270.697177][ T6939] hsr_slave_1: entered promiscuous mode
[  273.523545][ T7199] siw: device registration error -23
[  275.859124][ T7084] chnl_net:caif_netlink_parms(): no params data found
[  275.910996][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.264'.
[  276.114573][ T7217] netlink: 44 bytes leftover after parsing attributes in process `syz.4.264'.
[  276.667218][ T7224] hub 8-0:1.0: USB hub found
[  276.673190][ T7224] hub 8-0:1.0: 1 port detected
[  278.015705][ T7084] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.046210][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.264448][ T7084] bridge_slave_0: entered allmulticast mode
[  278.272031][ T7084] bridge_slave_0: entered promiscuous mode
[  279.742903][ T6024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.895476][ T7257] netlink: 252 bytes leftover after parsing attributes in process `syz.1.270'.
[  280.237309][ T7084] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.427394][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.434759][ T7084] bridge_slave_1: entered allmulticast mode
[  280.445295][ T7084] bridge_slave_1: entered promiscuous mode
[  281.287556][ T6024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  281.345759][ T7084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.377648][ T7084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.433807][ T6939] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  284.307108][ T6024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.825928][ T6939] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  284.916997][ T7084] team0: Port device team_slave_0 added
[  284.960526][ T6024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.983420][ T6939] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  286.738232][ T7084] team0: Port device team_slave_1 added
[  287.343766][ T7282] mkiss: ax0: crc mode is auto.
[  287.777441][ T6939] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.990528][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.014571][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.048979][ T7084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.066351][ T7084] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.097363][ T7084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.244375][ T7084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.387728][ T7303] xt_NFQUEUE: number of total queues is 0
[  288.713076][ T7304] tipc: Started in network mode
[  288.727862][ T7304] tipc: Node identity ac141425, cluster identity 4711
[  288.738437][ T7304] tipc: New replicast peer: 0.0.0.0
[  288.762976][ T7304] tipc: Enabled bearer <udp:syz2>, priority 10
[  289.885505][  T978] tipc: Node number set to 2886997029
[  290.888062][ T7084] hsr_slave_0: entered promiscuous mode
[  290.956957][ T7084] hsr_slave_1: entered promiscuous mode
[  290.969000][ T7084] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  291.411020][ T7084] Cannot create hsr debugfs directory
[  291.461306][ T7329] tipc: Started in network mode
[  291.472495][ T7329] tipc: Node identity ac141425, cluster identity 4711
[  291.547331][ T7329] tipc: New replicast peer: 0.0.0.0
[  291.568017][ T7329] tipc: Enabled bearer <udp:syz2>, priority 10
[  291.577205][ T7330] tipc: New replicast peer: 172.20.20.170
[  291.928506][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  292.675152][ T5825] tipc: Node number set to 2886997029
[  293.071082][ T7346] tmpfs: Unknown parameter 'usrquota_block'
[  293.574303][   T24] IPVS: starting estimator thread 0...
[  293.601077][ T6024] bridge_slave_1: left allmulticast mode
[  293.625549][ T6024] bridge_slave_1: left promiscuous mode
[  293.643138][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.724942][ T7347] IPVS: using max 42 ests per chain, 100800 per kthread
[  293.905945][ T6024] bridge_slave_0: left allmulticast mode
[  294.144350][ T6024] bridge_slave_0: left promiscuous mode
[  294.155194][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.380886][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  294.390201][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  294.411088][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.438393][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.454844][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  296.684464][ T5138] Bluetooth: hci3: command tx timeout
[  298.767550][ T5138] Bluetooth: hci3: command tx timeout
[  298.792687][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  298.819531][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.831199][ T6024] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  298.845143][ T6024] bond0 (unregistering): Released all slaves
[  299.095320][ T7365] netlink: 'syz.0.288': attribute type 6 has an invalid length.
[  299.671842][ T7359] mkiss: ax0: crc mode is auto.
[  301.012497][ T5138] Bluetooth: hci3: command tx timeout
[  303.094974][ T5138] Bluetooth: hci3: command tx timeout
[  305.070894][ T7352] lo speed is unknown, defaulting to 1000
[  306.307368][ T6024] hsr_slave_0: left promiscuous mode
[  306.429608][ T6024] hsr_slave_1: left promiscuous mode
[  306.449500][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.464505][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.496820][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.518325][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.580566][ T6024] veth1_macvtap: left promiscuous mode
[  306.586775][ T6024] veth0_macvtap: left promiscuous mode
[  306.592693][ T6024] veth1_vlan: left promiscuous mode
[  306.606923][ T6024] veth0_vlan: left promiscuous mode
[  306.802249][ T7416] overlayfs: overlapping lowerdir path
[  307.613193][ T6024] team0 (unregistering): Port device team_slave_1 removed
[  307.646763][ T6024] team0 (unregistering): Port device team_slave_0 removed
[  308.228817][ T5923] lo speed is unknown, defaulting to 1000
[  308.250509][ T5923] infiniband syz0: ib_query_port failed (-19)
[  310.007891][ T7084] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  310.051733][ T7084] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  310.061471][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'.
[  310.170539][ T7442] vivid-007: =================  START STATUS  =================
[  310.178674][ T7442] vivid-007: Enable Output Cropping: true
[  310.185496][ T7442] vivid-007: Enable Output Composing: true
[  310.191481][ T7442] vivid-007: Enable Output Scaler: true
[  310.197224][ T7442] vivid-007: Tx RGB Quantization Range: Automatic
[  310.203839][ T7442] vivid-007: Transmit Mode: HDMI
[  310.209041][ T7442] vivid-007: Hotplug Present: 0x00000000
[  310.214926][ T7442] vivid-007: RxSense Present: 0x00000000
[  310.220759][ T7442] vivid-007: EDID Present: 0x00000000
[  310.227722][ T7442] vivid-007: ==================  END STATUS  ==================
[  310.243203][ T7084] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  310.573407][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.304'.
[  310.609560][ T7084] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  313.674365][ T7471] overlayfs: overlapping lowerdir path
[  313.839522][ T6024] IPVS: stop unused estimator thread 0...
[  314.926218][ T7352] chnl_net:caif_netlink_parms(): no params data found
[  315.983980][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[  315.993057][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'.
[  317.007495][ T5818] Bluetooth: hci3: command 0x0405 tx timeout
[  317.015886][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.041488][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.640203][   T30] audit: type=1400 audit(1751536683.483:26): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=7510 comm="syz.1.315" path="socket:[12908]" dev="sockfs" ino=12908
[  317.893440][   T30] audit: type=1400 audit(1751536683.543:27): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=7510 comm="syz.1.315" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo
[  321.044304][  T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  321.069345][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  321.103095][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  321.143830][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  321.159539][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  321.172358][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  321.331040][  T978] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  321.399750][  T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.426931][  T978] usb 2-1: Product: syz
[  321.437609][  T978] usb 2-1: Manufacturer: syz
[  321.450270][  T978] usb 2-1: SerialNumber: syz
[  321.675718][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.698105][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.096835][  T978] usb 2-1: config 0 descriptor??
[  322.139058][ T7352] bridge_slave_0: entered allmulticast mode
[  322.147287][ T7352] bridge_slave_0: entered promiscuous mode
[  322.159926][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.171980][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.213445][  T978] usb 2-1: selecting invalid altsetting 1
[  322.241146][  T978] comedi comedi0: could not switch to alternate setting 1
[  322.257178][  T978] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  322.332635][ T7352] bridge_slave_1: entered allmulticast mode
[  322.406457][ T7352] bridge_slave_1: entered promiscuous mode
[  323.333987][ T5138] Bluetooth: hci5: command tx timeout
[  325.404333][ T5138] Bluetooth: hci5: command tx timeout
[  326.239827][  T978] usb 2-1: USB disconnect, device number 2
[  326.948091][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  327.695254][ T5138] Bluetooth: hci5: command tx timeout
[  327.791629][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.178805][ T7585] syz.1.327: attempt to access beyond end of device
[  329.178805][ T7585] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0
[  329.194906][ T7585] gfs2: error -5 reading superblock
[  329.470530][ T7352] team0: Port device team_slave_0 added
[  329.520830][ T7352] team0: Port device team_slave_1 added
[  329.807141][ T5138] Bluetooth: hci5: command tx timeout
[  330.522682][ T6024] bridge_slave_1: left allmulticast mode
[  330.536595][ T6024] bridge_slave_1: left promiscuous mode
[  330.544137][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.725004][ T6024] bridge_slave_0: left allmulticast mode
[  330.789331][ T6024] bridge_slave_0: left promiscuous mode
[  330.845944][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.536727][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  332.547776][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.560127][ T6024] bond0 (unregistering): Released all slaves
[  332.741535][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.017523][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.063598][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.118340][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.138340][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.170139][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.500217][ T7616] hub 8-0:1.0: USB hub found
[  333.506350][ T7616] hub 8-0:1.0: 1 port detected
[  335.342512][ T6024] hsr_slave_0: left promiscuous mode
[  335.355045][ T5874] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  335.374944][ T6024] hsr_slave_1: left promiscuous mode
[  335.381034][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.431547][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.090814][ T5874] usb 2-1: unable to get BOS descriptor or descriptor too short
[  336.105246][ T5874] usb 2-1: not running at top speed; connect to a high speed hub
[  336.123494][ T5874] usb 2-1: config 253 has an invalid interface number: 140 but max is 0
[  336.154844][ T5874] usb 2-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config
[  336.226910][ T5874] usb 2-1: config 253 has no interface number 0
[  336.332137][ T5874] usb 2-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  337.477027][ T5874] usb 2-1: string descriptor 0 read error: -71
[  337.483389][ T5874] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b
[  337.492530][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.505420][ T5874] usb 2-1: can't set config #253, error -71
[  337.520272][ T5874] usb 2-1: USB disconnect, device number 3
[  338.220237][ T7643] IPv6: Can't replace route, no match found
[  338.547309][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  338.714731][   T10] usb 5-1: Using ep0 maxpacket: 8
[  338.727114][   T10] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  338.752806][   T10] usb 5-1: config 179 has no interface number 0
[  338.783459][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  338.825169][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  338.864406][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 134, changing to 11
[  338.899535][   T10] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  338.940237][   T10] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  338.976801][   T10] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  339.003018][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.172044][ T7643] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.964408][ T6024] team0 (unregistering): Port device team_slave_1 removed
[  340.092909][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input7
[  341.038660][ T6024] team0 (unregistering): Port device team_slave_0 removed
[  341.204272][ T5923] usb 5-1: USB disconnect, device number 3
[  341.204668][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  341.219294][ T5923] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  341.219884][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  341.684066][ T7352] hsr_slave_0: entered promiscuous mode
[  341.703692][ T7352] hsr_slave_1: entered promiscuous mode
[  346.820958][ T7543] chnl_net:caif_netlink_parms(): no params data found
[  347.299245][ T7686] syz.4.346: attempt to access beyond end of device
[  347.299245][ T7686] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0
[  347.313220][ T7686] syz.4.346: attempt to access beyond end of device
[  347.313220][ T7686] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0
[  347.326623][ T7686] Mount JFS Failure: -5
[  347.330876][ T7686] jfs_mount failed w/return code = -5
[  348.611566][ T7693] fuse: Bad value for 'user_id'
[  348.631741][ T7693] fuse: Bad value for 'user_id'
[  350.742535][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.797829][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.831244][ T7543] bridge_slave_0: entered allmulticast mode
[  350.863444][ T7543] bridge_slave_0: entered promiscuous mode
[  351.171477][ T7707] sit0: entered promiscuous mode
[  351.382871][ T7707] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[  351.415190][ T7707] netlink: 1 bytes leftover after parsing attributes in process `syz.0.352'.
[  351.448853][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.469009][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.486100][ T7543] bridge_slave_1: entered allmulticast mode
[  351.526027][ T7543] bridge_slave_1: entered promiscuous mode
[  352.204573][ T7721] netlink: 788 bytes leftover after parsing attributes in process `syz.1.354'.
[  353.531292][ T5818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  353.540561][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  353.555948][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  353.563967][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  353.576988][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  354.419117][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.450095][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.614299][ T5874] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  355.005140][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  355.061565][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  355.118792][ T5874] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  355.140361][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.154469][ T5874] usb 2-1: Product: syz
[  355.166076][ T5874] usb 2-1: Manufacturer: syz
[  355.170706][ T5874] usb 2-1: SerialNumber: syz
[  355.173250][ T7543] team0: Port device team_slave_0 added
[  355.202237][ T5874] usb 2-1: config 0 descriptor??
[  355.382805][ T5874] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress aa
[  355.622950][ T7742] netlink: 'syz.0.359': attribute type 10 has an invalid length.
[  355.655386][ T5818] Bluetooth: hci1: command tx timeout
[  356.831619][ T7543] team0: Port device team_slave_1 added
[  356.853123][ T5874] usb 2-1: USB disconnect, device number 4
[  357.914253][ T5818] Bluetooth: hci1: command tx timeout
[  358.067125][ T7556] udevd[7556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.047028][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.083981][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.225341][ T7543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.763119][ T7543] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.776852][ T7543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.874135][ T7543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.059040][ T5818] Bluetooth: hci1: command tx timeout
[  362.311878][ T5818] Bluetooth: hci1: command tx timeout
[  362.725420][ T5989] bridge_slave_1: left allmulticast mode
[  363.519689][ T5989] bridge_slave_1: left promiscuous mode
[  364.351437][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.495747][ T5989] bridge_slave_0: left allmulticast mode
[  364.508033][ T5989] bridge_slave_0: left promiscuous mode
[  364.518806][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.669461][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.374'.
[  366.954136][ T7826] netlink: 'syz.4.374': attribute type 10 has an invalid length.
[  368.887768][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.944994][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.956083][ T5989] bond0 (unregistering): Released all slaves
[  369.019632][ T7543] hsr_slave_0: entered promiscuous mode
[  369.041075][ T7543] hsr_slave_1: entered promiscuous mode
[  369.077113][ T7543] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.113970][ T7543] Cannot create hsr debugfs directory
[  369.146254][ T7832] binder: BINDER_SET_CONTEXT_MGR already set
[  369.152899][ T7832] binder: 7830:7832 ioctl 4018620d 200000000040 returned -16
[  369.248833][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.267315][ T7826] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  369.924465][ T5989] hsr_slave_0: left promiscuous mode
[  369.930340][ T5989] hsr_slave_1: left promiscuous mode
[  369.943818][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.956127][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  370.729467][ T7843] netlink: 'syz.0.378': attribute type 9 has an invalid length.
[  371.488198][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  372.740603][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  373.360125][ T7857] program syz.1.381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.375272][ T7857] program syz.1.381 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  373.386061][ T7857] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  373.562828][ T7854] batman_adv: batadv0: Adding interface: macsec1
[  373.570509][ T7854] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.600343][ T7854] batman_adv: batadv0: Interface activated: macsec1
[  375.195360][ T7871] netlink: 52 bytes leftover after parsing attributes in process `syz.0.384'.
[  375.623935][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'.
[  375.815629][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.824585][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.590168][ T7728] chnl_net:caif_netlink_parms(): no params data found
[  376.680683][ T7879] 9pnet_fd: Insufficient options for proto=fd
[  376.921671][ T5989] bridge_slave_1: left allmulticast mode
[  376.941671][ T5989] bridge_slave_1: left promiscuous mode
[  376.964504][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.030794][ T5989] bridge_slave_0: left allmulticast mode
[  377.038317][ T5989] bridge_slave_0: left promiscuous mode
[  377.044152][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.591074][ T7905] Bluetooth: hci0: unsupported parameter 39401
[  377.597385][ T7905] Bluetooth: hci0: unsupported parameter 512
[  377.603450][ T7905] Bluetooth: hci0: unsupported parameter 39401
[  377.609754][ T7905] Bluetooth: hci0: unsupported parameter 512
[  378.291244][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  378.444743][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.451151][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.501030][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  378.595804][ T5989] bond0 (unregistering): Released all slaves
[  378.879914][ T7904] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  378.889430][ T7904] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  379.401008][ T7925] netlink: 'syz.0.388': attribute type 10 has an invalid length.
[  380.962371][ T5989] hsr_slave_0: left promiscuous mode
[  380.993274][ T5989] hsr_slave_1: left promiscuous mode
[  381.054995][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  381.089540][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.485952][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  382.498250][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  382.518260][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  382.535020][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  382.552889][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  383.987001][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  384.015769][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  384.324292][ T7966] netlink: 'syz.4.395': attribute type 10 has an invalid length.
[  384.701608][ T5818] Bluetooth: hci3: command tx timeout
[  384.892101][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.018802][ T7728] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.096041][ T7728] bridge_slave_0: entered allmulticast mode
[  385.217552][ T7728] bridge_slave_0: entered promiscuous mode
[  385.398638][ T7728] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.537901][ T7728] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.545289][ T7728] bridge_slave_1: entered allmulticast mode
[  386.036048][ T7728] bridge_slave_1: entered promiscuous mode
[  386.443820][   T30] audit: type=1326 audit(1751536752.343:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  386.764508][ T5818] Bluetooth: hci3: command tx timeout
[  386.801959][ T7979] vivid-007: kernel_thread() failed
[  386.930842][   T30] audit: type=1326 audit(1751536752.443:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  387.079585][   T30] audit: type=1326 audit(1751536752.443:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  387.145247][   T30] audit: type=1326 audit(1751536752.443:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  387.265185][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[  388.756003][ T7728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.803481][   T30] audit: type=1326 audit(1751536752.443:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  388.900583][ T5818] Bluetooth: hci3: command tx timeout
[  389.174083][   T30] audit: type=1326 audit(1751536752.443:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  389.495101][   T30] audit: type=1326 audit(1751536752.453:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  389.816248][   T30] audit: type=1326 audit(1751536752.453:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  390.032528][   T30] audit: type=1326 audit(1751536752.453:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  391.065715][   T30] audit: type=1326 audit(1751536752.453:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7974 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  391.179382][ T5818] Bluetooth: hci3: command tx timeout
[  391.257795][ T7728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.542479][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'.
[  391.556264][ T7991] tipc: Disabling bearer <udp:syz2>
[  394.498852][ T8012] IPv6: Can't replace route, no match found
[  394.785351][ T8009] Falling back ldisc for ttyprintk.
[  395.804810][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  395.964447][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  396.021238][ T7728] team0: Port device team_slave_0 added
[  396.175269][ T5901] usb 1-1: device descriptor read/all, error -71
[  396.273608][ T7728] team0: Port device team_slave_1 added
[  398.256764][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.266614][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'.
[  398.288102][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.674304][ T7728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.795153][ T7728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.802122][ T7728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.829812][ T7728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.051862][ T7728] hsr_slave_0: entered promiscuous mode
[  400.282768][ T7728] hsr_slave_1: entered promiscuous mode
[  400.291064][ T1333] bridge_slave_1: left allmulticast mode
[  400.297316][ T1333] bridge_slave_1: left promiscuous mode
[  400.303241][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.763587][ T8078] i2c i2c-0: Invalid block write size 34
[  402.771326][ T8078] netlink: 'syz.4.415': attribute type 1 has an invalid length.
[  403.405748][ T1333] bridge_slave_0: left allmulticast mode
[  403.411656][ T1333] bridge_slave_0: left promiscuous mode
[  404.024792][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.808083][ T8090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.856020][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[  404.865321][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'.
[  406.000957][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.011906][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.022549][ T1333] bond0 (unregistering): Released all slaves
[  406.041630][ T8078] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  407.605119][ T8113] smk_cipso_doi:692 cipso add rc = -17
[  409.073664][ T1333] hsr_slave_0: left promiscuous mode
[  409.116594][ T1333] hsr_slave_1: left promiscuous mode
[  409.138941][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.159817][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  409.509855][ T1333] team0 (unregistering): Port device team_slave_1 removed
[  409.560192][ T1333] team0 (unregistering): Port device team_slave_0 removed
[  410.255621][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'.
[  410.752145][ T7952] chnl_net:caif_netlink_parms(): no params data found
[  411.249254][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  411.259208][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  411.270731][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  411.284098][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  411.291966][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  412.011155][ T8156] batadv1: entered promiscuous mode
[  412.040742][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.058199][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.083277][ T7952] bridge_slave_0: entered allmulticast mode
[  412.101665][ T7952] bridge_slave_0: entered promiscuous mode
[  412.187914][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.212686][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.228640][ T7952] bridge_slave_1: entered allmulticast mode
[  412.237800][ T7952] bridge_slave_1: entered promiscuous mode
[  412.410824][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  412.434481][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  412.484607][  T176] bridge_slave_1: left allmulticast mode
[  412.496838][  T176] bridge_slave_1: left promiscuous mode
[  412.503035][  T176] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.550942][  T176] bridge_slave_0: left allmulticast mode
[  412.558283][  T176] bridge_slave_0: left promiscuous mode
[  412.567729][  T176] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.325345][ T5818] Bluetooth: hci5: command tx timeout
[  413.830402][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'.
[  414.584744][  T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  414.645282][  T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  414.932936][  T176] bond0 (unregistering): Released all slaves
[  415.331232][ T1333] Bluetooth: (null): Too short H5 packet
[  415.340493][ T1333] Bluetooth: (null): Invalid header checksum
[  415.348186][ T1333] Bluetooth: (null): Invalid header checksum
[  415.358934][ T1333] Bluetooth: (null): Invalid header checksum
[  415.381264][ T1333] Bluetooth: (null): Invalid header checksum
[  415.405104][ T5818] Bluetooth: hci5: command tx timeout
[  415.458084][ T7952] team0: Port device team_slave_0 added
[  415.468155][ T7952] team0: Port device team_slave_1 added
[  415.478096][ T5989] Bluetooth: (null): Invalid header checksum
[  415.904610][  T176] hsr_slave_0: left promiscuous mode
[  415.956454][  T176] hsr_slave_1: left promiscuous mode
[  416.032630][  T176] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.142181][  T176] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.209665][  T176] team0 (unregistering): Port device team_slave_1 removed
[  417.268495][  T176] team0 (unregistering): Port device team_slave_0 removed
[  417.471965][ T8214] Device name not specified.
[  417.471965][ T8214] 
[  417.484389][ T5818] Bluetooth: hci5: command tx timeout
[  417.490568][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.497989][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.524341][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.539369][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.547647][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.617657][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.282808][ T7952] hsr_slave_0: entered promiscuous mode
[  418.302485][ T7952] hsr_slave_1: entered promiscuous mode
[  418.319232][ T8221] netlink: 68 bytes leftover after parsing attributes in process `syz.0.439'.
[  418.704610][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  418.924615][ T5888] usb 5-1: device descriptor read/64, error -71
[  419.295088][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  419.318389][ T8148] chnl_net:caif_netlink_parms(): no params data found
[  419.487045][ T5888] usb 5-1: device descriptor read/64, error -71
[  419.564554][ T5818] Bluetooth: hci5: command tx timeout
[  419.701233][ T5888] usb usb5-port1: attempt power cycle
[  419.927172][ T8253] netlink: 'syz.1.443': attribute type 10 has an invalid length.
[  420.214464][ T5888] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  420.288486][ T5888] usb 5-1: device descriptor read/8, error -71
[  421.054502][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  421.077133][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'.
[  421.105149][ T5888] usb 5-1: device descriptor read/8, error -71
[  421.118230][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.313575][  T176] Bluetooth: (null): Too short H5 packet
[  421.702567][ T5888] usb usb5-port1: unable to enumerate USB device
[  421.709965][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.721556][ T8148] bridge_slave_0: entered allmulticast mode
[  421.729896][ T8148] bridge_slave_0: entered promiscuous mode
[  421.739231][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.746740][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.755361][ T8148] bridge_slave_1: entered allmulticast mode
[  421.763128][ T8148] bridge_slave_1: entered promiscuous mode
[  421.770032][  T176] Bluetooth: (null): Invalid header checksum
[  421.794342][  T176] Bluetooth: (null): Invalid header checksum
[  422.178579][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.039402][ T8274] veth1_macvtap: left promiscuous mode
[  423.137660][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.406335][ T8283] Bluetooth: hci0: Opcode 0x080f failed: -22
[  425.442723][ T7952] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  425.508839][ T7952] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  425.541531][ T8148] team0: Port device team_slave_0 added
[  425.621664][ T8148] team0: Port device team_slave_1 added
[  425.905985][ T7952] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  426.988875][ T5818] Bluetooth: hci0: command tx timeout
[  427.173738][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.194239][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.220622][ T8148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.235312][ T7952] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  427.766628][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.783152][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.824614][ T8148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.028180][ T8148] hsr_slave_0: entered promiscuous mode
[  428.035675][ T8148] hsr_slave_1: entered promiscuous mode
[  428.042039][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  428.643945][ T8148] Cannot create hsr debugfs directory
[  432.462935][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.129351][ T7952] 8021q: adding VLAN 0 to HW filter on device team0
[  433.312270][ T7952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  433.419211][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  433.428972][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  433.438790][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  433.514247][ T8353] netlink: 'syz.0.458': attribute type 11 has an invalid length.
[  433.522094][ T8353] netlink: 224 bytes leftover after parsing attributes in process `syz.0.458'.
[  433.941299][ T7952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.003125][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.010343][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.096341][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.103547][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.205230][ T8359] binder: 8357:8359 ioctl c018620c 200000000640 returned -22
[  434.929552][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  436.699476][   T10] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  436.730433][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.796433][   T10] usb 5-1: config 0 has no interface number 0
[  436.836740][ T8148] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  436.860853][   T10] usb 5-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00
[  436.890636][ T8148] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  436.901263][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.158413][ T8148] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  437.384619][   T10] usb 5-1: Product: syz
[  437.590458][   T10] usb 5-1: Manufacturer: syz
[  437.624305][   T10] usb 5-1: SerialNumber: syz
[  437.830104][ T8148] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  437.910692][   T10] usb 5-1: config 0 descriptor??
[  437.924226][   T10] usb 5-1: can't set config #0, error -71
[  437.939972][   T10] usb 5-1: USB disconnect, device number 8
[  438.146897][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  438.999177][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.469'.
[  439.809008][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  439.815662][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.179470][ T8417] syz.1.468: attempt to access beyond end of device
[  440.179470][ T8417] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[  440.192909][ T8417] gfs2: error -5 reading superblock
[  440.438170][ T8416] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  441.121205][ T8425] hugetlbfs: syz.4.471 (8425): Using mlock ulimits for SHM_HUGETLB is obsolete
[  441.405466][ T5138] Bluetooth: hci5: command 0x0405 tx timeout
[  441.573583][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.638237][ T8148] 8021q: adding VLAN 0 to HW filter on device team0
[  441.710335][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.717541][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.763067][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.770219][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.525749][ T5138] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  443.535473][ T5138] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  443.543320][ T5138] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  443.552191][ T5138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  443.560232][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  445.702976][ T5138] Bluetooth: hci1: command tx timeout
[  447.764755][ T5138] Bluetooth: hci1: command tx timeout
[  447.918384][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0
[  448.980187][ T1333] bridge_slave_1: left allmulticast mode
[  448.998242][ T1333] bridge_slave_1: left promiscuous mode
[  449.028606][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.095466][ T1333] bridge_slave_0: left allmulticast mode
[  449.126649][ T1333] bridge_slave_0: left promiscuous mode
[  449.163158][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.804381][ T5138] Bluetooth: hci1: command tx timeout
[  452.096234][ T5138] Bluetooth: hci1: command tx timeout
[  453.395908][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.487'.
[  453.759793][ T8527] syz.1.488: attempt to access beyond end of device
[  453.759793][ T8527] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0
[  453.773388][ T8527] syz.1.488: attempt to access beyond end of device
[  453.773388][ T8527] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0
[  453.786786][ T8527] Mount JFS Failure: -5
[  453.791047][ T8527] jfs_mount failed w/return code = -5
[  454.496362][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.584642][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.607651][ T1333] bond0 (unregistering): Released all slaves
[  454.641794][ T8441] chnl_net:caif_netlink_parms(): no params data found
[  456.711356][ T1333] hsr_slave_0: left promiscuous mode
[  456.731485][ T1333] hsr_slave_1: left promiscuous mode
[  456.743842][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_0
[  456.759247][ T8532] syz.0.497 uses obsolete (PF_INET,SOCK_PACKET)
[  456.780951][ T1333] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.411274][ T8547] delete_channel: no stack
[  457.955608][ T8552] netlink: 'syz.4.492': attribute type 6 has an invalid length.
[  458.531731][ T1333] team0 (unregistering): Port device team_slave_1 removed
[  458.569816][ T1333] team0 (unregistering): Port device team_slave_0 removed
[  458.980816][ T8559] netlink: 'syz.1.490': attribute type 10 has an invalid length.
[  460.921757][ T8148] veth0_vlan: entered promiscuous mode
[  462.948916][ T8578] syz.0.495: attempt to access beyond end of device
[  462.948916][ T8578] loop0: rw=6144, sector=128, nr_sectors = 8 limit=0
[  462.962135][ T8578] gfs2: error -5 reading superblock
[  462.985666][ T8580] netlink: 40 bytes leftover after parsing attributes in process `syz.4.496'.
[  463.017525][ T8148] veth1_vlan: entered promiscuous mode
[  463.088178][ T8441] bridge0: port 1(bridge_slave_0) entered blocking state
[  463.132526][ T8441] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.154672][ T8441] bridge_slave_0: entered allmulticast mode
[  463.162260][ T8441] bridge_slave_0: entered promiscuous mode
[  463.195342][ T8441] bridge0: port 2(bridge_slave_1) entered blocking state
[  463.202550][ T8441] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.209999][ T8441] bridge_slave_1: entered allmulticast mode
[  463.395538][ T8441] bridge_slave_1: entered promiscuous mode
[  464.197761][ T8601] kernel profiling enabled (shift: 17)
[  465.124451][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'.
[  465.499829][ T8441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.528804][ T8441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.959834][ T8441] team0: Port device team_slave_0 added
[  466.171677][ T8148] veth0_macvtap: entered promiscuous mode
[  466.181818][ T8148] veth1_macvtap: entered promiscuous mode
[  466.203131][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.212777][ T8441] team0: Port device team_slave_1 added
[  466.308247][ T8630] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  466.838552][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.049387][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.067633][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.224586][ T8441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  467.242779][ T8148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.258379][ T8148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.297645][ T8148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.306660][ T8148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.333791][ T8441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  467.436469][ T8441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.467915][ T8441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  467.612961][ T8441] hsr_slave_0: entered promiscuous mode
[  467.636011][ T8441] hsr_slave_1: entered promiscuous mode
[  468.281753][ T8648] program syz.4.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  468.339189][ T8648] program syz.4.507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  468.371939][ T8648] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  469.131139][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.239218][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.502043][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.512827][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.985958][ T8679] netlink: 84 bytes leftover after parsing attributes in process `syz.5.208'.
[  472.383034][ T8687] netlink: 'syz.1.512': attribute type 4 has an invalid length.
[  473.358701][ T8441] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  473.375587][ T8687] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.458400][ T8441] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  473.897395][ T8441] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  474.764259][ T8708] netlink: 'syz.5.517': attribute type 10 has an invalid length.
[  474.978438][ T8708] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.037906][ T8708] team0: Port device bond0 added
[  475.044104][ T8441] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  475.427859][ T8441] 8021q: adding VLAN 0 to HW filter on device bond0
[  476.007908][ T8730] batadv_slave_1: entered promiscuous mode
[  476.047702][ T3076] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  477.091687][ T8441] 8021q: adding VLAN 0 to HW filter on device team0
[  477.511739][ T8725] batadv_slave_1: left promiscuous mode
[  477.519573][ T8739] netlink: 'syz.4.521': attribute type 1 has an invalid length.
[  478.027867][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.035103][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.198063][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.205252][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  478.538123][ T8441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  478.557477][ T8441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  481.381412][ T8781] netlink: 'syz.5.527': attribute type 4 has an invalid length.
[  481.389195][ T8781] netlink: 17 bytes leftover after parsing attributes in process `syz.5.527'.
[  483.015378][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'.
[  483.103991][ T8787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.528'.
[  483.977768][ T8800] syz.4.529: attempt to access beyond end of device
[  483.977768][ T8800] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0
[  483.991496][ T8800] hfsplus: unable to find HFS+ superblock
[  484.260341][ T8441] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.614799][ T8819] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  487.349801][ T8826] random: crng reseeded on system resumption
[  488.837702][ T8441] veth0_vlan: entered promiscuous mode
[  489.091019][ T8441] veth1_vlan: entered promiscuous mode
[  489.429296][ T8441] veth0_macvtap: entered promiscuous mode
[  490.017620][ T8441] veth1_macvtap: entered promiscuous mode
[  490.348473][ T8858] program syz.0.541 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.418346][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.479965][ T8858] program syz.0.541 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  490.555883][ T8858] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  490.804664][ T8441] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.881847][ T8441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.920250][ T8441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.944839][ T8441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.974056][ T8441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.986739][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'.
[  490.995787][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.542'.
[  491.603855][ T8876] xt_CT: You must specify a L4 protocol and not use inversions on it
[  492.985529][ T8881] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  493.653579][  T176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.690377][  T176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.146865][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  495.154854][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.835836][ T8900] netlink: 'syz.1.549': attribute type 1 has an invalid length.
[  495.843811][ T8900] netlink: 228 bytes leftover after parsing attributes in process `syz.1.549'.
[  495.921016][ T8902] NILFS (nullb0): couldn't find nilfs on the device
[  497.092075][ T8895] sp0: Synchronizing with TNC
[  500.862663][ T8929] Bluetooth: hci3: Frame reassembly failed (-84)
[  501.345349][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.351826][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  502.992037][ T5138] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  503.559395][ T8953] hub 8-0:1.0: USB hub found
[  503.573903][ T8953] hub 8-0:1.0: 1 port detected
[  504.350155][   T30] kauditd_printk_skb: 7 callbacks suppressed
[  504.350173][   T30] audit: type=1800 audit(1751536870.253:45): pid=8966 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.560" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  505.316778][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'.
[  505.327394][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'.
[  505.700426][ T8976] netlink: 588 bytes leftover after parsing attributes in process `syz.0.563'.
[  506.593965][ T5825] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  507.162856][ T5825] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  507.322797][ T5825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  507.405061][ T5825] usb 1-1: config 0 has no interface number 0
[  507.434556][ T5825] usb 1-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  507.476663][ T5825] usb 1-1: New USB device found, idVendor=05c6, idProduct=9035, bcdDevice=26.4c
[  507.528031][ T8986] delete_channel: no stack
[  507.543235][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.717541][ T5825] usb 1-1: Product: syz
[  507.721876][ T5825] usb 1-1: Manufacturer: syz
[  507.729169][ T5825] usb 1-1: SerialNumber: syz
[  507.740647][ T5825] usb 1-1: config 0 descriptor??
[  507.760731][ T5825] qmi_wwan 1-1:0.4: probe with driver qmi_wwan failed with error -22
[  508.798182][ T5818] Bluetooth: hci1: unknown advertising packet type: 0x70
[  509.855946][ T5901] usb 1-1: USB disconnect, device number 4
[  511.400359][ T5818] Bluetooth: hci1: command 0x0405 tx timeout
[  514.152196][ T9030] devtmpfs: Unknown parameter 'nr_Inode'
[  514.501805][ T9035] hub 8-0:1.0: USB hub found
[  514.507473][ T9035] hub 8-0:1.0: 1 port detected
[  516.325811][ T9046] random: crng reseeded on system resumption
[  517.365678][ T9058] virtio-fs: tag </dev/md0> not found
[  517.719883][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'.
[  517.728769][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'.
[  517.737958][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.581'.
[  517.823022][ T9070] netlink: 'syz.6.581': attribute type 11 has an invalid length.
[  517.830909][ T9070] netlink: 224 bytes leftover after parsing attributes in process `syz.6.581'.
[  518.305523][ T9072] vivid-000: =================  START STATUS  =================
[  518.317308][ T9072] vivid-000: Radio HW Seek Mode: Bounded
[  518.323628][ T9072] vivid-000: Radio Programmable HW Seek: false
[  518.330174][ T9072] vivid-000: RDS Rx I/O Mode: Block I/O
[  518.335980][ T9072] vivid-000: Generate RBDS Instead of RDS: false
[  518.446446][ T9072] vivid-000: RDS Reception: true
[  518.451886][ T9072] vivid-000: RDS Program Type: 0 inactive
[  518.458063][ T9072] vivid-000: RDS PS Name:  inactive
[  518.463581][ T9072] vivid-000: RDS Radio Text:  inactive
[  518.469475][ T9072] vivid-000: RDS Traffic Announcement: false inactive
[  518.482898][ T9072] vivid-000: RDS Traffic Program: false inactive
[  518.492640][ T9072] vivid-000: RDS Music: false inactive
[  518.498788][ T9072] vivid-000: ==================  END STATUS  ==================
[  519.437803][ T9082] capability: warning: `syz.5.586' uses 32-bit capabilities (legacy support in use)
[  526.764457][ T9116] devtmpfs: Unknown parameter 'nr_Inode'
[  532.546645][ T9166] netlink: 'syz.0.613': attribute type 10 has an invalid length.
[  534.567542][ T8930] Bluetooth: hci5: command 0x0405 tx timeout
[  534.645466][ T9168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  535.239925][ T9186] netlink: 'syz.5.606': attribute type 10 has an invalid length.
[  536.915495][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.948303][ T9186] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  536.981412][ T9176] mkiss: ax0: crc mode is auto.
[  537.768022][ T9190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.607'.
[  539.385178][ T9204] netlink: 452 bytes leftover after parsing attributes in process `syz.6.610'.
[  539.847825][ T9209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.611'.
[  540.199601][ T9216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11
[  542.822636][ T9219] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  544.924386][ T5818] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  544.929228][ T8930] Bluetooth: hci3: command 0x1003 tx timeout
[  546.163920][ T9240] program syz.1.617 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  551.541887][ T9285] can0: slcan on ttyS3.
[  551.841048][ T9287] xt_CT: You must specify a L4 protocol and not use inversions on it
[  551.903259][ T9286] bridge0: port 3(syz_tun) entered blocking state
[  551.910486][ T9286] bridge0: port 3(syz_tun) entered disabled state
[  551.918259][ T9286] syz_tun: entered allmulticast mode
[  551.947895][ T9286] syz_tun: entered promiscuous mode
[  551.956917][ T9286] bridge0: port 3(syz_tun) entered blocking state
[  551.963644][ T9286] bridge0: port 3(syz_tun) entered forwarding state
[  552.026072][ T9285] can0 (unregistered): slcan off ttyS3.
[  552.056949][ T9280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  552.249296][ T9280] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  552.412735][ T9292] netlink: 'syz.0.628': attribute type 10 has an invalid length.
[  553.242476][ T9299] sctp: [Deprecated]: syz.5.629 (pid 9299) Use of struct sctp_assoc_value in delayed_ack socket option.
[  553.242476][ T9299] Use struct sctp_sack_info instead
[  556.140553][ T9291] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  556.159832][ T9291] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  556.230464][ T9291] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  556.272055][ T9302] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  556.484937][ T9315] mkiss: ax0: crc mode is auto.
[  558.068106][ T9291] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  558.334325][ T8930] Bluetooth: hci5: command 0x0405 tx timeout
[  558.336515][ T5818] Bluetooth: hci1: command 0x0405 tx timeout
[  558.400539][ T9291] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  558.529976][ T9310] [U] J"�e:��"


[  558.601718][ T9328] pim6reg: entered allmulticast mode
[  558.621198][ T9328] pim6reg: left allmulticast mode
[  559.894227][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  560.236314][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.364276][ T5818] Bluetooth: hci1: command 0x0405 tx timeout
[  560.372004][ T5818] Bluetooth: hci5: command 0x0405 tx timeout
[  560.460760][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.606284][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  560.701203][ T5902] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  560.757945][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.298047][ T5902] usb 1-1: config 0 descriptor??
[  561.579040][ T9349] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.635'.
[  562.446449][ T8930] Bluetooth: hci1: command 0x0405 tx timeout
[  562.677459][ T9336] delete_channel: no stack
[  562.739970][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  562.807963][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  562.830812][ T5902] usbhid 1-1:0.0: can't add hid device: -71
[  562.858151][ T5902] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  562.888131][ T5902] usb 1-1: USB disconnect, device number 5
[  563.065806][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  563.074687][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  563.082821][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  563.091451][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  563.099330][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  563.206324][ T9359] netlink: 'syz.1.638': attribute type 6 has an invalid length.
[  565.072063][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.640'.
[  565.164415][ T5818] Bluetooth: hci3: command tx timeout
[  566.197358][ T9381] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  566.489546][ T9373] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  567.388329][ T5818] Bluetooth: hci3: command tx timeout
[  568.361663][ T4573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  568.414296][ T4573] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.416348][ T5818] Bluetooth: hci3: command tx timeout
[  569.614296][   T30] audit: type=1326 audit(1751536935.513:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.1.647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe89738e929 code=0x0
[  570.006920][ T9419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  570.858734][ T4573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.881397][ T4573] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.506197][ T5818] Bluetooth: hci3: command tx timeout
[  571.648407][ T9429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12
[  574.629996][ T9441] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  574.667892][ T9441] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  574.738366][ T9441] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  574.904018][ T9441] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  574.958193][ T4573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  575.017395][ T4573] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.653155][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.656'.
[  575.761304][ T9445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'.
[  576.399246][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.657'.
[  576.822154][   T30] audit: type=1326 audit(1751536942.203:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.5.657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa99e58e929 code=0x0
[  577.082973][ T9469] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  577.093229][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807a4be400: rx timeout, send abort
[  577.102536][ T9469] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  577.112284][ T9469] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  577.268246][ T9357] chnl_net:caif_netlink_parms(): no params data found
[  578.047054][ T5818] Bluetooth: hci5: command 0x0405 tx timeout
[  578.949482][ T9357] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.962108][ T9357] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.304673][ T9357] bridge_slave_0: entered allmulticast mode
[  579.312184][ T9357] bridge_slave_0: entered promiscuous mode
[  579.360414][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.367585][ T9357] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.374941][ T9357] bridge_slave_1: entered allmulticast mode
[  579.382057][ T9357] bridge_slave_1: entered promiscuous mode
[  579.494085][ T9357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.554899][ T9357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.724173][   T10] libceph: connect (1)[c::]:6789 error -101
[  579.855222][ T9500] ceph: No mds server is up or the cluster is laggy
[  580.985205][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  582.226252][ T9357] team0: Port device team_slave_0 added
[  582.248598][ T4573] bridge_slave_1: left allmulticast mode
[  582.254697][ T4573] bridge_slave_1: left promiscuous mode
[  582.260570][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.272835][ T4573] bridge_slave_0: left allmulticast mode
[  582.279054][ T4573] bridge_slave_0: left promiscuous mode
[  582.286037][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.672243][ T9534] overlay: Unknown parameter '/'
[  585.795396][ T9535] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  586.275545][ T4573] batman_adv: batadv0: Interface deactivated: macsec1
[  586.310022][ T4573] batman_adv: batadv0: Removing interface: macsec1
[  586.717525][ T4573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  586.728885][ T4573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  586.741580][ T4573] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  586.750757][ T4573] bond0 (unregistering): Released all slaves
[  586.771143][ T4573] bond1 (unregistering): Released all slaves
[  586.805662][ T9357] team0: Port device team_slave_1 added
[  587.027182][ T4573] : left promiscuous mode
[  587.172479][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.181858][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.212706][ T9357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.509045][ T9553] kAFS: No cell specified
[  587.883121][ T9357] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.890394][ T9357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  587.916392][ T9357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.053787][ T4573] : left promiscuous mode
[  588.078473][ T9546] random: crng reseeded on system resumption
[  588.382027][ T9559] trusted_key: syz.1.677 sent an empty control message without MSG_MORE.
[  590.544965][ T4573] tipc: Disabling bearer <udp:syz2>
[  590.550569][ T4573] tipc: Left network mode
[  594.035264][ T9357] hsr_slave_0: entered promiscuous mode
[  594.053631][ T9357] hsr_slave_1: entered promiscuous mode
[  594.068278][ T9357] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.076687][ T9357] Cannot create hsr debugfs directory
[  596.860567][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'.
[  597.520090][ T9597] kvm: emulating exchange as write
[  598.202652][ T9608] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  598.647665][ T9616] netlink: 'syz.5.688': attribute type 10 has an invalid length.
[  599.126523][ T9616] team0: Port device wlan1 added
[  600.494368][ T4573] hsr_slave_0: left promiscuous mode
[  601.219852][ T4573] hsr_slave_1: left promiscuous mode
[  601.671127][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  601.685295][ T9644] netlink: 'syz.5.693': attribute type 10 has an invalid length.
[  601.799111][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.811610][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  601.819626][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_1
[  601.862223][ T4573] veth0_macvtap: left promiscuous mode
[  601.881447][ T4573] veth1_vlan: left promiscuous mode
[  601.902051][ T4573] veth0_vlan: left promiscuous mode
[  604.990693][ T4573] team0 (unregistering): Port device team_slave_1 removed
[  605.495504][ T4573] team0 (unregistering): Port device team_slave_0 removed
[  606.491637][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.624050][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  606.706678][ T9673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  607.499735][   T30] audit: type=1326 audit(1751536973.403:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99e58e929 code=0x7ffc0000
[  607.550115][   T30] audit: type=1326 audit(1751536973.403:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99e58e929 code=0x7ffc0000
[  607.643768][   T30] audit: type=1326 audit(1751536973.423:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fa99e58e929 code=0x7ffc0000
[  607.837008][   T30] audit: type=1326 audit(1751536973.683:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99e58e929 code=0x7ffc0000
[  607.912785][ T9357] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  607.944163][   T30] audit: type=1326 audit(1751536973.683:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.5.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99e58e929 code=0x7ffc0000
[  608.040440][ T9357] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  608.154605][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  608.340326][ T9357] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  608.564347][ T9357] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  608.687382][   T10] usb 1-1: Using ep0 maxpacket: 8
[  609.565820][   T10] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[  609.767353][   T10] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  609.792207][ T4573] IPVS: stop unused estimator thread 0...
[  609.800807][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  609.899143][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.083762][ T9706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  610.136323][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[  610.145414][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[  611.489294][ T9357] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.514814][   T10] usb 1-1: USB disconnect, device number 6
[  611.572616][ T9357] 8021q: adding VLAN 0 to HW filter on device team0
[  611.611870][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.619030][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  611.855557][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.862840][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  613.993221][ T9730] hub 8-0:1.0: USB hub found
[  613.999768][ T9730] hub 8-0:1.0: 1 port detected
[  614.359282][ T9357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  614.370919][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.714'.
[  615.106474][ T9357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  616.448395][ T9754] netlink: 'syz.5.716': attribute type 3 has an invalid length.
[  616.521064][ T9757] netlink: 'syz.5.716': attribute type 1 has an invalid length.
[  616.529792][ T9757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  616.537168][ T9757] IPv6: NLM_F_CREATE should be set when creating new route
[  618.040618][ T9763] x_tables: duplicate underflow at hook 3
[  619.055962][ T9357] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.121080][ T5818] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2
[  620.129724][ T5818] Bluetooth: hci1: unexpected event for opcode 0x2007
[  621.264636][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  621.335363][ T9784] IPVS: set_ctl: invalid protocol: 1536 0.32.0.0:37890
[  621.335518][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'.
[  621.727319][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.722'.
[  622.076442][ T8930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  622.085883][ T8930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  622.094139][ T8930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  622.101868][ T8930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  622.110024][ T8930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  623.996694][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  624.009353][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  624.069044][ T5818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  624.078995][ T5818] Bluetooth: hci1: Injecting HCI hardware error event
[  624.087601][ T5818] Bluetooth: hci1: hardware error 0x00
[  624.096364][ T9808] delete_channel: no stack
[  624.147443][ T8930] Bluetooth: hci2: command tx timeout
[  624.995036][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.729'.
[  625.762844][   T30] audit: type=1326 audit(1751536991.847:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  625.806728][ T9830] netlink: 116 bytes leftover after parsing attributes in process `syz.0.730'.
[  625.828163][   T30] audit: type=1326 audit(1751536991.867:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  625.907465][   T30] audit: type=1326 audit(1751536991.867:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  625.971058][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.733'.
[  626.104686][ T5818] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  626.201646][ T8930] Bluetooth: hci2: command tx timeout
[  626.233623][   T30] audit: type=1326 audit(1751536991.867:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  626.261792][   T30] audit: type=1326 audit(1751536991.867:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  626.442881][ T9834] hsr0: entered promiscuous mode
[  626.613065][   T30] audit: type=1326 audit(1751536991.867:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  626.675215][ T9841] hsr_slave_0: left promiscuous mode
[  627.055461][   T30] audit: type=1326 audit(1751536991.867:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  627.076786][    C1] vkms_vblank_simulate: vblank timer overrun
[  627.908762][ T9841] hsr_slave_1: left promiscuous mode
[  627.996233][   T30] audit: type=1326 audit(1751536991.867:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  628.039329][ T5825] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  628.056407][   T30] audit: type=1326 audit(1751536991.867:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  628.077695][    C1] vkms_vblank_simulate: vblank timer overrun
[  628.089638][   T30] audit: type=1326 audit(1751536991.867:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9829 comm="syz.0.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6e1178e929 code=0x7ffc0000
[  628.110861][    C1] vkms_vblank_simulate: vblank timer overrun
[  628.275907][ T8930] Bluetooth: hci2: command tx timeout
[  629.275416][ T5825] usb 1-1: Using ep0 maxpacket: 8
[  630.180888][ T5825] usb 1-1: unable to read config index 0 descriptor/all
[  630.242654][ T5825] usb 1-1: can't read configurations, error -71
[  630.268244][ T9841] hsr0 (unregistering): left promiscuous mode
[  630.279881][ T8930] Bluetooth: hci2: command tx timeout
[  632.083898][  T978] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  633.087578][  T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  633.087633][  T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  633.087779][  T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  633.087814][  T978] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  633.100254][  T978] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  633.100289][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  633.100312][  T978] usb 2-1: SerialNumber: syz
[  633.104141][ T9881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  633.104292][ T9881] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  633.106006][  T978] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  633.760664][ T9796] chnl_net:caif_netlink_parms(): no params data found
[  634.021969][ T9901] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  634.834649][  T978] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  634.980532][  T978] usb 2-1: USB disconnect, device number 5
[  637.747158][ T9929] syz.1.748 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  639.610541][   T36] bridge_slave_1: left allmulticast mode
[  639.634802][   T36] bridge_slave_1: left promiscuous mode
[  639.640631][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.827045][   T36] bridge_slave_0: left allmulticast mode
[  640.846117][   T36] bridge_slave_0: left promiscuous mode
[  640.871936][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.693989][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  641.710721][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  641.721004][   T36] bond0 (unregistering): Released all slaves
[  642.093886][ T9963] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[9963]
[  642.225490][ T9963] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  642.473113][ T9963] overlayfs: failed to set xattr on upper
[  642.479316][ T9963] overlayfs: ...falling back to redirect_dir=nofollow.
[  642.486670][ T9963] overlayfs: ...falling back to index=off.
[  642.494640][ T9963] overlayfs: ...falling back to uuid=null.
[  642.501970][ T9963] overlayfs: maximum fs stacking depth exceeded
[  643.190908][   T36] hsr_slave_0: left promiscuous mode
[  643.764988][   T36] hsr_slave_1: left promiscuous mode
[  643.951016][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  644.449476][ T9981] netlink: 'syz.5.758': attribute type 1 has an invalid length.
[  644.460602][ T9981] netlink: 144 bytes leftover after parsing attributes in process `syz.5.758'.
[  644.469906][ T9981] netlink: 'syz.5.758': attribute type 1 has an invalid length.
[  644.477739][ T9981] netlink: 'syz.5.758': attribute type 2 has an invalid length.
[  644.485934][ T9981] netlink: 64 bytes leftover after parsing attributes in process `syz.5.758'.
[  645.139039][ T9983] program syz.6.759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  645.163489][ T9983] program syz.6.759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  645.172955][ T9983] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  645.323908][ T9984] syz.5.758: attempt to access beyond end of device
[  645.323908][ T9984] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0
[  645.395770][ T9984] hfs: can't find a HFS filesystem on dev nbd5
[  645.413966][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  647.139185][T10000] XFS (nullb0): Invalid superblock magic number
[  648.387141][   T36] team0 (unregistering): Port device team_slave_1 removed
[  648.505215][   T36] team0 (unregistering): Port device team_slave_0 removed
[  650.319575][ T9796] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.330359][ T9796] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.339057][ T9796] bridge_slave_0: entered allmulticast mode
[  650.346103][ T9796] bridge_slave_0: entered promiscuous mode
[  650.356061][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.364348][ T9796] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.375643][ T9796] bridge_slave_1: entered allmulticast mode
[  650.384159][ T9796] bridge_slave_1: entered promiscuous mode
[  651.360996][T10032] overlayfs: overlapping lowerdir path
[  651.607552][ T9796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  651.822506][ T5825] IPVS: starting estimator thread 0...
[  651.852962][T10037] IPVS: ip_vs_add_dest(): server weight less than zero
[  651.950726][T10039] IPVS: using max 27 ests per chain, 64800 per kthread
[  652.102801][ T9796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  653.734816][ T9796] team0: Port device team_slave_0 added
[  653.761521][ T9796] team0: Port device team_slave_1 added
[  654.150532][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.6.775'.
[  655.593295][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'.
[  657.632478][T10069] : entered promiscuous mode
[  657.716780][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  657.730490][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  657.759220][ T9796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  657.822140][ T9796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  657.829158][ T9796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  657.868265][ T9796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.950916][ T9796] hsr_slave_0: entered promiscuous mode
[  659.034738][T10081] overlay: Unknown parameter '/'
[  659.060996][ T9796] hsr_slave_1: entered promiscuous mode
[  659.593220][ T9796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  659.678388][ T9796] Cannot create hsr debugfs directory
[  664.368254][T10106] ceph: No mds server is up or the cluster is laggy
[  673.141747][T10172] netlink: 'syz.5.796': attribute type 10 has an invalid length.
[  673.377016][T10175] pim6reg: entered allmulticast mode
[  673.398860][T10175] pim6reg: left allmulticast mode
[  675.047857][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'.
[  676.814856][T10204] random: crng reseeded on system resumption
[  677.944937][T10206] xt_CT: No such helper "snmp"
[  677.954535][T10216] loop6: detected capacity change from 0 to 524287487
[  677.964304][T10216] buffer_io_error: 1462 callbacks suppressed
[  677.964319][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  677.978755][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  677.987828][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  677.995797][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  678.004649][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  678.088169][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  679.941337][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.066563][T10217] loop6: detected capacity change from 524287487 to 0
[  680.066607][T10216] Buffer I/O error on dev loop6, logical block 0, async page read
[  680.089580][T10216] ldm_validate_partition_table(): Disk read failed.
[  680.097310][T10216] Dev loop6: unable to read RDB block 0
[  680.105144][T10216]  loop6: unable to read partition table
[  680.118129][T10216] loop6: partition table beyond EOD, truncated
[  680.124819][T10216] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[  680.555840][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.565849][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.084569][T10234] netlink: 'syz.5.806': attribute type 10 has an invalid length.
[  684.274161][ T8930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  684.420078][ T8930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  684.464627][ T8930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  684.498322][ T8930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  684.685995][ T8930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  685.171791][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  685.178411][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  686.288430][T10282] overlay: Unknown parameter '/'
[  686.893806][ T5818] Bluetooth: hci3: command tx timeout
[  687.597963][T10292] pim6reg: entered allmulticast mode
[  687.618498][T10292] pim6reg: left allmulticast mode
[  688.917521][ T5818] Bluetooth: hci3: command tx timeout
[  690.238138][T10315] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  691.006747][ T5818] Bluetooth: hci3: command tx timeout
[  692.081331][T10340] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  692.236278][  T978] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  692.988419][T10343] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  693.166746][ T5818] Bluetooth: hci3: command tx timeout
[  693.209696][T10262] chnl_net:caif_netlink_parms(): no params data found
[  693.223239][  T978] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  693.242616][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.281667][  T978] usb 1-1: Product: syz
[  693.297799][  T978] usb 1-1: Manufacturer: syz
[  693.302444][  T978] usb 1-1: SerialNumber: syz
[  693.456848][  T978] usb 1-1: config 0 descriptor??
[  693.476655][  T978] gspca_main: sunplus-2.14.0 probing 055f:c230
[  693.736031][T10356] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  694.877430][T10367] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  695.625678][T10369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  695.637288][T10369] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  696.118479][ T6080] bridge_slave_1: left allmulticast mode
[  696.124271][ T6080] bridge_slave_1: left promiscuous mode
[  696.162862][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.879356][ T6080] bridge_slave_0: left allmulticast mode
[  696.925614][ T6080] bridge_slave_0: left promiscuous mode
[  696.935217][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.697242][   T24] usb 1-1: USB disconnect, device number 9
[  699.061538][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  699.345232][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  699.440617][ T6080] bond0 (unregistering): Released all slaves
[  699.599696][T10262] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.634640][T10262] bridge0: port 1(bridge_slave_0) entered disabled state
[  699.666128][T10262] bridge_slave_0: entered allmulticast mode
[  699.706346][T10262] bridge_slave_0: entered promiscuous mode
[  699.743688][T10262] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.813761][T10262] bridge0: port 2(bridge_slave_1) entered disabled state
[  699.967188][T10262] bridge_slave_1: entered allmulticast mode
[  700.165444][T10262] bridge_slave_1: entered promiscuous mode
[  701.005917][T10413] hub 8-0:1.0: USB hub found
[  701.012944][T10413] hub 8-0:1.0: 1 port detected
[  701.504790][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  701.602234][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  701.689852][ T6080] hsr_slave_0: left promiscuous mode
[  701.723349][ T6080] hsr_slave_1: left promiscuous mode
[  701.752173][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.785893][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  702.286173][ T6080] team0 (unregistering): Port device team_slave_1 removed
[  702.984681][ T6080] team0 (unregistering): Port device team_slave_0 removed
[  703.733837][T10444] netlink: 72 bytes leftover after parsing attributes in process `syz.1.836'.
[  706.180201][T10456] loop9: detected capacity change from 0 to 7
[  706.195427][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.204619][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.214341][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.222712][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.232780][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.242459][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.250483][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.258432][T10456] ldm_validate_partition_table(): Disk read failed.
[  706.265320][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.294171][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.304551][T10456] Buffer I/O error on dev loop9, logical block 0, async page read
[  706.314897][T10456] Dev loop9: unable to read RDB block 0
[  706.322112][T10456]  loop9: unable to read partition table
[  706.333930][T10456] loop9: partition table beyond EOD, truncated
[  706.357447][T10456] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  706.357447][T10456] 
) failed (rc=-5)
[  707.296606][T10461] new mount options do not match the existing superblock, will be ignored
[  707.329595][T10461] option changes via remount are deprecated (pid=10446 comm=syz.5.837)
[  707.735521][T10262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  707.810962][T10445] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  707.825379][T10460] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  707.943100][T10262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  707.984714][T10445] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  709.172191][T10262] team0: Port device team_slave_0 added
[  709.776002][T10262] team0: Port device team_slave_1 added
[  711.041491][T10496] smk_cipso_doi:679 remove rc = -2
[  711.046724][T10496] smk_cipso_doi:692 cipso add rc = -17
[  711.500451][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.554855][T10262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.574914][T10495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  711.613971][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  711.888985][T10262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  712.161859][T10262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  712.182159][T10262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  712.255523][T10262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  713.442494][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  713.442521][   T30] audit: type=1326 audit(1751537078.774:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  713.801115][T10518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.973167][   T30] audit: type=1326 audit(1751537078.774:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  714.160172][   T30] audit: type=1326 audit(1751537078.774:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  714.509730][   T30] audit: type=1326 audit(1751537078.774:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  714.544901][   T30] audit: type=1326 audit(1751537078.774:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  714.607936][T10262] hsr_slave_0: entered promiscuous mode
[  714.669553][T10262] hsr_slave_1: entered promiscuous mode
[  714.862881][T10262] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  714.869101][   T30] audit: type=1326 audit(1751537078.774:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  714.956318][T10262] Cannot create hsr debugfs directory
[  715.069388][   T30] audit: type=1326 audit(1751537078.774:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  715.154173][   T30] audit: type=1326 audit(1751537078.774:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  715.270851][   T30] audit: type=1326 audit(1751537078.774:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  715.312884][   T30] audit: type=1326 audit(1751537078.774:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.1.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe89738e929 code=0x7ffc0000
[  717.041005][T10549] netlink: 'syz.6.857': attribute type 10 has an invalid length.
[  719.875951][ T8930] Bluetooth: hci3: command 0x0405 tx timeout
[  721.050554][T10581] IPVS: Error joining to the multicast group
[  722.408019][T10262] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  722.478459][T10262] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  722.817256][T10596] netlink: 'syz.1.869': attribute type 10 has an invalid length.
[  722.906128][T10262] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  723.549631][T10607] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  723.558362][T10607] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock
[  723.568436][T10607] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  723.577135][T10607] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock
[  723.775318][T10612] netdevsim netdevsim5: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  723.794974][T10612] netdevsim netdevsim5: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  723.823298][T10262] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  723.989190][T10614] netlink: 'syz.0.866': attribute type 10 has an invalid length.
[  726.374070][T10262] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.471854][T10262] 8021q: adding VLAN 0 to HW filter on device team0
[  726.715596][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.722851][ T9222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.375101][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.382325][ T9222] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.762440][ T3076] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  727.919095][ T3076] usb 6-1: unable to get BOS descriptor or descriptor too short
[  727.974338][ T3076] usb 6-1: not running at top speed; connect to a high speed hub
[  727.995855][ T3076] usb 6-1: config 253 has an invalid interface number: 140 but max is 0
[  728.150470][ T3076] usb 6-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config
[  728.203121][ T3076] usb 6-1: config 253 has no interface number 0
[  728.209821][ T3076] usb 6-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  728.310149][ T3076] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b
[  728.952456][ T3076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.964390][ T3076] usb 6-1: Product: syz
[  728.969565][ T3076] usb 6-1: Manufacturer: syz
[  729.029894][ T3076] usb 6-1: SerialNumber: syz
[  729.065430][ T3076] usb 6-1: can't set config #253, error -71
[  729.217906][ T3076] usb 6-1: USB disconnect, device number 3
[  730.630487][T10673] netlink: 'syz.1.881': attribute type 10 has an invalid length.
[  731.096174][T10262] 8021q: adding VLAN 0 to HW filter on device batadv0
[  731.488611][T10686] netlink: 52 bytes leftover after parsing attributes in process `syz.0.882'.
[  732.727239][T10692] overlayfs: overlapping lowerdir path
[  735.172839][T10262] veth0_vlan: entered promiscuous mode
[  735.284773][T10262] veth1_vlan: entered promiscuous mode
[  735.393097][T10262] veth0_macvtap: entered promiscuous mode
[  735.849869][T10262] veth1_macvtap: entered promiscuous mode
[  736.380499][T10262] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.448958][T10262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.514890][T10262] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.570033][T10262] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.888467][T10262] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  737.003670][T10262] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.813143][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.893'.
[  738.822531][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.893'.
[  738.994520][T10743] netlink: 'syz.5.892': attribute type 10 has an invalid length.
[  739.266462][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  739.277967][ T6080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  739.979169][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.991537][ T6080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  741.627007][T10763] veth0_to_team: entered promiscuous mode
[  741.633693][T10763] veth0_to_team: entered allmulticast mode
[  742.547901][T10773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  744.926334][ T8930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  744.943588][ T8930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  744.954494][ T8930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  744.965251][ T8930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  744.973553][ T8930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  746.305407][T10794] netlink: 'syz.0.910': attribute type 10 has an invalid length.
[  746.418942][ T6079] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.535247][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  746.542401][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  747.072190][ T5818] Bluetooth: hci2: command tx timeout
[  747.384977][T10810] overlayfs: failed to resolve './cgroup': -2
[  748.000228][ T6079] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.206098][T10819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  749.005096][T10821] overlayfs: missing 'lowerdir'
[  749.162218][ T5818] Bluetooth: hci2: command tx timeout
[  749.629619][ T6079] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  750.930030][T10831] unsupported nlmsg_type 40
[  751.252310][ T5818] Bluetooth: hci2: command tx timeout
[  752.351118][ T6079] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.322160][ T5818] Bluetooth: hci2: command tx timeout
[  754.175374][T10860] new mount options do not match the existing superblock, will be ignored
[  754.249010][T10858] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  754.314905][T10779] chnl_net:caif_netlink_parms(): no params data found
[  755.578935][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'.
[  755.699330][ T6079] bridge_slave_1: left allmulticast mode
[  755.706443][ T6079] bridge_slave_1: left promiscuous mode
[  755.724719][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.115955][ T6079] bridge_slave_0: left allmulticast mode
[  756.121711][ T6079] bridge_slave_0: left promiscuous mode
[  756.797126][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.865540][T10873] ceph: No mds server is up or the cluster is laggy
[  757.924574][T10884] Cannot find add_set index 0 as target
[  757.934560][T10884] netlink: 'syz.1.920': attribute type 9 has an invalid length.
[  757.958188][T10884] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.581105][T10889] tty tty31: ldisc open failed (-12), clearing slot 30
[  761.023197][ T5825] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  761.150931][ T6079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.162622][ T6079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  761.165173][T10897] delete_channel: no stack
[  761.183782][ T6079] bond0 (unregistering): Released all slaves
[  761.201976][ T5825] usb 7-1: Using ep0 maxpacket: 16
[  761.208615][ T5825] usb 7-1: config 0 has an invalid interface number: 198 but max is 0
[  761.232404][ T5825] usb 7-1: config 0 has no interface number 0
[  761.254547][ T5825] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d
[  761.264531][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.284677][ T5825] usb 7-1: Product: syz
[  761.289013][ T5825] usb 7-1: Manufacturer: syz
[  761.402074][ T5825] usb 7-1: SerialNumber: syz
[  761.833760][ T5825] usb 7-1: config 0 descriptor??
[  761.864079][ T5825] usb_ehset_test 7-1:0.198: probe with driver usb_ehset_test failed with error -32
[  762.093126][T10898] netlink: 40 bytes leftover after parsing attributes in process `syz.6.922'.
[  763.366409][    T9] usb 7-1: USB disconnect, device number 2
[  763.403180][T10917] pim6reg: entered allmulticast mode
[  763.409185][T10918] pim6reg: left allmulticast mode
[  765.310995][T10929] kAFS: No cell specified
[  766.789851][T10936] No source specified
[  767.874797][T10779] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.757662][T10951] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  768.803909][T10948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.879621][T10779] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.911800][T10779] bridge_slave_0: entered allmulticast mode
[  770.376804][T10779] bridge_slave_0: entered promiscuous mode
[  771.854416][ T6079] hsr_slave_0: left promiscuous mode
[  772.025474][ T6079] hsr_slave_1: left promiscuous mode
[  772.103054][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  772.110505][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_0
[  772.206150][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  772.215486][ T6079] batman_adv: batadv0: Removing interface: batadv_slave_1
[  772.256566][ T6079] veth1_macvtap: left promiscuous mode
[  772.262774][ T6079] veth0_macvtap: left promiscuous mode
[  772.268395][ T6079] veth1_vlan: left promiscuous mode
[  772.274303][ T6079] veth0_vlan: left promiscuous mode
[  772.680361][ T6079] team0 (unregistering): Port device team_slave_1 removed
[  772.720258][ T6079] team0 (unregistering): Port device team_slave_0 removed
[  773.110313][T10779] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.117850][T10779] bridge0: port 2(bridge_slave_1) entered disabled state
[  773.127576][T10779] bridge_slave_1: entered allmulticast mode
[  773.139818][T10779] bridge_slave_1: entered promiscuous mode
[  773.198398][T10779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  773.217378][T10779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  773.270481][T10779] team0: Port device team_slave_0 added
[  773.281129][T10779] team0: Port device team_slave_1 added
[  773.336386][T10779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  773.343422][T10779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  773.369732][T10779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.383185][T10779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.390174][T10779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  773.417498][T10779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.470295][T10779] hsr_slave_0: entered promiscuous mode
[  773.478013][T10779] hsr_slave_1: entered promiscuous mode
[  773.484795][T10779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  773.492853][T10779] Cannot create hsr debugfs directory
[  773.893102][T10779] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  773.903019][T10779] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  773.913897][T10779] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  773.924771][T10779] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  773.998437][T10779] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.027018][T10779] 8021q: adding VLAN 0 to HW filter on device team0
[  774.042268][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.049403][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.065856][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.073007][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.267598][T10779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  774.484194][T10779] veth0_vlan: entered promiscuous mode
[  774.496341][T10779] veth1_vlan: entered promiscuous mode
[  774.525433][T10779] veth0_macvtap: entered promiscuous mode
[  774.536168][T10779] veth1_macvtap: entered promiscuous mode
[  774.555518][T10779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.569246][T10779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.581697][T10779] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.591071][T10779] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.600982][T10779] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.611016][T10779] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  774.680642][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.695137][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  774.718887][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.726868][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.522448][T10989] bridge_slave_0: default FDB implementation only supports local addresses
[  776.052094][T10996] openvswitch: netlink: Flow actions attr not present in new flow.
[  776.535397][T11006] binder: BINDER_SET_CONTEXT_MGR already set
[  776.541537][T11006] binder: 10987:11006 ioctl 4018620d 200000000040 returned -16
[  778.289376][T11010] overlayfs: missing 'lowerdir'
[  778.918132][T11000] sp0: Synchronizing with TNC
[  780.203700][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.938'.
[  790.168246][T11065] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  790.177767][T11065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  790.187339][T11065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  790.219723][T11082] mkiss: ax0: crc mode is auto.
[  791.859382][T11095] fuse: Bad value for 'fd'
[  795.581093][T11120] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  795.893029][T11126] netlink: 'syz.5.964': attribute type 10 has an invalid length.
[  796.520244][T11131] netfs: Couldn't get user pages (rc=-14)
[  797.854766][T11139] 
: renamed from vxcan1 (while UP)
[  798.387559][T11142] input: syz1 as /devices/virtual/input/input14
[  802.294316][T11157] 9pnet_fd: Insufficient options for proto=fd
[  802.341588][T11152] nftables ruleset with unbound set
[  803.781949][T11177] netlink: 'syz.1.977': attribute type 10 has an invalid length.
[  805.115064][T11188] netlink: 'syz.0.975': attribute type 10 has an invalid length.
[  805.539785][T11194] veth0: entered promiscuous mode
[  806.249848][T11189] veth0: left promiscuous mode
[  807.957416][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  807.964039][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  808.054674][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  808.054690][   T30] audit: type=1326 audit(1751537174.446:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11208 comm="syz.1.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe89738e929 code=0x0
[  809.315286][T11221] netlink: 256 bytes leftover after parsing attributes in process `syz.1.986'.
[  809.405774][T11221] netlink: 'syz.1.986': attribute type 4 has an invalid length.
[  809.878222][T11224] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  812.427618][T11247] netlink: 196 bytes leftover after parsing attributes in process `syz.5.994'.
[  813.271557][T11250] netlink: 'syz.1.995': attribute type 10 has an invalid length.
[  816.647409][   T30] audit: type=1800 audit(1751537183.026:118): pid=11278 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1002" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  821.780318][T11293] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  821.789544][T11293] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  822.894757][T11300] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  823.315307][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  823.587717][   T24] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  823.621841][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  823.653468][   T24] usb 6-1: Product: syz
[  823.662000][   T24] usb 6-1: Manufacturer: syz
[  823.666638][   T24] usb 6-1: SerialNumber: syz
[  823.720133][   T24] usb 6-1: config 0 descriptor??
[  825.354520][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'.
[  825.770826][   T24] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  825.921712][   T24] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[  826.369310][   T24] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  826.392838][   T24] usb 6-1: USB disconnect, device number 4
[  827.477863][T11334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  828.228969][T11336] tls_set_device_offload: netdev not found
[  830.468413][T11351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  831.728502][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'.
[  831.788924][T11358] bridge0: entered promiscuous mode
[  831.795311][T11358] macsec2: entered allmulticast mode
[  831.800677][T11358] bridge0: entered allmulticast mode
[  831.814054][T11358] bridge0: port 4(macsec2) entered blocking state
[  831.821202][T11358] bridge0: port 4(macsec2) entered disabled state
[  832.400177][T11358] bridge0: left allmulticast mode
[  832.405335][T11358] bridge0: left promiscuous mode
[  833.073026][ T5923] usb 6-1: new low-speed USB device number 5 using dummy_hcd
[  833.328578][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  833.351551][ T5923] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  833.363889][ T5923] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  833.384403][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.396122][ T5923] usb 6-1: config 0 descriptor??
[  834.032528][ T5818] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  834.790351][ T5901] usb 6-1: USB disconnect, device number 5
[  836.419141][T11360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  836.429057][T11360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  836.442029][T11360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  836.451358][T11360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  836.459897][T11360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  838.206731][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1033'.
[  838.512013][T11360] Bluetooth: hci3: command tx timeout
[  838.618860][T11391] chnl_net:caif_netlink_parms(): no params data found
[  839.826421][T11391] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.836399][T11391] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.864189][T11391] bridge_slave_0: entered allmulticast mode
[  839.948904][T11391] bridge_slave_0: entered promiscuous mode
[  840.273770][ T4573] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.495199][T11391] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.531250][T11421] page: refcount:3 mapcount:0 mapping:ffff888148c993f8 index:0x2 pfn:0x32856
[  840.539269][T11391] bridge0: port 2(bridge_slave_1) entered disabled state
[  840.548645][T11421] memcg:ffff888140498c80
[  840.592462][T11360] Bluetooth: hci3: command tx timeout
[  840.598995][T11391] bridge_slave_1: entered allmulticast mode
[  840.612977][T11421] aops:def_blk_aops ino:fa00000
[  840.616069][T11391] bridge_slave_1: entered promiscuous mode
[  840.626045][T11421] flags: 0xfff00000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff)
[  840.650898][T11421] raw: 00fff00000000039 ffffea0000ca15c8 ffff88801bad85e8 ffff888148c993f8
[  840.667290][T11421] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff888140498c80
[  840.677783][T11421] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index))
[  840.688722][T11421] page_owner tracks the page as allocated
[  840.696589][T11421] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11421, tgid 11419 (syz.0.1036), ts 840218883134, free_ts 839796528102
[  840.719409][T11421]  post_alloc_hook+0x240/0x2a0
[  840.726105][T11421]  get_page_from_freelist+0x21d5/0x22b0
[  840.794956][T11421]  __alloc_frozen_pages_noprof+0x181/0x370
[  840.802667][T11421]  alloc_pages_mpol+0x232/0x4a0
[  840.811589][T11421]  alloc_pages_noprof+0xa9/0x190
[  840.818920][T11421]  folio_alloc_noprof+0x1e/0x30
[  840.829083][T11421]  filemap_alloc_folio_noprof+0xdf/0x470
[  840.982062][T11421]  page_cache_ra_order+0x5e5/0xc70
[  841.009608][T11421]  do_sync_mmap_readahead+0x4b5/0x5f0
[  841.016630][T11421]  filemap_fault+0x62a/0x1200
[  841.563586][T11421]  __do_fault+0x135/0x390
[  841.611871][T11421]  __handle_mm_fault+0x198b/0x5620
[  841.717144][T11421]  handle_mm_fault+0x2d5/0x7f0
[  841.737730][T11421]  do_user_addr_fault+0x764/0x1390
[  841.774879][T11421]  exc_page_fault+0x76/0xf0
[  841.947517][T11421]  asm_exc_page_fault+0x26/0x30
[  842.033727][T11421] page last free pid 11412 tgid 11411 stack trace:
[  842.041183][T11421]  __free_frozen_pages+0xc65/0xe60
[  842.071941][T11421]  __folio_put+0x21b/0x2c0
[  842.078228][T11421]  free_large_kmalloc+0x145/0x200
[  842.084554][T11421]  process_vm_rw+0xa72/0xb40
[  842.092071][T11421]  __x64_sys_process_vm_readv+0xe0/0x100
[  842.097844][T11421]  do_syscall_64+0xfa/0x3b0
[  842.103829][T11421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.114597][T11421] ------------[ cut here ]------------
[  842.120409][T11421] kernel BUG at mm/filemap.c:3442!
[  842.125922][  T978] usb 2-1: new full-speed USB device number 6 using dummy_hcd
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  842.255797][T11421] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  842.262103][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.0.1036 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) 
[  842.274195][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  842.284270][T11421] RIP: 0010:filemap_fault+0x117d/0x1200
[  842.289843][T11421] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d
[  842.309465][T11421] RSP: 0018:ffffc900038cf6e0 EFLAGS: 00010246
[  842.315554][T11421] RAX: a2ef37e20b2b5200 RBX: ffffea0000ca1580 RCX: 0000000000000000
[  842.323550][T11421] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff
[  842.331545][T11421] RBP: ffffc900038cf818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e
[  842.339535][T11421] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000
[  842.347526][T11421] R13: 1ffffd40001942b1 R14: ffffea0000ca1598 R15: ffffea0000ca1588
[  842.355510][T11421] FS:  00007f6e1266c6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000
[  842.364442][T11421] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  842.371030][T11421] CR2: 00007fe89817dfe0 CR3: 0000000067806000 CR4: 00000000003526f0
[  842.379008][T11421] Call Trace:
[  842.382292][T11421]  <TASK>
[  842.385229][T11421]  ? __pfx_filemap_fault+0x10/0x10
[  842.390352][T11421]  __do_fault+0x135/0x390
[  842.394690][T11421]  __handle_mm_fault+0x198b/0x5620
[  842.399808][T11421]  ? __pfx___handle_mm_fault+0x10/0x10
[  842.405279][T11421]  ? find_vma+0xe7/0x160
[  842.409534][T11421]  ? __pfx_find_vma+0x10/0x10
[  842.414214][T11421]  handle_mm_fault+0x2d5/0x7f0
[  842.418980][T11421]  do_user_addr_fault+0x764/0x1390
[  842.424123][T11421]  exc_page_fault+0x76/0xf0
[  842.428637][T11421]  asm_exc_page_fault+0x26/0x30
[  842.433496][T11421] RIP: 0010:__put_user_4+0xd/0x20
[  842.438534][T11421] Code: 66 89 01 31 c9 0f 01 ca e9 00 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 3a 03 00 90 90 90 90 90 90 90 90 90 90
[  842.458140][T11421] RSP: 0000:ffffc900038cfc98 EFLAGS: 00050206
[  842.464209][T11421] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001b78
[  842.472180][T11421] RDX: 0000000000000000 RSI: ffffffff8db5a681 RDI: ffffffff8be1b940
[  842.480149][T11421] RBP: ffffc900038cfeb0 R08: 0000000000000000 R09: ffffffff820a3bc0
[  842.488118][T11421] R10: dffffc0000000000 R11: ffffed100eeac571 R12: 0000200000001b40
[  842.496089][T11421] R13: 0000000000040000 R14: 0000200000000480 R15: 000000000000005b
[  842.504062][T11421]  ? __might_fault+0xb0/0x130
[  842.508747][T11421]  __sys_sendmmsg+0x25f/0x430
[  842.513437][T11421]  ? __pfx___sys_sendmmsg+0x10/0x10
[  842.518644][T11421]  ? do_futex+0x333/0x420
[  842.522996][T11421]  ? rcu_is_watching+0x15/0xb0
[  842.527783][T11421]  __x64_sys_sendmmsg+0xa0/0xc0
[  842.532729][T11421]  do_syscall_64+0xfa/0x3b0
[  842.537249][T11421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.543318][T11421]  ? asm_sysvec_call_function_single+0x1a/0x20
[  842.549481][T11421]  ? clear_bhb_loop+0x60/0xb0
[  842.554160][T11421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  842.560050][T11421] RIP: 0033:0x7f6e1178e929
[  842.564481][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  842.584091][T11421] RSP: 002b:00007f6e1266c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  842.592505][T11421] RAX: ffffffffffffffda RBX: 00007f6e119b6080 RCX: 00007f6e1178e929
[  842.600473][T11421] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005
[  842.608443][T11421] RBP: 00007f6e11810b39 R08: 0000000000000000 R09: 0000000000000000
[  842.616413][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  842.624383][T11421] R13: 0000000000000000 R14: 00007f6e119b6080 R15: 00007ffc97bf6b88
[  842.632360][T11421]  </TASK>
[  842.635384][T11421] Modules linked in:
[  842.640512][T11421] ---[ end trace 0000000000000000 ]---
[  842.660992][ T4573] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.673615][T11360] Bluetooth: hci3: command tx timeout
[  842.697181][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  842.708426][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  843.009792][T11421] RIP: 0010:filemap_fault+0x117d/0x1200
[  843.023191][T11421] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d
[  843.054413][T11421] RSP: 0018:ffffc900038cf6e0 EFLAGS: 00010246
[  843.060509][T11421] RAX: a2ef37e20b2b5200 RBX: ffffea0000ca1580 RCX: 0000000000000000
[  843.114955][T11421] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff
[  843.162309][T11421] RBP: ffffc900038cf818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e
[  843.170345][T11421] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000
[  843.213019][ T4573] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  843.265898][T11421] R13: 1ffffd40001942b1 R14: ffffea0000ca1598 R15: ffffea0000ca1588
[  843.346251][T11421] FS:  00007f6e1266c6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000
[  843.363670][T11421] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  843.370303][T11421] CR2: 000055c2004c4fb0 CR3: 0000000067806000 CR4: 00000000003526f0
[  843.433302][T11421] Kernel panic - not syncing: Fatal exception
[  843.439715][T11421] Kernel Offset: disabled
[  843.444064][T11421] Rebooting in 86400 seconds..