last executing test programs:

12m51.375763636s ago: executing program 0 (id=340):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)

12m49.759591242s ago: executing program 0 (id=345):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)

12m48.79973991s ago: executing program 0 (id=353):
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
membarrier(0x40, 0x0)
membarrier(0x20, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090)
r3 = socket$netlink(0x10, 0x3, 0x12)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8994, 0x0)
bind$netlink(r3, 0x0, 0x0)

12m48.537887892s ago: executing program 0 (id=357):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

12m47.371514394s ago: executing program 0 (id=361):
r0 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
poll(&(0x7f00000000c0)=[{r3, 0x1009}], 0x1, 0x8000007)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

12m46.352276371s ago: executing program 0 (id=366):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x26, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10)
r6 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

12m44.691079895s ago: executing program 32 (id=366):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x26, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10)
r6 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

8m10.45029484s ago: executing program 3 (id=1114):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0)

8m8.524007302s ago: executing program 3 (id=1117):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)

8m6.579422972s ago: executing program 3 (id=1122):
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e)
writev(0xffffffffffffffff, &(0x7f0000000440), 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
readv(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

8m4.60567225s ago: executing program 3 (id=1123):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x800)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00')
preadv(r2, &(0x7f0000001980)=[{&(0x7f0000000600)=""/38, 0x26}, {0x0}, {&(0x7f0000001a80)=""/251, 0xfb}, {0x0}, {&(0x7f0000000580)=""/13, 0xd}, {0x0}, {0x0}], 0x7, 0x1f3, 0x0)

8m3.803629648s ago: executing program 3 (id=1126):
io_uring_setup(0x31b8, &(0x7f0000000580)={0x0, 0x8461, 0x40, 0x1, 0x16f})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000680)='./file0\x00', 0x8)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x143000, 0x0)
mount(0x0, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r2}, './file0\x00'})

8m1.662755473s ago: executing program 3 (id=1131):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x12, 0x100001, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xde3, 0x40, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

7m46.510331083s ago: executing program 33 (id=1131):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x12, 0x100001, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xde3, 0x40, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

5m38.487612671s ago: executing program 6 (id=1440):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

5m36.603319776s ago: executing program 6 (id=1443):
r0 = io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cc, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000100)={0x1}, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r5, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99}]}, 0x34}, 0x1, 0x0, 0x0, 0x44081}, 0x20008894)
close_range(r0, 0xffffffffffffffff, 0x0)

5m34.004253901s ago: executing program 6 (id=1451):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7112c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0), &(0x7f0000000040))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r4, 0x400448e6, 0x0)
ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000500)="d7")

5m30.082806491s ago: executing program 6 (id=1455):
process_mrelease(0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0x9, 0x3ff, 0x1)
syz_io_uring_setup(0x111, 0x0, &(0x7f0000000340), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
fcntl$getflags(0xffffffffffffffff, 0x401)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}})

5m28.528308328s ago: executing program 6 (id=1459):
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x0, 0x0, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
setregid(0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r1, 0x54, 0x4, 0xf, 0x0, 0x18)

5m26.863365493s ago: executing program 6 (id=1461):
syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffff8001, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
fcntl$setown(r0, 0x8, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

5m11.162932368s ago: executing program 34 (id=1461):
syz_open_dev$vim2m(&(0x7f0000000080), 0xffffffffffff8001, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
socket$inet(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000002880)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
fcntl$setown(r0, 0x8, 0x0)
fcntl$setlease(r0, 0x400, 0x2)

4m20.629823204s ago: executing program 5 (id=1589):
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000000)=""/54, 0xfdb6}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
migrate_pages(0x0, 0x8000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000180)={0x6, 0x7, 0x7b, 0x401, 0x6, 0x800})
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)

4m16.804577817s ago: executing program 5 (id=1598):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
dup(0xffffffffffffffff)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9)

4m15.008669607s ago: executing program 5 (id=1602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)
r5 = accept$alg(r4, 0x0, 0x0)
read$alg(r5, &(0x7f0000000080)=""/4114, 0x1012)
write$binfmt_script(r5, &(0x7f0000004180), 0xff77)

4m13.463561043s ago: executing program 5 (id=1605):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x5192b310db075dd6, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}}, 0x0)
iopl(0x3)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4)
sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0xb00, &(0x7f0000000340), 0x10)
shmctl$IPC_SET(0x0, 0x1, 0x0)
shmctl$IPC_RMID(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES16, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)

4m12.264695537s ago: executing program 5 (id=1609):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$cec(0x0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
recvmsg$can_j1939(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10100)

4m7.95491907s ago: executing program 5 (id=1615):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x9}, {0xfff2, 0xffff}, {0x10, 0x7}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0)

3m52.320807063s ago: executing program 35 (id=1615):
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x9}, {0xfff2, 0xffff}, {0x10, 0x7}}}, 0x24}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0)

2m44.738840618s ago: executing program 2 (id=1745):
openat$kvm(0xffffffffffffff9c, 0x0, 0x327fa1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioperm(0x0, 0x1fb, 0x4)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0)

2m42.317795927s ago: executing program 2 (id=1748):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
get_robust_list(0x0, 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r4, r3, <r5=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, r5, 0x0, 0x0, 0xdead, 0x31, &(0x7f00000001c0)})

2m40.77832278s ago: executing program 2 (id=1752):
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f00000004c0), 0x2, 0x0)

2m39.734198039s ago: executing program 2 (id=1754):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0}, 0x0)

2m37.031404279s ago: executing program 2 (id=1757):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
chroot(&(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

2m34.389588315s ago: executing program 2 (id=1764):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
connect(r1, &(0x7f0000000040)=@caif=@util={0x25, "79b5979f8f92808649e5943685408d73"}, 0x80)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
open_tree(r1, &(0x7f0000000500)='./file0\x00', 0x10000)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0), 0x0, 0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x4c}}, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r4, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x0, 0x0, {0x7, 0x21, 0xfffffffb, 0x200000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00')
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0}}, 0x800)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

2m19.271197066s ago: executing program 36 (id=1764):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
connect(r1, &(0x7f0000000040)=@caif=@util={0x25, "79b5979f8f92808649e5943685408d73"}, 0x80)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
open_tree(r1, &(0x7f0000000500)='./file0\x00', 0x10000)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000005c0), 0x0, 0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x4c}}, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1404, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r4, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x0, 0x0, {0x7, 0x21, 0xfffffffb, 0x200000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00')
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0}}, 0x800)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

54.927540714s ago: executing program 1 (id=1930):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

52.84258313s ago: executing program 1 (id=1934):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(r0, 0x2c)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4005, 0x2})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
fsopen(&(0x7f0000000040)='cifs\x00', 0x1)
close_range(r4, 0xffffffffffffffff, 0x0)

50.672769078s ago: executing program 1 (id=1939):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
sendfile(r3, r4, 0x0, 0x80000001)

48.075417914s ago: executing program 1 (id=1942):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x18, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r6, 0x0, &(0x7f0000236000/0x800000)=nil, 0x800000, 0x400000000000000})

44.163227237s ago: executing program 1 (id=1949):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x80}}, 0x40800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x528}}, 0x4800)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

41.361334366s ago: executing program 1 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
sendfile(r3, r4, 0x0, 0x80000001)

25.337103546s ago: executing program 37 (id=1953):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x15d)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
sendfile(r3, r4, 0x0, 0x80000001)

20.455508512s ago: executing program 7 (id=1984):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ae9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00009f6000/0x3000)=nil)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
mount$9p_fd(0x0, 0x0, 0x0, 0x200400, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905e20040"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
personality(0xc417fec07cb910d1)
sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d)

17.101400458s ago: executing program 7 (id=1994):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$inet_smc(0x2b, 0x1, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.987407113s ago: executing program 8 (id=2005):
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44000102, 0x0)

10.239090946s ago: executing program 4 (id=2007):
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$9p(&(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000800)="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", 0x19b}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfa", 0x12, 0x11, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
getcwd(0x0, 0x0)

9.102302286s ago: executing program 4 (id=2009):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x2005, 0x0, 0x7}, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}])
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
get_robust_list(r3, &(0x7f0000000580)=&(0x7f0000000540)={&(0x7f0000000480)={&(0x7f0000000440)}, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, &(0x7f00000005c0)=0xc)

9.059221875s ago: executing program 8 (id=2010):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
close(0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0)

9.058695678s ago: executing program 9 (id=2011):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078)

7.634168743s ago: executing program 9 (id=2012):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="2e9c0f20e06635000010000f22e00f380406000066b98a0200000f323ef20f58790066b9c200000066b86f00000066ba000000000f300f219dbaa00066edf30f7f3966b8761fe42d0f23c00f21f86635020002000f23f8", 0x57}], 0x1, 0x34, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket(0xa, 0x6, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'none\x00', 0x0, 0x80000}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
readv(r4, 0x0, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

7.494884705s ago: executing program 8 (id=2013):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_emit_ethernet(0x6a, &(0x7f0000000500)={@broadcast, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "166e70", 0x30, 0x3a, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0xd, 0x6, "422aab", 0x2, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
accept4(r3, 0x0, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$BPF_GET_PROG_INFO(0x21, 0x0, 0x0)

7.456832997s ago: executing program 4 (id=2014):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
r4 = openat$cgroup_pressure(r3, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x20, 0x100003, 0x20, 0x100002}, 0x2f)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
io_setup(0x3, &(0x7f00000000c0))

7.33543143s ago: executing program 7 (id=2015):
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff020000000000000000000000000001c800907800"/70], 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x3, {0x2, 0xff}, 0xff}, 0x18)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x1200, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0)
sendto$inet(r0, 0x0, 0x500, 0x20008ffd, 0x0, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x80000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000380)={{0x0, 0x8}, {0xff, 0xe5}, 0x0, 0x0, 0xcf})

6.432469008s ago: executing program 7 (id=2016):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c)
sendmmsg$alg(r3, 0x0, 0x0, 0x2004c8d4)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58)
r4 = accept4(r2, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000040)="cb", 0xfffffdef)
r5 = eventfd2(0x7, 0x80801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xffffffffffffffff, 0x2000, 0x0, r5})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xfffff000)
syz_io_uring_setup(0x2d5b, &(0x7f0000000140), &(0x7f0000000040)=<r6=>0x0, &(0x7f00000005c0))
pipe2(0x0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x30})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x2, r5, 0x5})

6.393441091s ago: executing program 8 (id=2017):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
pread64(r1, &(0x7f0000000080)=""/102350, 0x18fce, 0x51)

6.28742476s ago: executing program 9 (id=2018):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timerfd_create(0x8, 0x0)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000000100), 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000340)=@multiplanar_overlay={0x6, 0x2, 0x4, 0x8, 0xb, {}, {0x5, 0x0, 0x7, 0x7, 0x3, 0x20, "16cf7c61"}, 0x6, 0x3, {&(0x7f00000002c0)=[{0xe, 0x1e, {0x9}, 0x4}, {0x6, 0x4, {0x6}, 0x3}]}, 0x1076000})
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)={0x14, r4, 0x1, 0x70bd2b}, 0x14}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x15, 0x0, 0x2, 0x2}, {0x7, 0xfc, 0x7f}, {0x2, 0xc7}, {0x6, 0x0, 0x10}]})

5.22886666s ago: executing program 9 (id=2019):
socket$pppl2tp(0x18, 0x1, 0x1)
pipe2$9p(&(0x7f00000001c0), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendmmsg$inet(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000800)="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", 0x19b}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfa", 0x12, 0x11, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
getcwd(0x0, 0x0)

5.145458026s ago: executing program 4 (id=2020):
syz_pidfd_open(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, 0x0)
socket(0x840000000002, 0x3, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3)

5.116311777s ago: executing program 7 (id=2021):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, 0x0, 0x4048040)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r6, 0x4188aea7, 0x0)
getpriority(0x1, 0x0)

2.794250684s ago: executing program 9 (id=2022):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="e331105e1bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0400", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x67, '\x00', @loopback}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x8c)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x117, 0x0, &(0x7f0000000280), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.784041395s ago: executing program 4 (id=2023):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
close(r0)

2.760967042s ago: executing program 8 (id=2024):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setrlimit(0xd, &(0x7f0000000300)={0x5})
syz_emit_ethernet(0x82, &(0x7f0000001bc0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3, 0xfc}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010188, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
stat(&(0x7f0000000500)='./file0\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x7c}}, 0x0)

2.565283949s ago: executing program 7 (id=2025):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x10, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18)
r2 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046})
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080), 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r3, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
shutdown(r3, 0x1)
sendto$inet6(r3, &(0x7f0000000040)="db83da876d6182899d1f75c5852715bebdc6e629ce8d9e6c7e12dbe827a2f953892c1c5e7b21166192d88d3f26de0769038103dbd5fcd7a1aa5424682cc379b95508f84c9deb31214e964ad9d62167cf924aaf66f2826fe3f84bfcc6216171d248efe2c0aa393ec0", 0x68, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x9}, 0x1c)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0)
recvmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/3, 0x3}, 0x808}], 0x1, 0x45833af92e4b39fc, 0x0)

1.340531336s ago: executing program 4 (id=2026):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x0, 0x4, 0x75}, 0x2c)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0x0, 0xf, 0x0, 0x0, 0x200, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@local, @in=@rand_addr=0x64010101}}]}, 0x78}}, 0x0)

3.862961ms ago: executing program 9 (id=2027):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setreuid(0xee01, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000380)='stack\x00')
pread64(r5, &(0x7f0000000880)=""/4119, 0x1017, 0x0)

0s ago: executing program 8 (id=2028):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socket(0x200000100000011, 0x3, 0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x4, 0x9, 0x1800, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
listen(r0, 0x0)

kernel console output (not intermixed with test programs):

ous mode
[  269.412806][ T7776] syz_tun: left promiscuous mode
[  269.889896][ T7793] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  270.366384][ T7799] block device autoloading is deprecated and will be removed.
[  271.948751][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'.
[  271.998962][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'.
[  272.009350][ T7809] netlink: 'syz.4.542': attribute type 1 has an invalid length.
[  272.017309][ T7809] netlink: 10 bytes leftover after parsing attributes in process `syz.4.542'.
[  272.144949][ T5872] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  272.159345][ T5827] block nbd0: Receive control failed (result -32)
[  272.374045][ T5872] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  272.403188][ T5872] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  272.433850][ T5872] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  272.459894][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.685348][ T7810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  272.706998][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  274.311042][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  275.218630][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  275.821546][ T7837] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  275.829724][ T7837] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  275.838604][ T7837] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  275.846506][ T7837] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  276.769707][ T5910] usb 6-1: USB disconnect, device number 2
[  281.089571][ T7875] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  281.097572][ T7875] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  281.106627][ T7875] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  281.114446][ T7875] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  281.842174][ T7873] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  282.248798][ T7884] netlink: zone id is out of range
[  282.271869][ T7884] netlink: zone id is out of range
[  282.290309][ T7884] netlink: zone id is out of range
[  282.299584][ T7884] netlink: zone id is out of range
[  282.315299][ T7884] netlink: zone id is out of range
[  282.337009][ T7884] netlink: zone id is out of range
[  282.342475][ T7884] netlink: zone id is out of range
[  282.348322][ T7884] netlink: zone id is out of range
[  282.354613][ T7884] netlink: zone id is out of range
[  282.360683][ T7884] netlink: zone id is out of range
[  286.389475][ T7918] overlayfs: failed to clone upperpath
[  289.200739][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.591'.
[  289.244034][ T5827] Bluetooth: hci4: unexpected event for opcode 0x1405
[  293.614960][ T5827] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  293.623577][ T5827] Bluetooth: hci4: Injecting HCI hardware error event
[  293.632730][ T5835] Bluetooth: hci4: hardware error 0x00
[  295.645046][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  295.935978][ T7996] trusted_key: encrypted_key: insufficient parameters specified
[  296.467972][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'.
[  296.496547][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'.
[  296.519201][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.596'.
[  300.480727][ T8037] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  300.879049][ T8046] xt_bpf: check failed: parse error
[  302.521328][ T8051] syz.3.608: attempt to access beyond end of device
[  302.521328][ T8051] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  302.540521][ T8051] XFS (nbd3): SB validate failed with error -5.
[  303.403009][ T8079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.619'.
[  303.412245][ T8079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.619'.
[  303.421482][ T8079] netlink: 108 bytes leftover after parsing attributes in process `syz.1.619'.
[  307.753268][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'.
[  308.928897][   T29] audit: type=1326 audit(1738695419.314:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  308.950380][   T29] audit: type=1326 audit(1738695419.324:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.055903][   T29] audit: type=1326 audit(1738695419.324:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.079215][   T29] audit: type=1326 audit(1738695419.324:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.104929][   T29] audit: type=1326 audit(1738695419.324:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.166994][   T29] audit: type=1326 audit(1738695419.324:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.206648][ T5835] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  309.440326][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: kworker/u9:6 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  309.440356][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  309.440369][ T5835] Workqueue: hci0 hci_rx_work
[  309.440407][ T5835] Call Trace:
[  309.440413][ T5835]  <TASK>
[  309.440422][ T5835]  dump_stack_lvl+0x241/0x360
[  309.440456][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.440485][ T5835]  ? __pfx__printk+0x10/0x10
[  309.440515][ T5835]  ? __kmalloc_cache_noprof+0x243/0x390
[  309.440538][ T5835]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  309.440567][ T5835]  sysfs_create_dir_ns+0x2ce/0x3a0
[  309.440588][ T5835]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  309.440617][ T5835]  kobject_add_internal+0x435/0x8d0
[  309.440653][ T5835]  kobject_add+0x152/0x220
[  309.440679][ T5835]  ? do_raw_spin_unlock+0x13c/0x8b0
[  309.440698][ T5835]  ? device_add+0x3e7/0xbf0
[  309.440716][ T5835]  ? __pfx_kobject_add+0x10/0x10
[  309.440742][ T5835]  ? _raw_spin_unlock+0x28/0x50
[  309.440766][ T5835]  ? get_device_parent+0x165/0x410
[  309.440787][ T5835]  device_add+0x4e5/0xbf0
[  309.440810][ T5835]  hci_conn_add_sysfs+0xe8/0x200
[  309.440856][ T5835]  le_conn_complete_evt+0xc9f/0x12e0
[  309.440892][ T5835]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  309.440914][ T5835]  ? __mutex_unlock_slowpath+0x227/0x800
[  309.440950][ T5835]  ? skb_pull_data+0x112/0x230
[  309.440979][ T5835]  hci_le_conn_complete_evt+0x18c/0x420
[  309.441009][ T5835]  hci_event_packet+0xa55/0x1540
[  309.441033][ T5835]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  309.441062][ T5835]  ? __pfx_hci_event_packet+0x10/0x10
[  309.441081][ T5835]  ? do_raw_spin_unlock+0x13c/0x8b0
[  309.441108][ T5835]  ? hci_send_to_monitor+0xd8/0x7f0
[  309.441133][ T5835]  ? kcov_remote_start+0x97/0x7d0
[  309.441160][ T5835]  hci_rx_work+0x3f3/0xdb0
[  309.441188][ T5835]  ? process_scheduled_works+0x976/0x1840
[  309.441209][ T5835]  process_scheduled_works+0xa66/0x1840
[  309.441259][ T5835]  ? __pfx_process_scheduled_works+0x10/0x10
[  309.441305][ T5835]  ? assign_work+0x364/0x3d0
[  309.441333][ T5835]  worker_thread+0x870/0xd30
[  309.441371][ T5835]  ? __kthread_parkme+0x169/0x1d0
[  309.441398][ T5835]  ? __pfx_worker_thread+0x10/0x10
[  309.441420][ T5835]  kthread+0x7a9/0x920
[  309.441443][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441470][ T5835]  ? __pfx_worker_thread+0x10/0x10
[  309.441492][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441515][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441543][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441571][ T5835]  ? _raw_spin_unlock_irq+0x23/0x50
[  309.441591][ T5835]  ? lockdep_hardirqs_on+0x99/0x150
[  309.441613][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441639][ T5835]  ret_from_fork+0x4b/0x80
[  309.441660][ T5835]  ? __pfx_kthread+0x10/0x10
[  309.441685][ T5835]  ret_from_fork_asm+0x1a/0x30
[  309.441721][ T5835]  </TASK>
[  309.441750][ T5835] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  309.559652][   T29] audit: type=1326 audit(1738695419.324:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  309.561672][ T5835] Bluetooth: hci0: failed to register connection device
[  309.805340][   T29] audit: type=1326 audit(1738695419.324:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  310.002135][   T29] audit: type=1326 audit(1738695419.324:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  310.155318][   T29] audit: type=1326 audit(1738695419.324:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8116 comm="syz.5.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7fc00000
[  310.678726][ T8144] overlayfs: failed to clone upperpath
[  312.255991][ T8156] vlan2: entered allmulticast mode
[  314.361920][ T8174] overlayfs: failed to clone upperpath
[  314.422134][ T8168] syz.3.648 (8168): drop_caches: 2
[  314.478468][ T8176] netlink: 'syz.4.653': attribute type 1 has an invalid length.
[  317.465416][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.472010][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  317.487701][ T8199] bond1: (slave macvlan2): Releasing backup interface
[  318.329275][ T8199] team0: Mode changed to "loadbalance"
[  318.466613][ T8199] vlan0: entered promiscuous mode
[  318.531896][ T8199] team0: Port device vlan0 added
[  318.586600][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'.
[  320.648167][ T8225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  320.781757][ T8207] team0: Port device vlan0 removed
[  326.064412][ T8281] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  326.177548][ T8285] net_ratelimit: 173 callbacks suppressed
[  326.177569][ T8285] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  327.535278][ T8306] netlink: 596 bytes leftover after parsing attributes in process `syz.1.691'.
[  330.220221][ T8325] futex_wake_op: syz.3.697 tries to shift op by -1; fix this program
[  336.087544][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  336.087563][   T29] audit: type=1326 audit(1738695447.334:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8385 comm="syz.3.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300cf8cda9 code=0x0
[  338.851336][   T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  339.048491][   T47] usb 4-1: Using ep0 maxpacket: 8
[  339.078364][   T47] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  339.099960][   T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  339.112358][   T47] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.131216][   T47] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.159608][   T47] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  339.177898][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.398776][   T47] usb 4-1: GET_CAPABILITIES returned 0
[  339.408438][   T47] usbtmc 4-1:16.0: can't read capabilities
[  342.317857][ T5872] usb 4-1: USB disconnect, device number 8
[  344.136422][ T8459] netlink: 'syz.4.734': attribute type 2 has an invalid length.
[  349.523744][  T120] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  350.436656][  T120] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  350.458875][  T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.481191][ T8510] overlayfs: failed to clone lowerpath
[  350.522049][  T120] usb 5-1: config 0 descriptor??
[  350.548807][  T120] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  350.762331][  T120] gp8psk: usb in 128 operation failed.
[  350.849304][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'.
[  351.073379][ T8523] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  351.896910][  T120] gp8psk: FW Version = 144.22.38 (0x901626)  Build 2022/167/212
[  352.204637][  T120] gp8psk: usb in 149 operation failed.
[  352.220504][  T120] gp8psk: failed to get FPGA version
[  352.240580][  T120] gp8psk: usb in 138 operation failed.
[  352.246869][  T120] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  353.435322][  T120] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  353.447635][  T120] usb 5-1: USB disconnect, device number 3
[  357.921880][ T8584] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  357.929801][ T8584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  357.938442][ T8584] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  357.946292][ T8584] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  361.487055][  T120] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  361.794933][  T120] usb 6-1: Using ep0 maxpacket: 32
[  361.818986][  T120] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  361.855062][  T120] usb 6-1: config 0 has no interface number 0
[  361.927340][  T120] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  362.194048][  T120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.211715][  T120] usb 6-1: Product: syz
[  362.222677][  T120] usb 6-1: Manufacturer: syz
[  362.330242][  T120] usb 6-1: SerialNumber: syz
[  362.870728][  T120] usb 6-1: config 0 descriptor??
[  362.879144][  T120] smsc95xx v2.0.0
[  363.285061][ T8627] evm: overlay not supported
[  363.532871][  T120] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  363.571540][  T120] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  363.611896][  T120] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  363.685691][ T8638] syz.4.791 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  364.493194][  T120] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  364.512171][  T120] usb 6-1: USB disconnect, device number 3
[  365.956686][ T8657] capability: warning: `syz.1.799' uses deprecated v2 capabilities in a way that may be insecure
[  366.966937][ T8672] xt_hashlimit: size too large, truncated to 1048576
[  366.978510][ T8672] syz.2.802: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  366.995696][ T8672] CPU: 1 UID: 0 PID: 8672 Comm: syz.2.802 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  366.995719][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  366.995730][ T8672] Call Trace:
[  366.995737][ T8672]  <TASK>
[  366.995745][ T8672]  dump_stack_lvl+0x241/0x360
[  366.995781][ T8672]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.995810][ T8672]  ? __pfx__printk+0x10/0x10
[  366.995839][ T8672]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  366.995869][ T8672]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  366.995900][ T8672]  warn_alloc+0x278/0x410
[  366.995933][ T8672]  ? __pfx_warn_alloc+0x10/0x10
[  366.995967][ T8672]  ? htable_create+0x102/0x880
[  366.995984][ T8672]  ? __get_vm_area_node+0x1c8/0x2d0
[  366.996010][ T8672]  ? __get_vm_area_node+0x25c/0x2d0
[  366.996043][ T8672]  __vmalloc_node_range_noprof+0x62f/0x1380
[  366.996093][ T8672]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  366.996149][ T8672]  ? htable_create+0x102/0x880
[  366.996166][ T8672]  vmalloc_noprof+0x79/0x90
[  366.996211][ T8672]  ? htable_create+0x102/0x880
[  366.996231][ T8672]  htable_create+0x102/0x880
[  366.996258][ T8672]  hashlimit_mt_check_common+0x710/0xa40
[  366.996285][ T8672]  hashlimit_mt_check_v1+0x2ea/0x540
[  366.996320][ T8672]  ? __pfx_hashlimit_mt_check_v1+0x10/0x10
[  366.996351][ T8672]  ? trace_contention_end+0x3c/0x120
[  366.996389][ T8672]  ? cpus_read_unlock+0xa6/0x140
[  366.996431][ T8672]  ? __mutex_unlock_slowpath+0x227/0x800
[  366.996465][ T8672]  xt_check_match+0x368/0xa40
[  366.996500][ T8672]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  366.996529][ T8672]  ? __pfx_xt_check_match+0x10/0x10
[  366.996576][ T8672]  ? xt_find_match+0x1d3/0x210
[  366.996616][ T8672]  translate_table+0x1671/0x2330
[  366.996667][ T8672]  ? __pfx_translate_table+0x10/0x10
[  366.996690][ T8672]  ? irqentry_exit+0x63/0x90
[  366.996715][ T8672]  ? lockdep_hardirqs_on+0x99/0x150
[  366.996757][ T8672]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  366.996788][ T8672]  ? copy_from_sockptr_offset+0x6b/0xb0
[  366.996815][ T8672]  do_ip6t_set_ctl+0xe4c/0x1270
[  366.996845][ T8672]  ? nf_setsockopt+0x240/0x2c0
[  366.996866][ T8672]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  366.996891][ T8672]  ? rcu_is_watching+0x15/0xb0
[  366.996923][ T8672]  ? trace_contention_end+0x3c/0x120
[  366.996966][ T8672]  ? __mutex_unlock_slowpath+0x227/0x800
[  366.997006][ T8672]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  366.997054][ T8672]  nf_setsockopt+0x295/0x2c0
[  366.997082][ T8672]  rawv6_setsockopt+0x327/0x740
[  366.997114][ T8672]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  366.997142][ T8672]  ? __pfx_lock_acquire+0x10/0x10
[  366.997170][ T8672]  ? sock_common_setsockopt+0x37/0xc0
[  366.997201][ T8672]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  366.997229][ T8672]  do_sock_setsockopt+0x3af/0x720
[  366.997269][ T8672]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  366.997307][ T8672]  ? __fget_files+0x395/0x410
[  366.997333][ T8672]  ? __fget_files+0x2a/0x410
[  366.997370][ T8672]  __x64_sys_setsockopt+0x1ee/0x280
[  366.997418][ T8672]  do_syscall_64+0xf3/0x230
[  366.997448][ T8672]  ? clear_bhb_loop+0x35/0x90
[  366.997482][ T8672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.997510][ T8672] RIP: 0033:0x7f7ecb78cda9
[  366.997539][ T8672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.997556][ T8672] RSP: 002b:00007f7ec95d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  366.997578][ T8672] RAX: ffffffffffffffda RBX: 00007f7ecb9a6160 RCX: 00007f7ecb78cda9
[  366.997594][ T8672] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  366.997607][ T8672] RBP: 00007f7ecb80e2a0 R08: 00000000000004c0 R09: 0000000000000000
[  366.997620][ T8672] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000
[  366.997633][ T8672] R13: 0000000000000000 R14: 00007f7ecb9a6160 R15: 00007fff6b8e8b28
[  366.997665][ T8672]  </TASK>
[  366.997679][ T8672] Mem-Info:
[  367.009113][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.801'.
[  367.018511][ T8672] active_anon:341 inactive_anon:5892 isolated_anon:0
[  367.018511][ T8672]  active_file:17117 inactive_file:42422 isolated_file:0
[  367.018511][ T8672]  unevictable:768 dirty:377 writeback:0
[  367.018511][ T8672]  slab_reclaimable:10243 slab_unreclaimable:99478
[  367.018511][ T8672]  mapped:29586 shmem:2461 pagetables:882
[  367.018511][ T8672]  sec_pagetables:0 bounce:0
[  367.018511][ T8672]  kernel_misc_reclaimable:0
[  367.018511][ T8672]  free:1318534 free_pcp:542 free_cma:0
[  367.018587][ T8672] Node 0 active_anon:1364kB inactive_anon:23568kB active_file:68340kB inactive_file:169688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118308kB dirty:1508kB writeback:0kB shmem:8308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11452kB pagetables:3528kB sec_pagetables:0kB all_unreclaimable? no
[  367.049307][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'.
[  367.053255][ T8672] Node 1 active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  367.083312][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.801'.
[  367.083686][ T8672] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  367.549036][ T8672] lowmem_reserve[]: 0 2493 2494 0 0
[  367.554283][ T8672] Node 0 DMA32 free:1352392kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1360kB inactive_anon:23680kB active_file:67568kB inactive_file:169636kB unevictable:1536kB writepending:1508kB present:3129332kB managed:2553644kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:920kB free_cma:0kB
[  367.585056][ T8672] lowmem_reserve[]: 0 0 0 0 0
[  367.589778][ T8672] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:772kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  367.616691][ T8672] lowmem_reserve[]: 0 0 0 0 0
[  367.621420][ T8672] Node 1 Normal free:3907560kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:128kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  367.650880][ T8672] lowmem_reserve[]: 0 0 0 0 0
[  367.655646][ T8672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  367.668385][ T8672] Node 0 DMA32: 311*4kB (UME) 991*8kB (UME) 628*16kB (UME) 404*32kB (UME) 172*64kB (UME) 40*128kB (UME) 30*256kB (UM) 38*512kB (UM) 27*1024kB (UME) 12*2048kB (UME) 299*4096kB (UM) = 1352340kB
[  367.687390][ T8672] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  367.699280][ T8672] Node 1 Normal: 228*4kB (UME) 55*8kB (UME) 38*16kB (UME) 214*32kB (UME) 104*64kB (UME) 23*128kB (UE) 14*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3907560kB
[  367.717870][ T8672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  367.727493][ T8672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  367.737458][ T8672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  367.747027][ T8672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  367.756344][ T8672] 62000 total pagecache pages
[  367.761040][ T8672] 0 pages in swap cache
[  367.765226][ T8672] Free swap  = 124756kB
[  367.769384][ T8672] Total swap = 124996kB
[  367.773532][ T8672] 2097051 pages RAM
[  367.777377][ T8672] 0 pages HighMem/MovableOnly
[  367.782046][ T8672] 426788 pages reserved
[  367.786219][ T8672] 0 pages cma reserved
[  367.832155][ T8670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.801'.
[  368.634944][  T120] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  368.802455][  T120] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  368.890056][  T120] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  369.043460][  T120] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  369.230165][  T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.574046][ T8683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  369.594145][  T120] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  370.777377][ T8683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.971239][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'.
[  370.985192][ T8683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.705418][    T8] usb 5-1: USB disconnect, device number 4
[  373.506898][ T8733] syz.4.818: attempt to access beyond end of device
[  373.506898][ T8733] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  374.718695][ T8733] FAT-fs (loop9): unable to read boot sector
[  375.873092][ T8753] overlayfs: failed to clone upperpath
[  377.149108][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  377.201295][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'.
[  377.720235][ T5910] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  378.525591][   T29] audit: type=1326 audit(1738695489.764:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.525924][ T5910] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  378.577878][   T29] audit: type=1326 audit(1738695489.764:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.605744][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.618138][ T5910] usb 4-1: config 0 descriptor??
[  378.627648][ T5910] cp210x 4-1:0.0: cp210x converter detected
[  378.637582][ T8809] tipc: Started in network mode
[  378.642499][ T8809] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  378.658474][   T29] audit: type=1326 audit(1738695489.804:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.709467][ T8809] tipc: Enabled bearer <eth:geneve1>, priority 10
[  378.735008][   T29] audit: type=1326 audit(1738695489.804:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.767631][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  378.777823][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  378.795141][   T29] audit: type=1326 audit(1738695489.804:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.825121][   T29] audit: type=1326 audit(1738695489.804:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.848032][   T29] audit: type=1326 audit(1738695489.804:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.870261][   T29] audit: type=1326 audit(1738695489.804:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.892275][   T29] audit: type=1326 audit(1738695489.804:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  378.943779][   T29] audit: type=1326 audit(1738695489.804:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8806 comm="syz.5.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  379.088522][ T5910] usb 4-1: cp210x converter now attached to ttyUSB0
[  379.351361][    T8] usb 4-1: USB disconnect, device number 9
[  379.375574][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  379.418770][    T8] cp210x 4-1:0.0: device disconnected
[  380.469609][  T120] tipc: Node number set to 15444650
[  383.153197][ T8853] team0: Port device virt_wifi0 added
[  384.525050][    T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  385.725092][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.755068][    T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  385.795145][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.780165][    T8] usb 5-1: config 0 descriptor??
[  386.797087][    T8] pwc: Askey VC010 type 2 USB webcam detected.
[  387.785612][    T8] pwc: send_video_command error -71
[  387.790864][    T8] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  387.826161][    T8] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  388.417986][    T8] usb 5-1: USB disconnect, device number 5
[  388.618695][ T8891] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  388.751167][ T8891] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  388.763403][ T8891] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  390.327889][ T8907] hsr0: entered promiscuous mode
[  393.756002][ T8947] netlink: 'syz.2.882': attribute type 3 has an invalid length.
[  393.763689][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.2.882'.
[  394.938302][ T8958] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  395.502325][ T8965] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  395.510456][ T8965] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  395.519228][ T8965] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  395.527135][ T8965] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  398.187843][ T8981] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  401.666417][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.898'.
[  403.199348][ T9004] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  403.224821][ T9009] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  408.856810][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  408.856829][   T29] audit: type=1326 audit(1738695520.104:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  409.002884][   T29] audit: type=1326 audit(1738695520.104:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  409.274501][   T29] audit: type=1326 audit(1738695520.104:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  409.298394][   T29] audit: type=1326 audit(1738695520.144:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  409.946291][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  410.007430][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.5.917'.
[  410.054973][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  410.078346][   T29] audit: type=1326 audit(1738695520.144:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  410.104875][   T29] audit: type=1326 audit(1738695520.144:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  410.111317][ T9066] netlink: 36 bytes leftover after parsing attributes in process `syz.5.917'.
[  410.127204][   T29] audit: type=1326 audit(1738695520.204:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  410.191453][   T29] audit: type=1326 audit(1738695520.204:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9052 comm="syz.5.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x7ffc0000
[  410.276676][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.3.919'.
[  411.674050][ T9088] xt_connbytes: Forcing CT accounting to be enabled
[  411.681334][ T9088] Cannot find del_set index 1 as target
[  412.256106][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.924'.
[  412.294890][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  414.997772][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'.
[  415.017099][ T9119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'.
[  415.073517][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'.
[  415.170331][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.1.934'.
[  416.167858][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.937'.
[  416.202613][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.937'.
[  417.185807][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.937'.
[  419.027727][ T9164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.946'.
[  419.037132][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'.
[  419.083485][ T9160] ptrace attach of "./syz-executor exec"[9162] was attempted by ""[9160]
[  421.804879][   T29] audit: type=1800 audit(1738695533.034:75): pid=9197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.960" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  423.263493][ T9210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.961'.
[  423.324086][ T9211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.961'.
[  431.184594][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.979'.
[  431.193916][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'.
[  434.016350][ T9292] ipt_REJECT: TCP_RESET invalid for non-tcp
[  436.431308][ T9302] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  440.458702][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  440.465172][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.534867][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  440.786434][ T5872] usb 6-1: Using ep0 maxpacket: 8
[  440.829111][ T5872] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[  440.858922][ T5872] usb 6-1: config 0 has no interface number 0
[  440.879685][ T5872] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  440.916880][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.940653][ T5872] usb 6-1: config 0 descriptor??
[  440.946234][ T9339] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  441.636115][ T5872] viperboard 6-1:0.143: version 0.00 found at bus 006 address 004
[  441.705165][ T5872] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  441.714007][ T5872] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  441.821566][ T5875] usb 6-1: USB disconnect, device number 4
[  444.140544][ T9373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'.
[  447.415128][ T5827] Bluetooth: hci3: command 0x0406 tx timeout
[  448.242903][ T9416] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  448.786622][ T9421] overlayfs: failed to clone upperpath
[  450.778123][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'.
[  450.798906][ T9439] xt_connbytes: Forcing CT accounting to be enabled
[  450.805901][ T9439] Cannot find del_set index 1 as target
[  453.213213][ T9457] netlink: 550 bytes leftover after parsing attributes in process `syz.2.1036'.
[  453.242194][ T9458] netfs: Couldn't get user pages (rc=-14)
[  455.935090][  T976] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  455.960565][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1046'.
[  456.143964][  T976] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  456.215215][  T976] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  456.235416][  T976] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  456.276239][  T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.287646][ T9478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  456.309583][  T976] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  456.372796][ T9497] sctp: [Deprecated]: syz.1.1050 (pid 9497) Use of int in max_burst socket option deprecated.
[  456.372796][ T9497] Use struct sctp_assoc_value instead
[  457.379505][ T5910] usb 4-1: USB disconnect, device number 10
[  471.893971][ T9630] use of bytesused == 0 is deprecated and will be removed in the future,
[  471.903021][ T9630] use the actual size instead.
[  474.458368][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  475.614820][    T8] usb 4-1: device descriptor read/64, error -71
[  476.605871][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  478.998662][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'.
[  479.010310][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1107'.
[  479.070130][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'.
[  479.191824][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'.
[  485.216921][ T9729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1117'.
[  485.234816][ T9729] tipc: Started in network mode
[  485.239734][ T9729] tipc: Node identity 7, cluster identity 5
[  485.338902][ T9729] tipc: Node number set to 7
[  488.432515][ T9747] overlayfs: failed to resolve './file1': -2
[  492.105165][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1132'.
[  493.216681][ T9789] overlayfs: failed to clone upperpath
[  493.226856][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1137'.
[  493.270460][ T9788] bridge0: port 3(vlan2) entered blocking state
[  493.333024][ T9788] bridge0: port 3(vlan2) entered disabled state
[  493.375082][ T9788] vlan2: entered allmulticast mode
[  493.396565][ T9788] vlan2: left allmulticast mode
[  496.669616][ T9816] kvm: pic: single mode not supported
[  497.014882][ T5827] Bluetooth: hci3: command 0x0406 tx timeout
[  499.491838][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  499.501131][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'.
[  499.515479][ T9850] batadv1: entered promiscuous mode
[  499.521749][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv1
[  500.208255][ T9859] lo speed is unknown, defaulting to 1000
[  500.214252][ T9859] lo speed is unknown, defaulting to 1000
[  500.222046][ T9859] lo speed is unknown, defaulting to 1000
[  500.231653][ T9859] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  500.245462][ T9859] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  500.278325][ T9859] lo speed is unknown, defaulting to 1000
[  500.286460][ T9859] lo speed is unknown, defaulting to 1000
[  500.292876][ T9859] lo speed is unknown, defaulting to 1000
[  500.299499][ T9859] lo speed is unknown, defaulting to 1000
[  500.306026][ T9859] lo speed is unknown, defaulting to 1000
[  501.108272][   T29] audit: type=1326 audit(1738695612.344:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  501.296662][   T29] audit: type=1326 audit(1738695612.344:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  501.318685][   T29] audit: type=1326 audit(1738695612.344:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  501.340755][   T29] audit: type=1326 audit(1738695612.344:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  501.676983][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.683692][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  502.265618][   T29] audit: type=1326 audit(1738695612.344:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  502.420438][   T29] audit: type=1326 audit(1738695612.344:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  502.446668][ T9873] Bluetooth: MGMT ver 1.23
[  502.515597][   T29] audit: type=1326 audit(1738695612.344:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  502.538047][   T29] audit: type=1326 audit(1738695612.344:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  502.559765][   T29] audit: type=1326 audit(1738695612.344:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  502.604805][   T29] audit: type=1326 audit(1738695612.344:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.1.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f115458cda9 code=0x7ffc0000
[  508.670436][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  508.680619][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  508.688921][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  508.696666][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  508.711284][ T5827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  508.885316][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  509.702575][ T9930] lo speed is unknown, defaulting to 1000
[  510.016191][ T9930] chnl_net:caif_netlink_parms(): no params data found
[  511.935997][ T5827] Bluetooth: hci5: command tx timeout
[  512.358629][ T6001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.585280][ T6001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  512.770283][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'.
[  514.019426][ T5827] Bluetooth: hci5: command tx timeout
[  514.027128][ T6001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.576446][ T9974] ceph: No mds server is up or the cluster is laggy
[  514.814416][    T8] libceph: connect (1)[c::]:6789 error -101
[  514.821264][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  515.023854][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.059472][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.077753][ T9930] bridge_slave_0: entered allmulticast mode
[  515.084957][ T9930] bridge_slave_0: entered promiscuous mode
[  515.094555][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.101966][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.109156][ T9930] bridge_slave_1: entered allmulticast mode
[  515.116255][ T9930] bridge_slave_1: entered promiscuous mode
[  515.478138][ T6001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.202318][ T5827] Bluetooth: hci5: command tx timeout
[  517.046064][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  517.304798][    T8] usb 5-1: Using ep0 maxpacket: 16
[  517.385154][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  517.408216][T10005] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  517.414277][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  517.424934][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'.
[  517.460750][ T9930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.476498][    T8] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  517.507619][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.516941][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.543186][    T8] usb 5-1: Product: syz
[  517.552710][    T8] usb 5-1: Manufacturer: syz
[  517.566569][    T8] usb 5-1: SerialNumber: syz
[  517.575592][    T8] usb 5-1: config 0 descriptor??
[  517.587936][    T8] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  517.904495][ T5909] usb 5-1: USB disconnect, device number 6
[  518.304822][ T5827] Bluetooth: hci5: command tx timeout
[  519.307742][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1200'.
[  520.029683][ T9930] team0: Port device team_slave_0 added
[  520.060812][ T9930] team0: Port device team_slave_1 added
[  528.609292][T10065] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  529.856873][T10073] hub 2-0:1.0: USB hub found
[  529.867278][T10073] hub 2-0:1.0: 1 port detected
[  532.498863][ T6001] bond0 (unregistering): Released all slaves
[  532.519762][ T6001] bond1 (unregistering): Released all slaves
[  532.532123][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.544835][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.588444][ T9930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.612792][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.624553][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  533.441229][ T5827] Bluetooth: hci0: command 0x0406 tx timeout
[  533.477926][T10077] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  533.652634][ T9930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.671591][ T6001] tipc: Left network mode
[  534.006042][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'.
[  537.965293][ T9930] hsr_slave_0: entered promiscuous mode
[  537.971696][ T9930] hsr_slave_1: entered promiscuous mode
[  538.751084][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  539.654407][ T6001] hsr_slave_0: left promiscuous mode
[  539.671018][ T6001] hsr_slave_1: left promiscuous mode
[  539.690983][ T6001] veth1_vlan: left promiscuous mode
[  539.696540][ T6001] veth0_vlan: left promiscuous mode
[  541.959678][ T6001] team0 (unregistering): Port device virt_wifi0 removed
[  543.318699][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1239'.
[  543.901181][T10141] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.910385][T10141] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.919335][T10141] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.928413][T10141] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  543.980884][T10157] bridge0: entered promiscuous mode
[  543.993273][T10157] bridge0: left promiscuous mode
[  544.186533][T10162] 9pnet: bogus RWRITE count (512 > 32)
[  545.386722][ T9930] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  545.779786][ T9930] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  546.116994][T10178] xt_nat: multiple ranges no longer supported
[  546.429535][ T9930] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  546.469085][ T9930] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  548.833952][ T6001] IPVS: stop unused estimator thread 0...
[  549.482394][ T9930] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.620077][ T9930] 8021q: adding VLAN 0 to HW filter on device team0
[  549.670976][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'.
[  549.758961][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.766179][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  549.836176][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.843332][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.854258][ T9930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  550.884834][ T9930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.083069][T10225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'.
[  553.104327][T10225] netlink: 'syz.2.1257': attribute type 7 has an invalid length.
[  553.113943][T10225] netlink: 'syz.2.1257': attribute type 8 has an invalid length.
[  553.133529][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'.
[  553.156362][ T9930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.176562][T10225] team0: entered promiscuous mode
[  554.215083][T10225] team_slave_0: entered promiscuous mode
[  554.221420][T10225] team_slave_1: entered promiscuous mode
[  554.434583][T10225] bond0: entered promiscuous mode
[  554.475738][T10225] bond_slave_0: entered promiscuous mode
[  554.481612][T10225] bond_slave_1: entered promiscuous mode
[  554.514503][T10225] gretap0: entered promiscuous mode
[  555.508008][T10225] 8021q: adding VLAN 0 to HW filter on device hsr1
[  555.830819][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  557.599903][ T9930] veth0_vlan: entered promiscuous mode
[  557.620417][ T9930] veth1_vlan: entered promiscuous mode
[  557.658004][ T9930] veth0_macvtap: entered promiscuous mode
[  557.667485][ T9930] veth1_macvtap: entered promiscuous mode
[  557.685037][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.695810][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.715017][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.972678][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.983533][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.994202][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.015965][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  558.874210][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.885000][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.894976][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.934887][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.965149][ T9930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.984916][ T9930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.027025][ T9930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  559.089966][ T9930] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.113135][ T9930] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.147940][ T9930] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.360236][ T9930] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.318792][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.348364][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.566427][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.575130][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.604809][    T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  562.675144][    T8] usb 6-1: Using ep0 maxpacket: 32
[  562.953659][    T8] usb 6-1: device descriptor read/all, error -71
[  563.087926][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  563.094301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  565.183198][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'.
[  565.193467][T10328] unsupported nlmsg_type 40
[  565.678298][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'.
[  571.223112][T10371] virtio-fs: tag <(null)> not found
[  571.651525][T10379] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1294'.
[  573.881259][T10414] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  575.240293][T10421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1312'.
[  579.735757][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'.
[  579.773571][T10453] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'.
[  579.836894][T10453] dummy0: entered promiscuous mode
[  579.893723][T10453] dummy0: left promiscuous mode
[  580.947483][T10470] 9pnet: p9_errstr2errno: server reported unknown error �01777777777777777777777
[  581.096837][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1330'.
[  582.350100][T10484] syz.4.1332: attempt to access beyond end of device
[  582.350100][T10484] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0
[  582.365779][T10484] gfs2: error -5 reading superblock
[  583.699069][T10498] delete_channel: no stack
[  586.322994][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  586.323016][   T29] audit: type=1326 audit(2000000080.340:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10508 comm="syz.2.1341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ecb78cda9 code=0x0
[  587.107387][T10528] pim6reg: entered allmulticast mode
[  587.146739][T10528] pim6reg: left allmulticast mode
[  587.666115][T10538] lo speed is unknown, defaulting to 1000
[  587.691856][T10538] lo speed is unknown, defaulting to 1000
[  587.702559][T10538] lo speed is unknown, defaulting to 1000
[  588.361338][T10538] infiniband s
z1: set active
[  588.366484][T10538] infiniband s
z1: added lo
[  588.536199][  T976] lo speed is unknown, defaulting to 1000
[  588.588923][T10538] RDS/IB: s
z1: added
[  588.593939][T10538] smc: adding ib device s
z1 with port count 1
[  588.600459][T10538] smc:    ib device s
z1 port 1 has pnetid 
[  588.609670][T10538] lo speed is unknown, defaulting to 1000
[  588.728464][T10538] lo speed is unknown, defaulting to 1000
[  588.840487][T10538] lo speed is unknown, defaulting to 1000
[  588.950656][T10538] lo speed is unknown, defaulting to 1000
[  589.063024][T10538] lo speed is unknown, defaulting to 1000
[  589.273069][T10538] syz.1.1347 (10538) used greatest stack depth: 17392 bytes left
[  589.282735][  T976] lo speed is unknown, defaulting to 1000
[  593.124118][   T29] audit: type=1804 audit(2000000088.080:106): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1357" name="/newroot/280/file0" dev="fuse" ino=1 res=1 errno=0
[  593.202201][T10573] kvm: kvm [10569]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111
[  603.945839][T10638] IPv6: sit1: Disabled Multicast RS
[  605.688599][T10651] netlink: zone id is out of range
[  605.693752][T10651] netlink: zone id is out of range
[  605.698930][T10651] netlink: zone id is out of range
[  605.704064][T10651] netlink: zone id is out of range
[  605.709229][T10651] netlink: zone id is out of range
[  605.714482][T10651] netlink: zone id is out of range
[  605.719664][T10651] netlink: zone id is out of range
[  605.725058][T10651] netlink: zone id is out of range
[  605.730168][T10651] netlink: zone id is out of range
[  605.735310][T10651] netlink: zone id is out of range
[  606.126816][T10655] netlink: 'syz.1.1382': attribute type 1 has an invalid length.
[  610.994731][T10683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1388'.
[  611.342074][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'.
[  618.047752][  T976] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  619.131150][T10734] lo speed is unknown, defaulting to 1000
[  619.139352][T10734] lo speed is unknown, defaulting to 1000
[  619.955221][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.746744][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'.
[  621.850712][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.860623][  T976] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  621.869760][  T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.880001][  T976] usb 6-1: config 0 descriptor??
[  621.994474][  T976] usb 6-1: can't set config #0, error -71
[  622.036052][  T976] usb 6-1: USB disconnect, device number 7
[  622.333440][T10750] dvmrp8: entered allmulticast mode
[  623.938484][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  624.683505][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  624.690198][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  624.734707][T10764] 8021q: adding VLAN 0 to HW filter on device bond3
[  624.990283][T10776] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  624.998838][T10776] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  625.007395][T10776] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  626.524949][ T5909] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  626.975171][ T5909] usb 6-1: Using ep0 maxpacket: 8
[  627.123918][ T5909] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[  628.051686][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.068243][ T5909] usb 6-1: Product: syz
[  628.072452][ T5909] usb 6-1: Manufacturer: syz
[  628.077397][ T5909] usb 6-1: SerialNumber: syz
[  628.086181][ T5909] usb 6-1: config 0 descriptor??
[  628.208384][ T5909] usb 6-1: can't set config #0, error -71
[  628.215405][ T5909] usb 6-1: USB disconnect, device number 8
[  631.199501][   T29] audit: type=1326 audit(2000000126.170:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10813 comm="syz.4.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81978cda9 code=0x7fc00000
[  632.287906][   T29] audit: type=1326 audit(2000000127.260:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10827 comm="syz.5.1429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f876178cda9 code=0x0
[  632.861039][T10851] CIFS: iocharset name too long
[  638.042816][ T5835] Bluetooth: hci5: command 0x0406 tx timeout
[  641.675529][T10915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  641.703397][T10906] overlayfs: overlapping lowerdir path
[  642.672554][T10294] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  643.617330][T10294] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  644.040120][T10294] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  644.075155][T10294] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  644.115105][T10294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.177988][T10918] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  644.213968][T10294] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  645.794031][   T47] usb 5-1: USB disconnect, device number 7
[  647.370540][T10956] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.1464'.
[  650.971069][T10978] ISOFS: Unable to identify CD-ROM format.
[  652.989273][T10992] netlink: 'syz.4.1473': attribute type 10 has an invalid length.
[  653.022237][T10992] 8021q: adding VLAN 0 to HW filter on device team0
[  653.038226][T10992] bond0: (slave team0): Enslaving as an active interface with an up link
[  656.034995][ T5873] kworker/1:5 (5873) used greatest stack depth: 14424 bytes left
[  657.084811][T10901] Bluetooth: hci5: command 0x0406 tx timeout
[  658.039336][T11031] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  658.047658][T11031] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock
[  658.056206][T11031] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  658.064096][T11031] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock
[  659.844871][ T5909] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  660.017549][ T5909] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  660.043857][ T5909] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  660.064851][ T5909] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  660.074070][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.106271][T11017] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  660.117201][ T5909] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  662.732404][T10294] usb 5-1: USB disconnect, device number 8
[  665.915364][ T6001] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.952467][T10901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  665.962220][T10901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  665.975735][T10901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  665.991203][T10901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  666.001367][T10901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  666.009248][T10901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  666.162035][T11080] lo speed is unknown, defaulting to 1000
[  666.267891][ T6001] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.309137][T11080] lo speed is unknown, defaulting to 1000
[  666.435759][ T6001] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.947687][ T6001] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  668.233568][T10901] Bluetooth: hci4: command tx timeout
[  669.539201][T11101] smc: net device caif0 applied user defined pnetid SYZ2
[  670.284816][T10901] Bluetooth: hci4: command tx timeout
[  670.412783][T11110] kvm: kvm [11109]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800
[  672.367050][T10901] Bluetooth: hci4: command tx timeout
[  672.816998][ T6001] bridge_slave_1: left allmulticast mode
[  672.822707][ T6001] bridge_slave_1: left promiscuous mode
[  672.855566][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state
[  672.984039][ T6001] bridge_slave_0: left allmulticast mode
[  673.013000][ T6001] bridge_slave_0: left promiscuous mode
[  673.019368][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.448377][T10901] Bluetooth: hci4: command tx timeout
[  675.155313][ T6001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  675.206880][ T6001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  675.231978][ T6001] bond0 (unregistering): Released all slaves
[  675.629160][T11140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1518'.
[  675.638546][T11140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1518'.
[  675.647751][T11140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1518'.
[  675.656906][T11140] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1518'.
[  677.808385][T11080] chnl_net:caif_netlink_parms(): no params data found
[  677.987289][T11174] netlink: 'syz.5.1529': attribute type 10 has an invalid length.
[  678.116079][T11174] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  680.233083][ T6001] hsr_slave_0: left promiscuous mode
[  680.338195][ T6001] hsr_slave_1: left promiscuous mode
[  680.354481][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  680.382567][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_0
[  680.404092][ T6001] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  680.444912][ T6001] batman_adv: batadv0: Removing interface: batadv_slave_1
[  681.254425][ T6001] veth1_macvtap: left promiscuous mode
[  681.260372][ T6001] veth0_macvtap: left promiscuous mode
[  681.266312][ T6001] veth1_vlan: left promiscuous mode
[  681.271771][ T6001] veth0_vlan: left promiscuous mode
[  681.587504][T11201] Process accounting resumed
[  681.594564][T11201] kernel write not supported for file /asound/timers (pid: 11201 comm: syz.5.1536)
[  682.327226][ T6001] team0 (unregistering): Port device team_slave_1 removed
[  682.385306][ T6001] team0 (unregistering): Port device team_slave_0 removed
[  685.985061][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  685.991430][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  686.126228][T11080] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.133516][T11080] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.144548][T11080] bridge_slave_0: entered allmulticast mode
[  686.167254][T11080] bridge_slave_0: entered promiscuous mode
[  686.179361][T11080] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.187752][T11080] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.195160][T11080] bridge_slave_1: entered allmulticast mode
[  686.202384][T11080] bridge_slave_1: entered promiscuous mode
[  686.352132][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.367881][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.584710][T11214] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1539'.
[  686.694327][T11080] team0: Port device team_slave_0 added
[  686.805134][T11080] team0: Port device team_slave_1 added
[  687.347364][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.530605][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.341237][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.418181][T11237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1545'.
[  689.106146][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  689.124093][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  689.150183][    C0] vkms_vblank_simulate: vblank timer overrun
[  689.181842][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.583975][T11080] hsr_slave_0: entered promiscuous mode
[  690.751083][T11080] hsr_slave_1: entered promiscuous mode
[  692.195073][T11260] mkiss: ax0: crc mode is auto.
[  692.319226][T11080] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  692.330364][T11080] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  693.244709][T11080] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  693.671701][T11080] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  695.083701][T11080] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.386146][T11080] 8021q: adding VLAN 0 to HW filter on device team0
[  696.410259][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.417499][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.014618][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.021774][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state
[  700.006630][T11308] trusted_key: syz.1.1563 sent an empty control message without MSG_MORE.
[  701.105653][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.778401][T11080] veth0_vlan: entered promiscuous mode
[  705.019072][T11080] veth1_vlan: entered promiscuous mode
[  705.714564][T11080] veth0_macvtap: entered promiscuous mode
[  705.767350][T11080] veth1_macvtap: entered promiscuous mode
[  705.864922][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.944675][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.954574][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.044820][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.090279][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.114324][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.183835][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.254955][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.329996][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.346919][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  706.560071][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.697079][T11080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.333598][T11080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.346862][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.367284][T11080] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.417680][T11080] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.448176][T11080] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.474971][T11080] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.488354][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  709.514938][ T6005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.522835][ T6005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.985427][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  710.993326][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  711.448795][T11396] befs: (nullb0): No write support. Marking filesystem read-only
[  711.461767][T11396] befs: (nullb0): invalid magic header
[  713.481899][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'.
[  713.985088][T11407] capability: warning: `syz.5.1589' uses 32-bit capabilities (legacy support in use)
[  719.396465][T11460] x_tables: unsorted underflow at hook 3
[  719.493928][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1605'.
[  727.592391][T11504] netlink: 'syz.4.1617': attribute type 21 has an invalid length.
[  727.771710][T11508] delete_channel: no stack
[  729.456690][T11524] 
: renamed from ipvlan1
[  734.418561][T11551] lo speed is unknown, defaulting to 1000
[  734.425527][T11551] lo speed is unknown, defaulting to 1000
[  737.663297][T11566] netlink: 'syz.1.1634': attribute type 19 has an invalid length.
[  737.741906][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'.
[  738.400752][T11569] dvmrp8: entered allmulticast mode
[  739.195924][   T82] net_ratelimit: 23 callbacks suppressed
[  739.195949][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.871325][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.646694][T10901] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  741.655999][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.000186][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'.
[  742.021399][T11608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'.
[  742.816334][T11610] xt_l2tp: invalid flags combination: 4
[  744.053307][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.305601][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.313772][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.388387][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  744.403181][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  744.420463][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  744.495895][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  744.505720][ T5827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  744.513446][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  744.886628][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.892743][T11620] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  745.137455][T11623] overlayfs: missing 'lowerdir'
[  745.273555][T11611] lo speed is unknown, defaulting to 1000
[  746.125177][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  746.154886][T11611] lo speed is unknown, defaulting to 1000
[  747.309767][ T5827] Bluetooth: hci5: command tx timeout
[  747.323410][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.817273][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  747.823675][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  748.044435][T11641] netlink: 'syz.2.1657': attribute type 39 has an invalid length.
[  749.324949][ T5827] Bluetooth: hci5: command tx timeout
[  749.933112][T11668] overlayfs: failed to clone upperpath
[  750.673340][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.681553][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.690527][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.698684][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  751.413507][ T5827] Bluetooth: hci5: command tx timeout
[  751.516681][ T5827] Bluetooth: hci1: unexpected event for opcode 0x041b
[  751.906408][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.242693][T11679] program syz.7.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  753.171372][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.042154][ T5827] Bluetooth: hci5: command tx timeout
[  754.176606][T11611] chnl_net:caif_netlink_parms(): no params data found
[  756.500482][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.527719][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  756.535912][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.016199][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.707707][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.855497][T11712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1670'.
[  758.941235][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  759.164108][T11611] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.175039][T11611] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.183640][T11611] bridge_slave_0: entered allmulticast mode
[  759.191578][T11611] bridge_slave_0: entered promiscuous mode
[  759.199840][T11611] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.207190][T11611] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.214503][T11611] bridge_slave_1: entered allmulticast mode
[  759.221705][T11611] bridge_slave_1: entered promiscuous mode
[  760.466470][T11611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.917919][T11611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  762.267864][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.276113][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.285520][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.738639][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  763.259985][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.268880][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.281182][T11611] team0: Port device team_slave_0 added
[  763.753349][T11611] team0: Port device team_slave_1 added
[  764.741506][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  766.122524][T11611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  766.136631][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.193671][T11611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  767.221631][T11611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  767.274649][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  767.360715][T11611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  768.587460][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.613074][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.622138][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.920349][T11611] hsr_slave_0: entered promiscuous mode
[  768.984651][T11611] hsr_slave_1: entered promiscuous mode
[  769.714367][   T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.723259][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.771968][T11611] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  770.079129][T11611] Cannot create hsr debugfs directory
[  770.451951][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.413275][T11802] 0: reclassify loop, rule prio 0, protocol 800
[  774.444952][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  775.007315][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.025095][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.034150][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.395614][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.407353][T11611] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  775.430986][T11611] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  775.697039][T11611] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  775.705733][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.506857][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.281725][T11611] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  778.575786][T11825] overlayfs: missing 'lowerdir'
[  778.667152][T11611] 8021q: adding VLAN 0 to HW filter on device bond0
[  778.686253][T11611] 8021q: adding VLAN 0 to HW filter on device team0
[  778.716274][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.723406][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  778.742342][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.749584][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.804060][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.813616][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.821770][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.553721][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  781.573461][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  782.605955][T11377] 0: reclassify loop, rule prio 0, protocol 800
[  782.658372][T11377] 0: reclassify loop, rule prio 0, protocol 800
[  782.889477][T11611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  784.122655][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  785.935957][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  786.469117][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.481886][T11611] veth0_vlan: entered promiscuous mode
[  787.558533][T11611] veth1_vlan: entered promiscuous mode
[  787.565097][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.574003][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  787.594533][T11611] veth0_macvtap: entered promiscuous mode
[  787.688178][T11611] veth1_macvtap: entered promiscuous mode
[  788.686767][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.704691][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  789.703588][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.714624][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.092518][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  790.144960][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.193866][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  790.712981][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.721290][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.732227][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  790.794801][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  790.841151][T11611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.005257][T10901] Bluetooth: hci4: command 0x0406 tx timeout
[  791.056094][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  791.083259][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.073567][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.080183][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.111195][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.133158][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.254388][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  792.373476][ T5909] 0: reclassify loop, rule prio 0, protocol 800
[  792.380392][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.390463][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.400943][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.411938][T11611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.446518][T11611] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.130780][T11611] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.139717][T11611] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.148799][T11611] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.163855][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  793.708301][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.853452][ T5993] 0: reclassify loop, rule prio 0, protocol 800
[  794.863508][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.875383][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.413190][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.558688][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.854791][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.546096][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  796.674958][   T47] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  797.154802][   T47] usb 5-1: Using ep0 maxpacket: 32
[  797.335795][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  797.353961][   T47] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  797.514677][   T47] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  797.621086][   T47] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  797.689921][   T47] usb 5-1: Product: syz
[  797.695737][   T47] usb 5-1: Manufacturer: syz
[  797.731171][   T47] usb 5-1: SerialNumber: syz
[  797.771490][   T47] usb 5-1: config 0 descriptor??
[  797.779925][T11944] xt_bpf: check failed: parse error
[  797.801036][T11929] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  797.876098][T11939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  797.884189][T11939] IPv6: NLM_F_CREATE should be set when creating new route
[  798.077806][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.247904][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.256166][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.658550][    T8] usb 5-1: USB disconnect, device number 9
[  799.780360][T11943] lo: entered allmulticast mode
[  799.881266][T11943] tunl0: entered allmulticast mode
[  800.071080][T11955] syz.8.1732: attempt to access beyond end of device
[  800.071080][T11955] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  800.073637][T11943] gre0: entered allmulticast mode
[  800.705393][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  800.716062][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.789240][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1733'.
[  802.258596][ T5909] 0: reclassify loop, rule prio 0, protocol 800
[  802.294879][T11943] gretap0: entered allmulticast mode
[  802.392434][T11943] erspan0: entered allmulticast mode
[  802.441084][T11943] ip_vti0: entered allmulticast mode
[  802.448090][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  802.482170][T11943] ip6_vti0: entered allmulticast mode
[  802.555226][T11943] sit0: entered allmulticast mode
[  802.663726][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  802.682125][T11943] ip6tnl0: entered allmulticast mode
[  802.701363][T11943] ip6gre0: entered allmulticast mode
[  803.640719][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.650036][T11943] syz_tun: entered allmulticast mode
[  803.660167][T11943] ip6gretap0: entered allmulticast mode
[  803.672944][T11943] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.680409][T11943] bridge0: port 1(bridge_slave_0) entered disabled state
[  803.777887][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.794969][    T8] usb 5-1: Using ep0 maxpacket: 8
[  803.802561][T11943] bridge0: entered allmulticast mode
[  803.818525][    T8] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  803.843979][    T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  803.854333][T11943] vcan0: entered allmulticast mode
[  803.885697][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  803.896495][T11943] bond0: entered allmulticast mode
[  803.920562][T11943] bond_slave_0: entered allmulticast mode
[  803.974738][    T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  804.002708][T11943] bond_slave_1: entered allmulticast mode
[  804.025859][    T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  804.054309][T11943] team0: entered allmulticast mode
[  804.071952][T11943] team_slave_0: entered allmulticast mode
[  804.084612][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  804.104104][T11943] team_slave_1: entered allmulticast mode
[  804.119132][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.150953][T11943] dummy0: entered allmulticast mode
[  804.194738][T11943] nlmon0: entered allmulticast mode
[  804.216575][T11943] caif0: entered allmulticast mode
[  804.253798][T11943] batadv0: entered allmulticast mode
[  804.262631][T11943] vxcan0: entered allmulticast mode
[  804.270641][T11943] vxcan1: entered allmulticast mode
[  804.277649][T11943] veth0: entered allmulticast mode
[  804.285220][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.285367][T11943] veth1: entered allmulticast mode
[  804.347235][T11943] wg1: entered allmulticast mode
[  804.529204][T11943] wg2: entered allmulticast mode
[  804.540768][    T8] usb 5-1: usb_control_msg returned -32
[  804.548914][T11943] veth0_to_bridge: entered allmulticast mode
[  804.563893][    T8] usbtmc 5-1:16.0: can't read capabilities
[  804.578917][T11943] veth1_to_bridge: entered allmulticast mode
[  804.601722][T11943] veth0_to_bond: entered allmulticast mode
[  805.097577][T11943] veth1_to_bond: entered allmulticast mode
[  805.127127][T11943] veth0_to_team: entered allmulticast mode
[  805.192410][T11943] veth1_to_team: entered allmulticast mode
[  805.202260][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.222163][T11943] veth0_to_batadv: entered allmulticast mode
[  805.232364][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.248817][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  805.266952][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.276363][T11943] batadv_slave_0: entered allmulticast mode
[  805.293244][T11943] veth1_to_batadv: entered allmulticast mode
[  805.305297][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.320543][T11943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  805.325383][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.345753][T11943] batadv_slave_1: entered allmulticast mode
[  805.346046][T11999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.384804][T11943] xfrm0: entered allmulticast mode
[  805.411275][T11943] veth0_to_hsr: entered allmulticast mode
[  805.430022][T11943] hsr_slave_0: entered allmulticast mode
[  805.455293][T11943] veth1_to_hsr: entered allmulticast mode
[  805.469330][T11943] hsr_slave_1: entered allmulticast mode
[  805.478591][T11943] hsr0: entered allmulticast mode
[  805.487047][T11943] veth1_virt_wifi: entered allmulticast mode
[  805.496014][T11943] veth0_virt_wifi: entered allmulticast mode
[  805.505655][T11943] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  805.514078][T11943] veth1_vlan: entered allmulticast mode
[  805.522608][T11943] veth0_vlan: entered allmulticast mode
[  805.538742][T11943] vlan0: entered allmulticast mode
[  805.544432][T11943] vlan1: entered allmulticast mode
[  805.555147][T11943] macvlan0: entered allmulticast mode
[  805.573153][T11943] macvlan1: entered allmulticast mode
[  805.597807][T11943] ipvlan0: entered allmulticast mode
[  805.621434][T11943] ipvlan1: entered allmulticast mode
[  805.645408][T11943] veth1_macvtap: entered allmulticast mode
[  805.668796][T11943] veth0_macvtap: entered allmulticast mode
[  805.695490][T11943] macvtap0: entered allmulticast mode
[  805.712952][T11943] macsec0: entered allmulticast mode
[  805.725078][T11943] geneve0: entered allmulticast mode
[  805.732964][T11943] tipc: Resetting bearer <eth:geneve1>
[  805.757510][T11943] geneve1: entered allmulticast mode
[  805.766412][T11943] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  805.783879][T11943] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  805.802354][T11943] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  805.834957][T11943] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  805.879557][T11943] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  805.936629][T11943] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  805.959660][T11943] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  805.976140][T11943] veth2: entered allmulticast mode
[  805.991726][T11943] veth3: entered allmulticast mode
[  805.999168][T11943] ipvlan2: left promiscuous mode
[  806.014848][T11943] ipvlan2: entered allmulticast mode
[  806.026729][T11943] batadv1: entered allmulticast mode
[  806.032278][T11943] bond1: entered allmulticast mode
[  806.068527][T11943] veth4: entered allmulticast mode
[  806.074131][T11943] veth5: entered allmulticast mode
[  806.085345][T11943] bridge1: entered allmulticast mode
[  806.098567][T11943] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.116909][T11943] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.144350][T11943] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.156847][T11943] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  806.166382][T11943] geneve2: entered allmulticast mode
[  806.183029][T11943] hsr1: entered allmulticast mode
[  806.200471][T11943] : entered allmulticast mode
[  806.212594][T11943] sit1: entered allmulticast mode
[  806.225451][T11943] mac80211_hwsim hwsim19 wlan2: entered allmulticast mode
[  806.244445][T11943] sit2: entered allmulticast mode
[  807.536724][T11991] usb 5-1: USB disconnect, device number 10
[  807.557015][ T6010] net_ratelimit: 1020 callbacks suppressed
[  807.557038][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  807.694026][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1742'.
[  807.869427][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1742'.
[  808.405048][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.901324][T12027] 0: reclassify loop, rule prio 0, protocol 800
[  808.925455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  809.652193][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  809.974700][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  810.122245][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.130826][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.416292][T11978] 0: reclassify loop, rule prio 0, protocol 800
[  811.430387][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.434226][ T6010] 0: reclassify loop, rule prio 0, protocol 800
[  811.892374][T12040] Bluetooth: MGMT ver 1.23
[  813.335523][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.056740][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.895848][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.909302][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.034952][T12070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.043874][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.165533][ T6010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.175071][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  817.946184][T12079] 0: reclassify loop, rule prio 0, protocol 800
[  817.957596][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.160287][T12076] Process accounting resumed
[  819.098037][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.275749][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.284192][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.382457][T12093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1764'.
[  819.389894][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.849513][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.871609][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.880147][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.891226][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.929596][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.974910][T12094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.030725][T12123] netfs: Couldn't get user pages (rc=-14)
[  824.079579][T12123] netfs: Zero-sized read [R=a]
[  824.566015][T12129] --map-set only usable from mangle table
[  824.847220][ T4791] net_ratelimit: 1022 callbacks suppressed
[  824.847243][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.486347][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.793398][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.034040][T12137] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  827.405493][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  828.207037][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  829.327813][   T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  829.335699][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  830.609891][T12005] 0: reclassify loop, rule prio 0, protocol 800
[  830.615596][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.765371][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.421490][T12163] kvm: kvm [12162]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000
[  832.431665][T12163] kvm: kvm [12162]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  832.503312][T12169] netlink: 'syz.1.1785': attribute type 4 has an invalid length.
[  832.524257][ T5872] lo speed is unknown, defaulting to 1000
[  833.146052][T12163] kvm: kvm [12162]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  833.166877][T12163] kvm: kvm [12162]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  833.189124][T12163] kvm: kvm [12162]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111
[  833.230082][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.248938][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.328754][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  834.694726][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1787'.
[  835.291818][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.344722][T12005] 0: reclassify loop, rule prio 0, protocol 800
[  835.782855][T10901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  835.800909][T10901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  835.820470][T10901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  835.834174][T10901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  835.846624][T10901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  835.853961][T10901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  836.003960][T12185] IPv6: sit1: Disabled Multicast RS
[  836.370441][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.379761][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.475781][T12181] lo speed is unknown, defaulting to 1000
[  837.884896][ T5827] Bluetooth: hci3: command tx timeout
[  838.369224][T12181] chnl_net:caif_netlink_parms(): no params data found
[  838.925957][ T6015] 0: reclassify loop, rule prio 0, protocol 800
[  838.933309][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  838.942066][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  839.070573][T12181] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.078066][T12181] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.095419][T12181] bridge_slave_0: entered allmulticast mode
[  839.116067][T12181] bridge_slave_0: entered promiscuous mode
[  839.163872][T12181] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.242218][T12181] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.282975][T12181] bridge_slave_1: entered allmulticast mode
[  839.300949][T12181] bridge_slave_1: entered promiscuous mode
[  839.576473][T12005] 0: reclassify loop, rule prio 0, protocol 800
[  839.975366][ T5827] Bluetooth: hci3: command tx timeout
[  840.635182][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.682315][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.775531][T12208] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  840.808722][T12181] team0: Port device team_slave_0 added
[  840.845906][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.409594][T12181] team0: Port device team_slave_1 added
[  841.487900][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  841.953652][T12181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.977901][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.055667][ T5827] Bluetooth: hci3: command tx timeout
[  842.100194][T12181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.125547][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.134212][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.162233][T12181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.173883][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.216816][T12217] 9pnet_fd: Insufficient options for proto=fd
[  842.244837][T12181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.476951][T12222] syz.7.1798: attempt to access beyond end of device
[  842.476951][T12222] nbd7: rw=0, sector=2, nr_sectors = 2 limit=0
[  842.496140][T12222] syz.7.1798: attempt to access beyond end of device
[  842.496140][T12222] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0
[  842.656033][T12222] syz.7.1798: attempt to access beyond end of device
[  842.656033][T12222] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0
[  842.780633][T12222] syz.7.1798: attempt to access beyond end of device
[  842.780633][T12222] nbd7: rw=0, sector=18, nr_sectors = 2 limit=0
[  842.913330][T12222] syz.7.1798: attempt to access beyond end of device
[  842.913330][T12222] nbd7: rw=0, sector=30, nr_sectors = 2 limit=0
[  842.920091][T12181] hsr_slave_0: entered promiscuous mode
[  842.944985][T12222] syz.7.1798: attempt to access beyond end of device
[  842.944985][T12222] nbd7: rw=0, sector=36, nr_sectors = 2 limit=0
[  843.006331][T12181] hsr_slave_1: entered promiscuous mode
[  843.012770][T12181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  843.020552][T12181] Cannot create hsr debugfs directory
[  844.119355][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.127666][ T5827] Bluetooth: hci3: command tx timeout
[  844.434422][ T5993] Bluetooth: hci6: Frame reassembly failed (-84)
[  845.198842][T12005] 0: reclassify loop, rule prio 0, protocol 800
[  845.219965][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  845.228996][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  845.840090][T12232] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  845.885244][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  846.084021][T12181] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  846.098337][T12181] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  846.156328][T12181] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  846.172573][T12181] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  846.455036][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  846.462007][T10901] Bluetooth: hci6: command 0x1003 tx timeout
[  847.329652][T12256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.119213][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.127988][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  848.136745][ T6005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.454376][ T6007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.462599][ T4791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  850.463053][ T5993] 0: reclassify loop, rule prio 0, protocol 800
[  850.472135][T12181] 8021q: adding VLAN 0 to HW filter on device bond0
[  850.942587][T12181] 8021q: adding VLAN 0 to HW filter on device team0
[  851.086056][ T6005] 0: reclassify loop, rule prio 0, protocol 800
[  851.274173][T12268] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1812'.
[  851.307340][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state
[  851.314487][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  851.603208][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state
[  851.610397][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  851.752654][ T5993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  851.939044][T12181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  853.244396][T12181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  853.297324][T12278] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  853.646306][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.657325][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  853.665489][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.107888][T12287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  854.968333][T12289] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  856.061352][   T82] 0: reclassify loop, rule prio 0, protocol 800
[  856.851234][ T5993] 0: reclassify loop, rule prio 0, protocol 800
[  858.664210][T12315] xt_CT: No such helper "snmp_trap"
[  859.635044][T12181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  859.917146][T12331] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.1827'.
[  859.929122][T12331] xt_hashlimit: Unknown mode mask 100000, kernel too old?
[  862.055631][ T6015] 0: reclassify loop, rule prio 0, protocol 800
[  862.919356][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  866.344081][T12181] veth0_vlan: entered promiscuous mode
[  866.428209][T12181] veth1_vlan: entered promiscuous mode
[  867.291309][T10901] Bluetooth: hci5: command 0x0406 tx timeout
[  867.317053][T12181] veth0_macvtap: entered promiscuous mode
[  867.353260][T12181] veth1_macvtap: entered promiscuous mode
[  867.508111][T12386] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  867.729276][ T5993] 0: reclassify loop, rule prio 0, protocol 800
[  867.824982][T12388] Bluetooth: MGMT ver 1.23
[  867.826636][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.954780][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  867.965175][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  867.974750][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.012616][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.147143][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.183539][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.204399][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  868.221597][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.283579][T12181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.307218][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.328363][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.351627][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.389552][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.410046][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.439696][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.464779][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.521144][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.664466][T12181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.691018][T12181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.710887][T12181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.754890][T12181] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.894926][T12181] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  869.211335][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.249360][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.393914][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.402553][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.306858][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  870.324419][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  872.881028][T12400] 0: reclassify loop, rule prio 0, protocol 800
[  873.133330][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  877.943101][T12455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  879.885459][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  879.892650][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  885.488188][T12510] netlink: 'syz.8.1870': attribute type 5 has an invalid length.
[  885.726283][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  885.732667][ T6015] 0: reclassify loop, rule prio 0, protocol 800
[  885.995787][T12510] : entered promiscuous mode
[  890.101966][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1876'.
[  891.493246][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  891.521824][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  892.149258][T12547] loop6: detected capacity change from 0 to 524287999
[  892.178117][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.187434][    C0] buffer_io_error: 7 callbacks suppressed
[  892.187451][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  892.203819][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.213146][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  892.262206][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.271471][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  892.280986][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  892.290339][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.076322][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.085665][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.355779][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.364992][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.385467][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.394702][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.402708][T12547] ldm_validate_partition_table(): Disk read failed.
[  894.414594][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.423752][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.494819][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.504020][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.533028][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  894.542309][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  894.634800][T12547] Dev loop6: unable to read RDB block 0
[  894.647427][T12547]  loop6: unable to read partition table
[  894.653524][T12547] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  897.574701][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  897.823834][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  899.325581][T12604] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.1894'.
[  903.141630][   T11] 0: reclassify loop, rule prio 0, protocol 800
[  904.142228][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  905.994712][T11978] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  906.018313][T12639] 0: reclassify loop, rule prio 0, protocol 800
[  906.204982][T11978] usb 9-1: Using ep0 maxpacket: 16
[  906.377062][T11978] usb 9-1: config 1 interface 0 has no altsetting 0
[  907.094823][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  907.456477][T11978] usb 9-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40
[  907.492091][T11978] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.504569][T11978] usb 9-1: Product: 퓬
[  907.510673][T11978] usb 9-1: SerialNumber: à°š
[  907.544901][T11978] usb 9-1: can't set config #1, error -71
[  907.557559][T11978] usb 9-1: USB disconnect, device number 2
[  907.841628][ T5827] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection
[  908.876642][ T6015] 0: reclassify loop, rule prio 0, protocol 800
[  909.549836][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  912.433583][T12674] 
: renamed from ipvlan1
[  914.584083][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  915.094997][   T11] 0: reclassify loop, rule prio 0, protocol 800
[  915.827400][T12699] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  915.913462][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.079060][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.108701][T12703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1924'.
[  916.507727][T12698] overlayfs: conflicting options: verity=on,redirect_dir=nofollow
[  919.464110][    T8] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  919.465670][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1929'.
[  920.264693][    T8] usb 9-1: Using ep0 maxpacket: 16
[  920.336412][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.512825][    T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  920.526227][    T8] usb 9-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  920.535762][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.556051][    T8] usb 9-1: config 0 descriptor??
[  920.676906][T12743] lo: entered allmulticast mode
[  920.858010][ T1161] 0: reclassify loop, rule prio 0, protocol 800
[  920.865170][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  921.669595][    T8] usbhid 9-1:0.0: can't add hid device: -71
[  921.680133][    T8] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  921.995179][    T8] usb 9-1: USB disconnect, device number 3
[  926.834369][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  926.840894][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  931.866452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  931.872804][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  932.270146][T12819] xt_l2tp: invalid flags combination: c
[  932.380235][ T6001] 0: reclassify loop, rule prio 0, protocol 800
[  932.665252][   T11] 0: reclassify loop, rule prio 0, protocol 800
[  933.108558][T12824] kAFS: unable to lookup cell ''
[  934.059033][T12823] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  937.810244][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  938.607058][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  943.105357][T12877] 8021q: adding VLAN 0 to HW filter on device bond0
[  943.151290][T12877] bond0: (slave rose0): Enslaving as an active interface with an up link
[  943.886055][   T11] 0: reclassify loop, rule prio 0, protocol 800
[  943.892798][   T11] 0: reclassify loop, rule prio 0, protocol 800
[  947.614987][T12917] veth1_to_bond: entered allmulticast mode
[  947.649301][T12917] veth1_to_bond: entered promiscuous mode
[  948.469230][T12916] veth1_to_bond: left promiscuous mode
[  948.644983][T12916] veth1_to_bond: left allmulticast mode
[  949.173434][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  949.272765][ T1161] 0: reclassify loop, rule prio 0, protocol 800
[  950.971153][T10901] block nbd7: Receive control failed (result -32)
[  951.005350][T12943] block nbd7: shutting down sockets
[  952.269500][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  952.280049][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  952.288495][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  952.297500][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  952.388811][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  952.396560][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  952.596873][T12954] lo speed is unknown, defaulting to 1000
[  953.289853][T12954] chnl_net:caif_netlink_parms(): no params data found
[  954.445211][T10901] Bluetooth: hci0: command tx timeout
[  955.240229][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  955.249050][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  956.314760][T13011] netlink: 'syz.4.1992': attribute type 12 has an invalid length.
[  956.467773][T12954] bridge0: port 1(bridge_slave_0) entered blocking state
[  956.492824][T12954] bridge0: port 1(bridge_slave_0) entered disabled state
[  956.546439][T12954] bridge_slave_0: entered allmulticast mode
[  956.584839][T10901] Bluetooth: hci0: command 0x041b tx timeout
[  956.663438][T12954] bridge_slave_0: entered promiscuous mode
[  957.156700][T12954] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.163843][T12954] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.297447][T12954] bridge_slave_1: entered allmulticast mode
[  957.307432][T12954] bridge_slave_1: entered promiscuous mode
[  957.326534][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  957.491028][T12954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  959.087746][T12954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  959.903664][T10901] Bluetooth: hci0: command 0x041b tx timeout
[  959.922172][T10901] Bluetooth: hci3: command 0x0406 tx timeout
[  960.059312][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1999'.
[  960.522377][ T6007] 0: reclassify loop, rule prio 0, protocol 800
[  960.524604][T12954] team0: Port device team_slave_0 added
[  960.542424][    T8] IPVS: starting estimator thread 0...
[  960.568175][T12954] team0: Port device team_slave_1 added
[  960.655420][T13044] IPVS: using max 18 ests per chain, 43200 per kthread
[  960.728064][T12954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  960.744883][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  960.919949][T12954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  961.327603][ T1161] 0: reclassify loop, rule prio 0, protocol 800
[  961.368797][T12954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.554678][T12954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.581667][T12954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.979944][ T5827] Bluetooth: hci0: command 0x041b tx timeout
[  962.138659][T12954] hsr_slave_0: entered promiscuous mode
[  962.279714][T12954] hsr_slave_1: entered promiscuous mode
[  962.305388][T12954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  962.313012][T12954] Cannot create hsr debugfs directory
[  963.709341][T13076] overlayfs: failed to clone lowerpath
[  963.951875][T13078] overlayfs: failed to clone upperpath
[  964.045060][ T5827] Bluetooth: hci0: command 0x041b tx timeout
[  965.444026][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2013'.
[  965.466797][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2013'.
[  965.570101][T12004] IPVS: starting estimator thread 0...
[  965.735539][T13099] IPVS: using max 18 ests per chain, 43200 per kthread
[  966.285154][T12400] 0: reclassify loop, rule prio 0, protocol 800
[  966.905945][   T29] audit: type=1326 audit(2000000461.790:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13103 comm="syz.9.2018" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff503b8cda9 code=0x0
[  967.571599][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  967.599471][T12954] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  968.334096][T12954] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  968.346359][T12954] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  969.930840][T12954] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  972.428761][   T67] 0: reclassify loop, rule prio 0, protocol 800
[  972.692189][T12954] 8021q: adding VLAN 0 to HW filter on device bond0
[  972.800738][T12954] 8021q: adding VLAN 0 to HW filter on device team0
[  973.861360][ T4791] 0: reclassify loop, rule prio 0, protocol 800
[  973.965027][   T30] INFO: task syz.2.1764:12093 blocked for more than 144 seconds.
[  973.972826][   T30]       Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  974.955457][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  974.962664][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  975.156234][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  975.187586][   T30] task:syz.2.1764      state:D stack:24568 pid:12093 tgid:12091 ppid:5829   task_flags:0x400140 flags:0x00004004
[  975.591909][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  975.599148][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  975.964743][   T30] Call Trace:
[  975.970169][   T30]  <TASK>
[  975.982448][   T30]  __schedule+0x18bc/0x4c40
[  975.998799][   T30]  ? __pfx___schedule+0x10/0x10
[  976.039777][   T30]  ? __pfx_lock_release+0x10/0x10
[  976.051958][   T30]  ? schedule+0x90/0x320
[  976.064393][   T30]  schedule+0x14b/0x320
[  976.072637][   T30]  schedule_timeout+0xb0/0x290
[  976.077758][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  976.083344][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  976.089742][   T30]  ? wait_for_completion+0x2fe/0x620
[  976.095331][   T30]  ? wait_for_completion+0x2fe/0x620
[  976.100777][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  976.107463][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  976.124598][   T30]  ? wait_for_completion+0x2fe/0x620
[  976.130068][   T30]  wait_for_completion+0x355/0x620
[  976.141731][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  976.156030][   T30]  ? remove_client_context+0xc0/0x1e0
[  976.167148][   T30]  disable_device+0x1c7/0x360
[  976.172509][   T30]  ? __pfx_disable_device+0x10/0x10
[  976.186479][   T30]  __ib_unregister_device+0x2ac/0x3d0
[  976.198843][   T30]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  976.214931][   T30]  ib_unregister_device_and_put+0xb9/0xf0
[  976.224217][   T30]  nldev_dellink+0x2c6/0x310
[  976.233524][   T30]  ? __pfx_nldev_dellink+0x10/0x10
[  976.242900][   T30]  ? rcu_is_watching+0x15/0xb0
[  976.247878][   T30]  ? cap_capable+0x139/0x450
[  976.254549][   T30]  ? safesetid_security_capable+0xb2/0x1d0
[  976.267357][   T30]  ? safesetid_security_capable+0xb2/0x1d0
[  976.284629][   T30]  ? bpf_lsm_capable+0x9/0x10
[  976.289476][   T30]  ? security_capable+0x7e/0x2d0
[  976.303476][   T30]  ? __pfx_nldev_dellink+0x10/0x10
[  976.312525][   T30]  rdma_nl_rcv+0x6dd/0x9e0
[  976.322114][   T30]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  976.332919][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  976.344272][   T30]  netlink_unicast+0x7f6/0x990
[  976.354545][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  976.368481][   T30]  ? __virt_addr_valid+0x45f/0x530
[  976.381955][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  976.394554][   T30]  ? __check_object_size+0x47a/0x730
[  976.406043][T12954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  976.412972][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  976.420399][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  976.431625][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  976.443218][   T30]  __sock_sendmsg+0x221/0x270
[  976.462111][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  976.472611][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  976.484128][   T30]  ? __fget_files+0x2a/0x410
[  976.494098][   T30]  ? __fget_files+0x2a/0x410
[  976.498984][   T30]  __sys_sendmsg+0x269/0x350
[  976.503769][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  976.507917][T12954] veth0_vlan: entered promiscuous mode
[  976.509536][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  976.521097][   T30]  ? do_syscall_64+0x100/0x230
[  976.531756][   T30]  ? do_syscall_64+0xb6/0x230
[  976.536691][   T30]  do_syscall_64+0xf3/0x230
[  976.539375][T12954] veth1_vlan: entered promiscuous mode
[  976.541427][   T30]  ? clear_bhb_loop+0x35/0x90
[  976.551745][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.557995][   T30] RIP: 0033:0x7f7ecb78cda9
[  976.563306][   T30] RSP: 002b:00007f7ecc510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  976.572051][   T30] RAX: ffffffffffffffda RBX: 00007f7ecb9a5fa0 RCX: 00007f7ecb78cda9
[  976.589731][   T30] RDX: 0000000000000840 RSI: 00000000200002c0 RDI: 0000000000000003
[  976.591896][T12954] veth0_macvtap: entered promiscuous mode
[  976.603606][   T30] RBP: 00007f7ecb80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  976.611910][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  976.621124][   T30] R13: 0000000000000000 R14: 00007f7ecb9a5fa0 R15: 00007fff6b8e8b28
[  976.623396][T12954] veth1_macvtap: entered promiscuous mode
[  976.629831][   T30]  </TASK>
[  976.642113][   T30] 
[  976.642113][   T30] Showing all locks held in the system:
[  976.792673][   T30] 1 lock held by khungtaskd/30:
[  976.826584][   T30]  #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  976.836311][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.844728][   T30] 3 locks held by kworker/u8:4/67:
[  976.852187][   T30] 2 locks held by getty/5585:
[  976.853003][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.857195][   T30]  #0: ffff8880316cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  976.877277][   T30]  #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  976.883228][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.887626][   T30] 3 locks held by kworker/u8:16/6015:
[  976.887645][   T30]  #0: ffff8880309be948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  976.887721][   T30]  #1: ffffc90004af7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  976.887786][   T30]  #2: ffffffff8fcadf08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0
[  976.938272][   T30] 7 locks held by kworker/1:14/12003:
[  976.938380][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  976.943741][   T30]  #0: ffff8880b873e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  976.963887][   T30]  #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0
[  976.970271][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  976.975939][   T30]  #2: ffff8880b872a398 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x24a/0x10e0
[  976.996155][   T30]  #3: ffffffff9a59dca0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580
[  977.001089][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.009616][   T30]  #4: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x61d/0x1780
[  977.027036][   T30]  #5: ffff8880b87400a0 (&list->lock#5){..-.}-{3:3}, at: process_backlog+0xbc8/0x15b0
[  977.037215][   T30]  #6: ffffffff9a685a08 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580
[  977.044890][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  977.055973][   T30] 3 locks held by kworker/1:16/12005:
[  977.058652][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.074668][   T30]  #0: ffff88801ac80d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  977.085986][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  977.098162][   T30]  #1: ffffc90004a3fc60 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  977.109423][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.122733][T12954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  977.124074][   T30]  #2: ffff8880310a6240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130
[  977.135922][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  977.154962][   T30] 2 locks held by syz.2.1764/12093:
[  977.160224][   T30]  #0: ffffffff9a7887f8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0
[  977.166728][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.170460][   T30]  #1: ffff888061cd86c0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0
[  977.192196][   T30] 2 locks held by kworker/u8:1/12400:
[  977.194534][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  977.197714][   T30]  #0: ffff8880b873e7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  977.220076][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.230248][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  977.231108][   T30]  #1: 
[  977.240844][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.245165][   T30] ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0
[  977.253891][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  977.276254][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.280706][   T30] 8 locks held by syz-executor/12954:
[  977.286682][T12954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  977.302465][T12954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  977.306886][   T30] 
[  977.314239][T12954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  977.322671][   T30] =============================================
[  977.322671][   T30] 
[  977.336153][T12954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.347159][   T30] NMI backtrace for cpu 1
[  977.347177][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  977.347200][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  977.347212][   T30] Call Trace:
[  977.347220][   T30]  <TASK>
[  977.347229][   T30]  dump_stack_lvl+0x241/0x360
[  977.347270][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  977.347303][   T30]  ? __pfx__printk+0x10/0x10
[  977.347345][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  977.347374][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  977.347396][   T30]  ? _printk+0xd5/0x120
[  977.347431][   T30]  ? __pfx__printk+0x10/0x10
[  977.347461][   T30]  ? __wake_up_klogd+0xcc/0x110
[  977.347485][   T30]  ? __pfx__printk+0x10/0x10
[  977.347515][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  977.347542][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  977.347567][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  977.347593][   T30]  watchdog+0x1058/0x10a0
[  977.347620][   T30]  ? watchdog+0x1ea/0x10a0
[  977.347651][   T30]  ? __pfx_watchdog+0x10/0x10
[  977.347676][   T30]  kthread+0x7a9/0x920
[  977.347701][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347729][   T30]  ? __pfx_watchdog+0x10/0x10
[  977.347755][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347780][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347810][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347835][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  977.347859][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  977.347884][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347912][   T30]  ret_from_fork+0x4b/0x80
[  977.347935][   T30]  ? __pfx_kthread+0x10/0x10
[  977.347962][   T30]  ret_from_fork_asm+0x1a/0x30
[  977.347998][   T30]  </TASK>
[  977.348020][   T30] Sending NMI from CPU 1 to CPUs 0:
[  977.348125][T12954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.352436][    C0] NMI backtrace for cpu 0
[  977.352447][    C0] CPU: 0 UID: 0 PID: 12954 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  977.352466][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  977.352476][    C0] RIP: 0010:serial8250_console_write+0x1405/0x1e00
[  977.352503][    C0] Code: 41 08 dc 0f 94 c0 89 44 24 34 41 0f 95 c6 b8 0d 00 00 00 44 0f 44 e8 48 8b 44 24 78 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 0a 48 8b 7c 24 48 e8 9f ad b4 fc 45 88 f7 4c 8b 64 24 68 4d 01
[  977.352521][    C0] RSP: 0018:ffffc9001a9f5e40 EFLAGS: 00000046
[  977.352537][    C0] RAX: 1ffffffff34e1fcb RBX: 000000000000002a RCX: dffffc0000000000
[  977.352549][    C0] RDX: ffff888043b99e00 RSI: 0000000000000000 RDI: 0000000000000000
[  977.352560][    C0] RBP: ffffc9001a9f6010 R08: ffffffff856ec118 R09: 1ffff11004a4e046
[  977.352572][    C0] R10: dffffc0000000000 R11: ffffffff856eefe0 R12: 000000000000002a
[  977.352584][    C0] R13: 0000000000000020 R14: ffffffff9a40af01 R15: 0000000000000000
[  977.352595][    C0] FS:  000055555a7b6500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  977.352609][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  977.352620][    C0] CR2: 00007ff503d79178 CR3: 00000000437ca000 CR4: 00000000003526f0
[  977.352633][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  977.352643][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  977.352653][    C0] Call Trace:
[  977.352659][    C0]  <NMI>
[  977.352666][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  977.352684][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  977.352707][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  977.352724][    C0]  ? nmi_handle+0x2a/0x5a0
[  977.352754][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  977.352771][    C0]  ? nmi_handle+0x14f/0x5a0
[  977.352793][    C0]  ? nmi_handle+0x2a/0x5a0
[  977.352816][    C0]  ? serial8250_console_write+0x1405/0x1e00
[  977.352837][    C0]  ? default_do_nmi+0x63/0x160
[  977.352854][    C0]  ? exc_nmi+0x123/0x1f0
[  977.352869][    C0]  ? end_repeat_nmi+0xf/0x53
[  977.352893][    C0]  ? __pfx_io_serial_out+0x10/0x10
[  977.352915][    C0]  ? serial8250_console_write+0x13d8/0x1e00
[  977.352937][    C0]  ? serial8250_console_write+0x1405/0x1e00
[  977.352960][    C0]  ? serial8250_console_write+0x1405/0x1e00
[  977.352983][    C0]  ? serial8250_console_write+0x1405/0x1e00
[  977.353005][    C0]  </NMI>
[  977.353010][    C0]  <TASK>
[  977.353025][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  977.353047][    C0]  ? __pfx_lock_release+0x10/0x10
[  977.353067][    C0]  ? do_raw_spin_lock+0x14f/0x370
[  977.353087][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  977.353106][    C0]  ? console_flush_all+0x1a3/0xeb0
[  977.353121][    C0]  ? __pfx_univ8250_console_write+0x10/0x10
[  977.353140][    C0]  console_flush_all+0x869/0xeb0
[  977.353163][    C0]  ? mark_lock+0x9a/0x360
[  977.353187][    C0]  ? console_flush_all+0x1a3/0xeb0
[  977.353207][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  977.353230][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  977.353250][    C0]  ? printk_get_console_flush_type+0x1fe/0x4f0
[  977.353277][    C0]  console_unlock+0x14f/0x3b0
[  977.353303][    C0]  ? __pfx_console_unlock+0x10/0x10
[  977.353329][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  977.353349][    C0]  ? vprintk_emit+0x530/0xa10
[  977.353373][    C0]  vprintk_emit+0x730/0xa10
[  977.353398][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  977.353425][    C0]  ? __pfx_snprintf+0x10/0x10
[  977.353444][    C0]  ? read_word_at_a_time+0xe/0x20
[  977.353467][    C0]  ? sized_strscpy+0x9a/0x2b0
[  977.353492][    C0]  dev_vprintk_emit+0x2ae/0x330
[  977.353516][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  977.353542][    C0]  ? reacquire_held_locks+0x3eb/0x690
[  977.353570][    C0]  dev_printk_emit+0xdd/0x120
[  977.353596][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  977.353622][    C0]  ? __pfx_validate_chain+0x10/0x10
[  977.353645][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  977.353668][    C0]  __netdev_printk+0x3e0/0x4d0
[  977.353690][    C0]  netdev_info+0x122/0x170
[  977.353713][    C0]  ? __inet_bind+0x43f/0xbb0
[  977.353730][    C0]  ? __pfx_netdev_info+0x10/0x10
[  977.353760][    C0]  nsim_udp_tunnel_set_port+0x2af/0x460
[  977.353789][    C0]  __udp_tunnel_nic_device_sync+0xa1f/0x1380
[  977.353817][    C0]  ? __pfx___udp_tunnel_nic_device_sync+0x10/0x10
[  977.353840][    C0]  __udp_tunnel_nic_add_port+0xc15/0xee0
[  977.353864][    C0]  udp_tunnel_notify_add_rx_port+0x30a/0x4d0
[  977.353881][    C0]  ? udp_tunnel_notify_add_rx_port+0x190/0x4d0
[  977.353897][    C0]  ? __pfx_udp_tunnel_notify_add_rx_port+0x10/0x10
[  977.353916][    C0]  ? rcu_is_watching+0x15/0xb0
[  977.353943][    C0]  geneve_sock_add+0x647/0xbc0
[  977.353963][    C0]  ? __pfx_geneve_sock_add+0x10/0x10
[  977.353979][    C0]  ? ib_device_get_by_netdev+0x85/0x5e0
[  977.354000][    C0]  ? __pfx_hsr_netdev_notify+0x10/0x10
[  977.354023][    C0]  ? udp_tunnel_nic_netdevice_event+0x192/0x12f0
[  977.354043][    C0]  ? ip6_route_dev_notify+0x99/0x600
[  977.354068][    C0]  ? notifier_call_chain+0x15a/0x3f0
[  977.354088][    C0]  ? notifier_call_chain+0x3cc/0x3f0
[  977.354108][    C0]  geneve_open+0xe3/0x160
[  977.354124][    C0]  __dev_open+0x2d3/0x4a0
[  977.354163][    C0]  ? __pfx___dev_open+0x10/0x10
[  977.354183][    C0]  ? dev_set_rx_mode+0xb8/0x2e0
[  977.354205][    C0]  __dev_change_flags+0x1e2/0x6f0
[  977.354230][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  977.354251][    C0]  ? kasan_quarantine_put+0xdc/0x230
[  977.354271][    C0]  dev_change_flags+0x8b/0x1a0
[  977.354314][    C0]  do_setlink+0xc90/0x4210
[  977.354344][    C0]  ? __pfx_do_setlink+0x10/0x10
[  977.354371][    C0]  ? osq_unlock+0xae/0x320
[  977.354387][    C0]  ? __pfx_osq_unlock+0x10/0x10
[  977.354404][    C0]  ? rcu_is_watching+0x15/0xb0
[  977.354429][    C0]  ? trace_contention_end+0x3c/0x120
[  977.354454][    C0]  ? __mutex_lock+0x397/0x1010
[  977.354482][    C0]  ? rtnl_newlink+0xce2/0x2210
[  977.354506][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  977.354528][    C0]  ? safesetid_security_capable+0xb2/0x1d0
[  977.354555][    C0]  ? ns_capable+0x8a/0xf0
[  977.354571][    C0]  ? rtnl_link_get_net_capable+0x168/0x340
[  977.354594][    C0]  rtnl_newlink+0x1bb6/0x2210
[  977.354618][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  977.354636][    C0]  ? __netlink_deliver_tap+0x56b/0x7f0
[  977.354652][    C0]  ? __pfx_validate_chain+0x10/0x10
[  977.354675][    C0]  ? __sock_sendmsg+0x221/0x270
[  977.354694][    C0]  ? __sys_sendto+0x363/0x4c0
[  977.354716][    C0]  ? __x64_sys_sendto+0xde/0x100
[  977.354738][    C0]  ? do_syscall_64+0xf3/0x230
[  977.354758][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.354807][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  977.354830][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  977.354855][    C0]  ? mark_lock+0x9a/0x360
[  977.354879][    C0]  ? __lock_acquire+0x1397/0x2100
[  977.354916][    C0]  ? __pfx_lock_release+0x10/0x10
[  977.354938][    C0]  ? cap_capable+0x139/0x450
[  977.354965][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  977.354985][    C0]  rtnetlink_rcv_msg+0x791/0xcf0
[  977.355004][    C0]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  977.355025][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  977.355048][    C0]  ? ref_tracker_free+0x643/0x7e0
[  977.355072][    C0]  netlink_rcv_skb+0x1e3/0x430
[  977.355098][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  977.355118][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  977.355161][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  977.355188][    C0]  netlink_unicast+0x7f6/0x990
[  977.355216][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  977.355238][    C0]  ? __virt_addr_valid+0x45f/0x530
[  977.355262][    C0]  ? __phys_addr_symbol+0x2f/0x70
[  977.355285][    C0]  ? __check_object_size+0x47a/0x730
[  977.355308][    C0]  netlink_sendmsg+0x8e4/0xcb0
[  977.355331][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  977.355353][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  977.355368][    C0]  __sock_sendmsg+0x221/0x270
[  977.355390][    C0]  __sys_sendto+0x363/0x4c0
[  977.355419][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  977.355456][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  977.355479][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  977.355503][    C0]  __x64_sys_sendto+0xde/0x100
[  977.355529][    C0]  do_syscall_64+0xf3/0x230
[  977.355552][    C0]  ? clear_bhb_loop+0x35/0x90
[  977.355577][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.355600][    C0] RIP: 0033:0x7f419598ec3c
[  977.355615][    C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  977.355629][    C0] RSP: 002b:00007ffd53589fc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  977.355646][    C0] RAX: ffffffffffffffda RBX: 00007f41966d4620 RCX: 00007f419598ec3c
[  977.355659][    C0] RDX: 000000000000002c RSI: 00007f41966d4670 RDI: 0000000000000003
[  977.355669][    C0] RBP: 0000000000000000 R08: 00007ffd5358a014 R09: 000000000000000c
[  977.355680][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  977.355690][    C0] R13: 0000000000000000 R14: 00007f41966d4670 R15: 0000000000000000
[  977.355708][    C0]  </TASK>
[  977.356513][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  977.356528][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0
[  977.356551][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  977.356563][   T30] Call Trace:
[  977.356571][   T30]  <TASK>
[  977.356580][   T30]  dump_stack_lvl+0x241/0x360
[  977.356616][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  977.356647][   T30]  ? __pfx__printk+0x10/0x10
[  977.356675][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  977.356725][   T30]  ? vscnprintf+0x5d/0x90
[  977.356750][   T30]  panic+0x349/0x880
[  977.356782][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  977.356808][   T30]  ? __pfx_panic+0x10/0x10
[  977.356837][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  977.356894][   T30]  ? __irq_work_queue_local+0x137/0x410
[  977.356923][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  977.356953][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  977.356977][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  977.357005][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  977.357034][   T30]  watchdog+0x1097/0x10a0
[  977.357063][   T30]  ? watchdog+0x1ea/0x10a0
[  977.357096][   T30]  ? __pfx_watchdog+0x10/0x10
[  977.357125][   T30]  kthread+0x7a9/0x920
[  977.357153][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357185][   T30]  ? __pfx_watchdog+0x10/0x10
[  977.357211][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357239][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357271][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357298][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  977.357323][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  977.357351][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357381][   T30]  ret_from_fork+0x4b/0x80
[  977.357414][   T30]  ? __pfx_kthread+0x10/0x10
[  977.357444][   T30]  ret_from_fork_asm+0x1a/0x30
[  977.357482][   T30]  </TASK>
[  977.366389][   T30] Kernel Offset: disabled