last executing test programs:

33m46.709940867s ago: executing program 32 (id=16):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)

33m46.114087805s ago: executing program 33 (id=20):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xff)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38)
recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x10020, 0x0)
socket(0x2a, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)

33m45.486567296s ago: executing program 34 (id=22):
r0 = syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0)
sendmsg$TIPC_NL_BEARER_ADD(r0, 0x0, 0x2008800)
open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
lseek(0xffffffffffffffff, 0x10000000005, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0ef9924e", 0x8940}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)

33m45.323256389s ago: executing program 35 (id=23):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

25m37.260002642s ago: executing program 36 (id=1451):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000080000700d1bda40000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10)
clock_getres(0x7ffffffff000, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
fcntl$getown(0xffffffffffffffff, 0x9)
getgid()
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')

21m47.834550752s ago: executing program 37 (id=1730):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x7}, 0x94)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB])
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095000000d3031a00"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250}, 0x23)

18m21.236695645s ago: executing program 38 (id=1938):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x88)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

15m44.001041077s ago: executing program 39 (id=2106):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x88)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

15m7.252406374s ago: executing program 40 (id=2154):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(r2, 0x0, 0x20000002, 0x0)
ptrace$peeksig(0x4209, r2, &(0x7f0000000000)={0x1, 0x1, 0xd0224dea9e460a0a}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, 0xfffffffffffffffd)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000540)={<r6=>0x0, 0x2, 0x1, [0xd, 0x6, 0x40, 0x100000001, 0x3], [0x6, 0x80000000, 0xa1, 0x5, 0x1a, 0x31c7fabb, 0x1c, 0x2, 0x8de, 0x8000000000000001, 0x5, 0x3, 0x9, 0x6, 0xfffffffffffffffb, 0x8000, 0x5, 0x4, 0xfffffffffffeffff, 0x859, 0x4c3, 0x3, 0x3, 0x8, 0x7, 0x3, 0x671, 0x3, 0x4, 0x9, 0x100000001, 0x74b, 0x2, 0x2, 0xae5, 0x8d4, 0x2, 0x81, 0x1, 0x3, 0x1, 0x8, 0x10000, 0x3, 0x1000, 0x0, 0x4, 0xc, 0xa, 0x8000000000000000, 0x5, 0x2ee7517, 0x0, 0x76b, 0x1, 0x1ff, 0x5, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x5, 0xf, 0x9dbc, 0xd, 0x2, 0x1, 0x9, 0xffffffffffff8002, 0xb, 0x88e, 0x10000, 0x2, 0xe, 0x0, 0x200000000000006, 0x6, 0x8000000000000001, 0xffffffffffffffff, 0x8, 0x8, 0x10, 0x8, 0xff, 0x4, 0xb6, 0x8, 0x6, 0xaf5, 0x2, 0x5, 0x9, 0xffffffff, 0xffffffffffffffff, 0x2, 0x3ff, 0x8, 0x8, 0x8, 0x3, 0xffffffffffffff3a, 0x0, 0x7fffffff, 0x7, 0x4, 0xfffffffffffffffb, 0x400, 0x8000, 0xcd17, 0x1000, 0xc, 0x8, 0x5, 0x4, 0xd, 0x8000000000000000, 0x8, 0x615e]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, 0xfffffffffffffffd)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001180)={0x4, 0x3, {0x8, @usage=0x2, r6, 0x5, 0x8, 0xd7, 0x2, 0x20000008, 0x438, @struct={0xffffff7f, 0x10000}, 0x800, 0x3d, [0xf42b, 0xffffffffffffffff, 0x8, 0xd, 0x54fb, 0x3ff]}, {0x2, @usage=0xffffffffffff8000, 0x0, 0x7381, 0xfffffffffffffffb, 0x8000007, 0xf, 0x7, 0x64, @struct={0x3, 0xafe}, 0x6, 0x9, [0x5, 0xfffffffffffffa3e, 0x5, 0x6, 0x7fffffffffffffff, 0x4]}, {0xfffffffffffffffd, @usage=0x1, 0x0, 0xff, 0x3, 0xfffffffffffffffa, 0x9, 0x2, 0xc, @struct={0x8, 0x7}, 0x6, 0x9, [0x8, 0xffffffffffff8000, 0x9, 0x9, 0x6, 0x48]}, {0x8, 0x2, 0x9}})
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfb, 0x0, &(0x7f0000000440))
r7 = syz_open_procfs(0x0, &(0x7f0000000cc0)='net/netlink\x00')
setxattr$incfs_size(&(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, &(0x7f0000000340)=0x8, 0x8, 0x2)
read$FUSE(r7, &(0x7f00000027c0)={0x2020}, 0x2038)
keyctl$unlink(0x9, 0x0, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x6000000, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)

14m15.661402095s ago: executing program 41 (id=2214):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tgkill(r0, r0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
r4 = socket(0x10, 0x2, 0xd)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000000000000e7ff00000a"], 0x28}}, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

13m31.89480302s ago: executing program 2 (id=2266):
write(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e)
socket$unix(0x1, 0x1, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(r2, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x808)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioprio_get$pid(0x2, 0xffffffffffffffff)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000040f8030003000040"])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$vhost_msg_v2(r2, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)

13m27.920843352s ago: executing program 2 (id=2271):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")

13m23.736093782s ago: executing program 2 (id=2273):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9)
fallocate(r4, 0x0, 0x0, 0x1001f0)
copy_file_range(r4, 0x0, r4, 0x0, 0x101, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xca1c578e53240146)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)

13m19.404030064s ago: executing program 2 (id=2279):
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@remote, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00'})

13m13.516177182s ago: executing program 2 (id=2282):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

12m58.14983057s ago: executing program 42 (id=2282):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

12m57.972442195s ago: executing program 43 (id=2281):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

11m38.866737439s ago: executing program 44 (id=2333):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
socket$key(0xf, 0x3, 0x2)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

10m4.002328813s ago: executing program 45 (id=2436):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9)
fallocate(r4, 0x0, 0x0, 0x1001f0)
copy_file_range(r4, 0x0, r4, 0x0, 0x101, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xca1c578e53240146)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)

9m7.855885263s ago: executing program 46 (id=2490):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

7m47.912087505s ago: executing program 6 (id=2623):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xc8, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
read(r2, 0x0, 0x0)

7m46.773252008s ago: executing program 6 (id=2624):
unshare(0x22020600)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10)

7m45.768393439s ago: executing program 6 (id=2626):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

7m45.352812783s ago: executing program 6 (id=2627):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

7m43.881999713s ago: executing program 6 (id=2628):
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(0xffffffffffffffff, 0x8)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39)

7m43.528217511s ago: executing program 6 (id=2629):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x88)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

7m28.338216985s ago: executing program 47 (id=2629):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdnZZ6W5LYcuQ8vkks/vePJb3nSbffW86bzoBPLHGs5c0Ym9EfJ5EjBX704gYzksjEcutf3dn5cp0tiWxuvrOv0kkEXF75cp0+/9Kivdd2Us1/2T89UvEM5W1/S4sXT7XaDZnLxX1icXzH04sLF0+OH++cXb27OyFQ69OHp567cixV44M7FiXjqaf/fnmG99dO/P1Hz8ee+HTJE7E7qKt+zgGZTzGOz+TbtWIeG/QnZWkUhxPr+MEAODxk3bN4fbGWFTyUstY1OdLDQ4AAAAYiE8iYhUAAADY5hLn/wAAALDNtdcB3F65Mt3eyl2RADwqt05GRK2V/+37+1st1VjO30diKCJG7yRddwa17veuDaD/8Yj44auj+7Ittug+fKC35asR8Vyv8T/J87+W/xWPtfmfRsTkAPofv6cu/+HReZj8PzGA/uU/AAAAAAAADM71k60L+Wuv/6Wd9T/R4/pfpce1uwex8fW/9OYAugF6uHUy4vWuZ/vc6cr/Qq1S1J7K1wMMJXPzzdnJiHg6Ig7E0I6sPrVOH9/+dPzvfm3d6/+yLeu/vRawiONmdcf/PzPTWGw8zDEDLbeuRjxf7ZX/SWf8T/qs/337Pvv47fTPc/3aNs5/YKusfhOxv+f4f/eJbsn6z+ebyOcDE+1ZwVqnX/z1+379y38oTzb+j66f/7Wk+3mdC5vvY3L04Nl+bQ86/x9OTuVPFR0u9n3cWFy8NBUxnLy1dv+hzccM21E7H9r5kuX/gZd6n/+vN//Pkuz94lsijYhG8Z7VP7inzx1nfv+iXzzGfyhPlv8zmxr/N1/48t2VU/36v7/x/0g+ph8o9vj9H6zvfhO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgcZJGxO5I0nqnnKb1esSuiHg2RtPmxYXFl+cufnRhJmuLqMVQOjffnJ2MiLFWPcnqU3n5bv3QPfXDEbEnIq6N7czr9emLzZmyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICOXRGxO5K0HhFpXk7Ter3V9s9Y2dEBAAAAA1MrOwAAAABgyzn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAh7dl3/UYSEcvHd+ZbZrhoGyo1MmCrpWUHAJSmUnYAQGmqZQcAlMY5PpBs0D7St8UMAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJsn/v9RtJRCwf35lvmeGibajUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftI3xYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnycLS5XONZnP2koKCgkKnUPY3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvZfwEAAP//vlL7zw==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$key(0xf, 0x3, 0x2)
socket$inet6(0xa, 0x80002, 0x88)
r6 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xc, 0xffffff97, 0x18, @local, @loopback={0x12, 0x460c6}, 0x8000, 0x0, 0x1, 0xfffffffc}})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

6m51.615261427s ago: executing program 8 (id=2694):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

6m48.979489171s ago: executing program 8 (id=2696):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)

6m48.614442861s ago: executing program 8 (id=2699):
syz_io_uring_submit(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

6m47.902888099s ago: executing program 8 (id=2703):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r5}, 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x8002, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x2, 0x8000000000000000, 0x80}})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e17010000000000000014223282bd63a8d23e712ff53900000000000a58"], 0xd8}}, 0x4000040)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)

6m46.460207946s ago: executing program 8 (id=2707):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

6m46.240842523s ago: executing program 8 (id=2708):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x78}}, 0x800)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})

6m30.461558355s ago: executing program 48 (id=2708):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x78}}, 0x800)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})

6m18.056328653s ago: executing program 9 (id=2749):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r6}, 0x4)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x8002, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x2, 0x8000000000000000, 0x80}})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e17010000000000000014223282bd63a8d23e712ff53900000000000a58"], 0xd8}}, 0x4000040)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84006ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

6m14.947096445s ago: executing program 9 (id=2752):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x8002, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x2, 0x8000000000000000, 0x80}})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e17010000000000000014223282bd63a8d23e712ff53900000000000a58"], 0xd8}}, 0x4000040)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84006ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

6m11.977936876s ago: executing program 9 (id=2755):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000014", @ANYRES32, @ANYBLOB="14000200fe"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

6m11.675124451s ago: executing program 9 (id=2757):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

6m10.564555131s ago: executing program 9 (id=2759):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000bc0)=""/249)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3)
shutdown(r0, 0x2)

6m8.267298558s ago: executing program 9 (id=2765):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5m52.861098889s ago: executing program 49 (id=2765):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5m9.137677926s ago: executing program 5 (id=2823):
r0 = msgget$private(0x0, 0xfffffffffffffffd)
msgrcv(r0, 0x0, 0x0, 0x1, 0x3000)
msgrcv(r0, 0x0, 0x0, 0x1, 0x0)
msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0)

5m8.206568472s ago: executing program 5 (id=2824):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5m3.832396957s ago: executing program 5 (id=2828):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[], 0x20)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={r5}, 0x4)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000012c0)={0xc, 0x2, {0x6, @struct={0x6, 0x4}, 0x0, 0x1, 0x1, 0xb7, 0x732a, 0xfe, 0xa0, @usage=0x5, 0x6, 0xffffffff, [0xcbf5, 0x9ccc, 0x3, 0x81, 0x8002, 0x3]}, {0x4, @usage=0x6, 0x0, 0xac0, 0x2, 0x6, 0x2000000000, 0x3, 0x804, @struct={0x5, 0x6d9c}, 0x7, 0x3398, [0x1, 0x7f29, 0x6, 0x7fffffff, 0xa6, 0xf1]}, {0x0, @struct={0x4, 0x8}, 0x0, 0x4, 0x9, 0x9059, 0x0, 0xfff, 0x6c, @usage=0x2, 0x100, 0x81, [0x8, 0x16, 0x8, 0x2, 0x8, 0x80000001]}, {0x2, 0x8000000000000000, 0x80}})
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b000100736f636b657400001400028008000140000000010800024000000017140000001100c39f8e17010000000000000014223282bd63a8d23e712ff53900000000000a58"], 0xd8}}, 0x4000040)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)

5m1.508714775s ago: executing program 5 (id=2831):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0)

4m57.093141373s ago: executing program 5 (id=2833):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket(0x80000000000000a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f, 0x2f, 0x0, @loopback, @broadcast}}}}}}, 0x0)

4m55.263360852s ago: executing program 5 (id=2835):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m50.926497064s ago: executing program 2 (id=2730):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m39.339042955s ago: executing program 50 (id=2835):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

4m35.4583353s ago: executing program 51 (id=2730):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

1m21.938130446s ago: executing program 1 (id=3193):
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
copy_file_range(r2, 0x0, r3, 0x0, 0xffffffffa003e45c, 0x700000000000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000002380)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x2, @local}, @in={0x2, 0x4e24, @broadcast}], 0x9c)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)

1m16.116947268s ago: executing program 1 (id=3202):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b40), 0x103)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000b80)={0x1ff, 0x0, 'client0\x00', 0x0, "7fc36b64ad2b4c85", "1c29974d4fb4223bdb6aebf11a9529e454944899efe95350237563207dc830e5", 0x0, 0x37})

1m15.900852126s ago: executing program 1 (id=3205):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0xff, 0x30}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
open(0x0, 0x101080, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r10, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x28d41828b69a67d5, 0x12141, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r3, 0x3}, &(0x7f0000000100)=0x8)

1m14.530065167s ago: executing program 1 (id=3208):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4)

1m13.536825388s ago: executing program 1 (id=3210):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0)

1m13.296691628s ago: executing program 1 (id=3213):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f00000000c0)=ANY=[])

58.227700191s ago: executing program 52 (id=3213):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3a4, &(0x7f00000000c0)=ANY=[])

16.216389553s ago: executing program 7 (id=3316):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x80000)
r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0)

13.197582298s ago: executing program 3 (id=3320):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_io_uring_setup(0x1361, &(0x7f0000000000)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10)
r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x0)
ioctl$EVIOCGREP(r2, 0x80084503, 0x0)
r3 = socket(0x25, 0x1, 0x0)
recvmsg$can_raw(r3, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={0x0}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001)

12.513765944s ago: executing program 7 (id=3323):
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1}}, './file0\x00'})
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0xdd, 0x8, 0x6, 0x0, 0xd3})
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x1, 0x106)
syz_open_dev$tty20(0xc, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0xea60}}, 0x0)
setitimer(0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003"], 0x34}}, 0x84)
close(r4)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20)
listen(r3, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

11.543064513s ago: executing program 3 (id=3324):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xdffffffa, @local, 0x3}, 0x1c)
setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000040)=0x5, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20)
open(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0xe4}, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r8, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

11.32461936s ago: executing program 4 (id=3325):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8, {}, {}, @raw8={"13e661fefa8c7d0d9a4be91e"}}, {0x0, 0x3f, 0x0, 0x0, @tick, {0x10}, {}, @time=@time={0x3ff, 0xfffffffd}}], 0x38)
openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0)

9.632848168s ago: executing program 4 (id=3327):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x3, 0xfffe, 0x5}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000008df0900000004c411f0a6512042660100000020d46287", @ANYRES16=r7, @ANYBLOB="2503000400000000000008000000"], 0x14}}, 0x4800)
r8 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900)
sendmsg$inet(r8, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000048000000060a010400000000000000000100000008000b4000000000200004801c000180090001007866726d000000000c00028005000300030000000900010073797a30000000001400000003000100"], 0xbc}}, 0x4000040)
write(r8, &(0x7f00000000c0)="96f8f4b475e725647a9c18e5e72f2130fb06f0becaaa075e865c10da0a76aa8f8ec19afb685d79578ab49602dad5c69dd9ee14806199c1", 0x37)
recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

8.554725986s ago: executing program 3 (id=3328):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000080)=ANY=[], 0x1df)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "28ce30ec8d08598948224ad54af2c11d875397bdb22d0000b420a1a93c5291ecc6f19e01177d3d458dd49928610000002000", "90be8b1c551265406c7f306003d8a0f4bd00"}})
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r6, 0x110, 0x3)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

8.320435064s ago: executing program 3 (id=3329):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4088}, 0x0)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, 0x0, 0x24040808)
r2 = syz_open_dev$dri(0x0, 0x4000000d21, 0x0)
fsopen(0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x4)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1000)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

7.976624162s ago: executing program 7 (id=3332):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x3, 0xfffe, 0x5}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4800)
r7 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900)
sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300"], 0xbc}}, 0x4000040)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

6.684115437s ago: executing program 4 (id=3334):
r0 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0xe000202b})
syz_clone3(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
socket$kcm(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000040)='logfs\x00', 0x1)
syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xd3, 0xcc, 0xb5, 0x10, 0x13b1, 0x42, 0x2b29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xe7, 0x11, 0xe1, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)

4.737806725s ago: executing program 7 (id=3335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

4.584220818s ago: executing program 0 (id=3336):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000680)={'syz1\x00', {0x3, 0x8, 0x3, 0x1000}, 0x1f, [0x10001, 0x101, 0x6, 0x0, 0x2, 0x0, 0x4, 0x3, 0xc86c, 0x1911, 0x3, 0x43, 0x7, 0xfffffffd, 0x7, 0x7, 0x1000, 0x9, 0x80, 0x100, 0x80000001, 0x7ff, 0xfffffffd, 0x10000, 0xcc1, 0x3, 0x1, 0x6, 0x2640000, 0x0, 0x3, 0x3, 0x5, 0x5, 0x8, 0x5, 0x78, 0x2, 0x2, 0xf432, 0x6, 0x8, 0x1, 0x101, 0xdd, 0x5, 0xff, 0x1d60, 0x4, 0x5, 0x5, 0x4, 0x3, 0x78d, 0x7fffffff, 0xff, 0x9153, 0xffffff5f, 0x9, 0x3, 0x45f40000, 0x1, 0x7, 0xfffffffb], [0x9, 0x40, 0x3, 0x7, 0x6, 0x77f, 0x8, 0x4, 0x0, 0x80000001, 0xcd, 0x7fffffff, 0x1, 0x81, 0x10000, 0x9, 0x9, 0x5, 0x4b, 0xfffffff7, 0x1, 0x5, 0xfffffff7, 0x4, 0x1, 0xfff, 0xfffffff9, 0x8, 0x2, 0x80, 0x100, 0xcf, 0x100, 0x101, 0x4, 0x2, 0x0, 0x9, 0x1b2, 0x81, 0x8, 0xfffff000, 0x0, 0x41da, 0x8, 0x3, 0x20, 0x4, 0x7, 0x2, 0x2, 0x4, 0x10000, 0x5, 0x0, 0x1f, 0xfffffff3, 0x431, 0xffff8000, 0x9, 0x9, 0x1, 0x1444, 0x5], [0x4, 0xfffffc00, 0xffffffff, 0x7, 0x7, 0x30, 0x9, 0x4, 0x9, 0xfffffff7, 0x4, 0xe, 0x81, 0x8c7e, 0x8, 0x8000, 0x906c, 0xffffc779, 0x7, 0x2, 0x2, 0x6, 0xfffffff7, 0x7, 0x5, 0x0, 0x10000, 0x2, 0x81, 0xd, 0xe5, 0x1, 0x4, 0xa846, 0x7, 0x0, 0x1d7, 0x8, 0x3, 0x5, 0x7f, 0x6f12, 0xa0c, 0x4dd, 0x7, 0x4, 0x3, 0x5f4, 0x10, 0x5a0, 0x8001, 0x1, 0xa1, 0x2, 0x7f, 0x1, 0x8, 0x200, 0x0, 0x2, 0x5, 0x3, 0x8, 0x7fffffff], [0x800, 0xe7d, 0x9, 0x5, 0x2, 0x1, 0x8, 0x8001, 0x2, 0x81, 0x0, 0xfffffffe, 0x1d, 0x1, 0x2, 0x0, 0x1a46, 0x528c, 0x8, 0x4, 0x1000, 0xe6b0, 0x10001, 0xc0, 0xc6b6, 0x80, 0x3d, 0x1ff, 0x3, 0x400, 0x9, 0x5, 0x0, 0x40, 0x8000, 0x5, 0x1, 0x8, 0x4, 0x6, 0x8, 0x2, 0xfffffff8, 0x3bd, 0x7, 0x7f, 0x7, 0x6, 0x3, 0x1, 0x1, 0x1, 0x7f, 0x5, 0x6, 0x7, 0x2, 0x5, 0x6, 0x2, 0x80, 0x5, 0x9, 0x2]}, 0x45c)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x6)
r3 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000)
r5 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x97, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\f', @ANYBLOB="000425bd7000fcdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="060006000000000008000400ac1e0101080009000000000008000100", @ANYRES32=r9, @ANYBLOB='\b\x00', @ANYRES32=r10, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

4.583735448s ago: executing program 3 (id=3337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44050)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r7, 0x0, r8, 0x0, 0x88000cc, 0x0)
syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)

2.884138036s ago: executing program 0 (id=3338):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)

2.692998831s ago: executing program 7 (id=3339):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0x0, 0x109301)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001300)=""/102392, 0x18ff8)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000900, 0x0, &(0x7f0000001280)={0xe, 0x0, 0x80000000, 0x3, 0x0, 0x6, 0x0, 0xf66d, 0x10})

2.673436973s ago: executing program 0 (id=3340):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af25, &(0x7f0000000300))

1.856747199s ago: executing program 4 (id=3341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x98}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)

1.856346919s ago: executing program 0 (id=3342):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1.683586353s ago: executing program 0 (id=3343):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x3, 0xfffe, 0x5}}, 0x80)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x4800)
r7 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900)
sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300"], 0xbc}}, 0x4000040)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.682627823s ago: executing program 7 (id=3344):
socket$key(0xf, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r6, 0x89f3, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"})
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)

1.644664727s ago: executing program 4 (id=3345):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c5527", 0x1b}], 0x1}, 0x48800)

104.671581ms ago: executing program 4 (id=3346):
r0 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x80, 0x0, 0xffffffff})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

34.614158ms ago: executing program 0 (id=3347):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000006687000000000000000000850000007b00000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff000000006e46430000000025009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0xf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000380), 0x20000000, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket$l2tp(0x2, 0x2, 0x73)
r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r3, &(0x7f0000001f00)=""/4111, 0x100f)
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc)
r4 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
r5 = socket(0x2, 0x2, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r4, 0xab00, r5)
ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x5)

0s ago: executing program 3 (id=3348):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

kernel console output (not intermixed with test programs):

685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1673.237356][T18790] loop6: detected capacity change from 0 to 2048
[ 1673.326415][T18790] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 1674.118322][ T3439] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1674.185139][ T3439] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[ 1674.219733][ T3439] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1674.219733][ T3439] 
[ 1674.236539][T18801] random: crng reseeded on system resumption
[ 1674.274184][ T3439] EXT4-fs (loop6): Total free blocks count 0
[ 1674.280263][ T3439] EXT4-fs (loop6): Free/Dirty block details
[ 1674.327541][ T3439] EXT4-fs (loop6): free_blocks=2415919104
[ 1674.355844][ T3439] EXT4-fs (loop6): dirty_blocks=16
[ 1674.379184][ T3439] EXT4-fs (loop6): Block reservation details
[ 1674.406114][ T3439] EXT4-fs (loop6): i_reserved_data_blocks=1
[ 1674.461411][T18099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[ 1674.893867][T18810] loop1: detected capacity change from 0 to 2048
[ 1674.954759][T18808] loop5: detected capacity change from 0 to 4096
[ 1674.985601][T18810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[ 1675.032206][T18808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1675.406076][T18810] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1675.470151][T18810] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 378 with error 28
[ 1675.485292][T18810] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1675.485292][T18810] 
[ 1675.502186][T18810] EXT4-fs (loop1): Total free blocks count 0
[ 1675.508255][T18810] EXT4-fs (loop1): Free/Dirty block details
[ 1675.540925][T18810] EXT4-fs (loop1): free_blocks=2415919104
[ 1675.560872][T18810] EXT4-fs (loop1): dirty_blocks=384
[ 1675.566170][T18810] EXT4-fs (loop1): Block reservation details
[ 1676.028338][T18810] EXT4-fs (loop1): i_reserved_data_blocks=24
[ 1677.652300][ T6288] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[ 1677.739361][T18838] loop6: detected capacity change from 0 to 4096
[ 1677.892834][T18838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1678.274706][T16254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1678.810451][T18854] loop5: detected capacity change from 0 to 4096
[ 1678.834553][T18854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1680.752997][T18866] loop8: detected capacity change from 0 to 4096
[ 1680.869706][T18866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1681.865032][T16254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1685.332486][T18899] loop1: detected capacity change from 0 to 4096
[ 1686.327754][T18899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1690.614087][T17685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1692.443430][T18923] random: crng reseeded on system resumption
[ 1693.695825][ T7314] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1693.707860][ T7314] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1693.717667][ T7314] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1693.726416][ T7314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1693.735175][ T7314] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1693.744511][ T7314] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1694.153168][T16971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1694.372699][T18847] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1694.414111][ T6288] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.735214][ T6288] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1694.759218][T18964] random: crng reseeded on system resumption
[ 1694.770088][T18982] loop5: detected capacity change from 0 to 4096
[ 1694.859610][T18982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1694.951720][ T6288] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1700.430268][ T7314] Bluetooth: hci3: command tx timeout
[ 1702.387034][ T6288] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1702.675298][T16254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1702.800952][T15916] Bluetooth: hci3: command tx timeout
[ 1703.139819][T18962] chnl_net:caif_netlink_parms(): no params data found
[ 1703.616962][T19021] loop8: detected capacity change from 0 to 40427
[ 1703.676791][T19021] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1703.963118][T19021] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1705.883628][T15916] Bluetooth: hci3: command tx timeout
[ 1705.904866][T18962] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1705.965453][T18962] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1706.101785][T18962] bridge_slave_0: entered allmulticast mode
[ 1708.036305][T15916] Bluetooth: hci3: command tx timeout
[ 1708.038764][T18962] bridge_slave_0: entered promiscuous mode
[ 1708.667163][T18962] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1708.835213][T18962] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1708.909506][T18962] bridge_slave_1: entered allmulticast mode
[ 1708.992988][T18962] bridge_slave_1: entered promiscuous mode
[ 1709.199598][T16971] syz-executor: attempt to access beyond end of device
[ 1709.199598][T16971] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1709.355947][T16971] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1710.443260][T18962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1710.570322][T19088] loop1: detected capacity change from 0 to 4096
[ 1710.623407][T19088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1710.645958][T18962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1711.102400][T19096] loop8: detected capacity change from 0 to 4096
[ 1711.115077][T18962] team0: Port device team_slave_0 added
[ 1712.176788][T19096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1712.485544][T18962] team0: Port device team_slave_1 added
[ 1713.049586][T18962] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1713.080695][T18962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1713.122818][T19108] random: crng reseeded on system resumption
[ 1713.197066][T18962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1713.393284][T18962] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1713.434904][T18962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1713.501702][T18962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1713.552316][T17685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1713.920105][T18962] hsr_slave_0: entered promiscuous mode
[ 1713.970830][T18962] hsr_slave_1: entered promiscuous mode
[ 1715.372985][ T6288] hsr_slave_0: left promiscuous mode
[ 1715.379198][ T6288] hsr_slave_1: left promiscuous mode
[ 1715.424903][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1715.444964][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1715.471834][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1715.489886][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1715.516777][ T6288] bridge_slave_1: left allmulticast mode
[ 1715.534440][ T6288] bridge_slave_1: left promiscuous mode
[ 1715.540285][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1715.586077][ T6288] bridge_slave_0: left allmulticast mode
[ 1715.607252][ T6288] bridge_slave_0: left promiscuous mode
[ 1715.623728][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1715.757041][ T6288] veth1_macvtap: left promiscuous mode
[ 1715.762765][ T6288] veth0_macvtap: left promiscuous mode
[ 1715.778670][ T6288] veth1_vlan: left promiscuous mode
[ 1715.788752][ T6288] veth0_vlan: left promiscuous mode
[ 1716.562669][T19142] loop5: detected capacity change from 0 to 40427
[ 1716.648905][T19142] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1716.764947][T19142] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1718.177452][T16254] syz-executor: attempt to access beyond end of device
[ 1718.177452][T16254] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1718.200785][T16254] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1718.420188][ T6288] team0 (unregistering): Port device team_slave_1 removed
[ 1718.549379][ T6288] team0 (unregistering): Port device team_slave_0 removed
[ 1718.674816][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1718.854350][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1719.096136][T19150] loop5: detected capacity change from 0 to 4096
[ 1719.210246][T19150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1719.428393][T16971] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1720.562440][ T6288] bond0 (unregistering): Released all slaves
[ 1722.732262][T19191] loop1: detected capacity change from 0 to 256
[ 1722.864868][T19191] exfat: Bad value for 'gid'
[ 1722.968017][T19191] loop1: detected capacity change from 0 to 512
[ 1723.171117][T19191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1723.184341][T19191] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1724.224425][T18962] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1724.304121][T18962] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1724.422691][T18962] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1724.528514][T18962] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1724.718639][T19203] syzkaller0: entered promiscuous mode
[ 1724.745004][T19203] syzkaller0: entered allmulticast mode
[ 1725.108673][T17685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1725.176431][T18962] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1725.250317][T18962] 8021q: adding VLAN 0 to HW filter on device team0
[ 1725.327804][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1725.335036][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1725.402015][T14247] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1725.409254][T14247] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1727.426222][T18962] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1729.374532][T18962] veth0_vlan: entered promiscuous mode
[ 1729.725025][T18962] veth1_vlan: entered promiscuous mode
[ 1731.881308][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1731.887677][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1732.154471][T18962] veth0_macvtap: entered promiscuous mode
[ 1732.213331][T18962] veth1_macvtap: entered promiscuous mode
[ 1732.252049][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.282029][T16254] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1732.300793][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.350738][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.381159][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.430666][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1732.474458][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.498091][T18962] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1732.527886][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.553062][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.578319][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.589447][T19293] loop1: detected capacity change from 0 to 1024
[ 1732.603267][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.635706][T18962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1732.684049][T18962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1732.689484][T19293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1732.722338][T19293] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1732.742956][T18962] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1732.823067][T18962] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.849182][T17685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1732.858400][T18962] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.878412][T18962] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1732.913745][T18962] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1733.412223][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2705'.
[ 1733.463493][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1733.738434][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1734.527485][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1734.546854][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1737.152456][T19350] netlink: 'syz.5.2711': attribute type 1 has an invalid length.
[ 1737.160273][T19350] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2711'.
[ 1740.128064][T19366] netlink: 'syz.5.2712': attribute type 1 has an invalid length.
[ 1740.136026][T19366] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2712'.
[ 1741.362122][T19384] netlink: 'syz.5.2714': attribute type 1 has an invalid length.
[ 1741.370072][T19384] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2714'.
[ 1744.081974][T19404] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1747.783616][T19398] Set syz1 is full, maxelem 65536 reached
[ 1748.007893][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'.
[ 1748.861003][   T28] audit: type=1326 audit(1754234090.537:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1748.921255][   T28] audit: type=1326 audit(1754234090.537:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1748.997797][   T28] audit: type=1326 audit(1754234090.557:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.063857][   T28] audit: type=1326 audit(1754234090.557:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.199705][   T28] audit: type=1326 audit(1754234090.557:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.223623][   T28] audit: type=1326 audit(1754234090.557:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.246383][   T28] audit: type=1326 audit(1754234090.557:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.317216][   T28] audit: type=1326 audit(1754234090.557:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1749.738303][   T28] audit: type=1326 audit(1754234090.557:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1750.176462][   T28] audit: type=1326 audit(1754234090.557:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.9.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1751.379399][T19457] netlink: 'syz.9.2729': attribute type 1 has an invalid length.
[ 1751.387267][T19457] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2729'.
[ 1753.495226][T19466] syzkaller0: entered promiscuous mode
[ 1753.517916][T19466] syzkaller0: entered allmulticast mode
[ 1753.615004][ T7314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1753.634906][ T7314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1753.648853][ T7314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1753.669926][ T7314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1753.679389][ T7314] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1753.691831][ T7314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1754.970775][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 1754.970791][   T28] audit: type=1326 audit(1754234096.657:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.078152][   T28] audit: type=1326 audit(1754234096.707:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.119390][   T28] audit: type=1326 audit(1754234096.727:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.321947][   T28] audit: type=1326 audit(1754234096.727:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.380391][   T28] audit: type=1326 audit(1754234096.727:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.468849][   T28] audit: type=1326 audit(1754234096.727:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.540785][   T28] audit: type=1326 audit(1754234096.737:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.650251][T19470] chnl_net:caif_netlink_parms(): no params data found
[ 1755.664233][   T28] audit: type=1326 audit(1754234096.737:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.792284][ T7314] Bluetooth: hci0: command tx timeout
[ 1755.835321][   T28] audit: type=1326 audit(1754234096.737:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1755.883686][   T28] audit: type=1326 audit(1754234096.737:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.9.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752978eb69 code=0x7ffc0000
[ 1757.899031][ T7314] Bluetooth: hci0: command tx timeout
[ 1758.905044][T19470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1758.966131][T19470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1759.145489][T19470] bridge_slave_0: entered allmulticast mode
[ 1759.153468][T19470] bridge_slave_0: entered promiscuous mode
[ 1759.252166][T19470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1759.259472][T19470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1759.266827][T19470] bridge_slave_1: entered allmulticast mode
[ 1759.274512][T19470] bridge_slave_1: entered promiscuous mode
[ 1759.603221][T19523] netlink: 'syz.9.2743': attribute type 1 has an invalid length.
[ 1759.611189][T19523] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2743'.
[ 1760.170850][ T7314] Bluetooth: hci0: command tx timeout
[ 1762.311965][ T7314] Bluetooth: hci0: command tx timeout
[ 1765.255496][T19555] netlink: 'syz.9.2749': attribute type 1 has an invalid length.
[ 1765.263514][T19555] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2749'.
[ 1766.079358][   T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1766.163789][T19470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1766.326548][T19470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1768.133203][T19572] netlink: 'syz.9.2752': attribute type 1 has an invalid length.
[ 1768.141179][T19572] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2752'.
[ 1769.193771][   T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1770.250181][T19470] team0: Port device team_slave_0 added
[ 1770.302072][T19470] team0: Port device team_slave_1 added
[ 1770.476424][   T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1770.867089][T19603] netlink: 'syz.1.2758': attribute type 1 has an invalid length.
[ 1770.875016][T19603] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2758'.
[ 1771.461550][T19470] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1771.468576][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1771.550861][T19470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1771.564463][T19470] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1771.571510][T19470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1771.612737][T19470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1771.713287][   T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.770688][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 1771.770705][   T28] audit: type=1326 audit(1754234113.457:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1771.889789][   T28] audit: type=1326 audit(1754234113.457:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1771.943810][   T28] audit: type=1326 audit(1754234113.477:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1771.996082][T19470] hsr_slave_0: entered promiscuous mode
[ 1772.010693][   T28] audit: type=1326 audit(1754234113.477:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.034038][T19470] hsr_slave_1: entered promiscuous mode
[ 1772.052859][T19470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1772.066591][T19470] Cannot create hsr debugfs directory
[ 1772.085473][   T28] audit: type=1326 audit(1754234113.477:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.166985][   T28] audit: type=1326 audit(1754234113.477:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.245103][   T28] audit: type=1326 audit(1754234113.477:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.330673][   T28] audit: type=1326 audit(1754234113.477:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.450941][   T28] audit: type=1326 audit(1754234113.477:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1772.573714][   T28] audit: type=1326 audit(1754234113.477:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.5.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1781.130223][T19635] Set syz1 is full, maxelem 65536 reached
[ 1784.649190][T19661] Set syz1 is full, maxelem 65536 reached
[ 1786.551049][T19694] netlink: 'syz.5.2774': attribute type 1 has an invalid length.
[ 1786.558925][T19694] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2774'.
[ 1790.111136][   T28] kauditd_printk_skb: 19 callbacks suppressed
[ 1790.111151][   T28] audit: type=1326 audit(1754234131.797:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.201648][   T28] audit: type=1326 audit(1754234131.797:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.301045][   T28] audit: type=1326 audit(1754234131.797:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.390751][   T28] audit: type=1326 audit(1754234131.797:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.471851][   T28] audit: type=1326 audit(1754234131.807:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.540702][   T28] audit: type=1326 audit(1754234131.807:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.637758][   T28] audit: type=1326 audit(1754234131.807:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.660337][   T28] audit: type=1326 audit(1754234131.807:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.684475][   T28] audit: type=1326 audit(1754234131.807:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1790.721131][T19470] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1790.777107][T19470] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1790.825506][   T28] audit: type=1326 audit(1754234131.807:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19717 comm="syz.5.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1791.741768][T15916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1791.780814][T15916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1791.792408][T15916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1791.806894][T15916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1791.832421][T15916] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1791.839918][T15916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1791.866579][T19470] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1792.142612][T19470] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1792.168681][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.176808][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.359788][T19742] netlink: 'syz.5.2780': attribute type 1 has an invalid length.
[ 1792.368032][T19742] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2780'.
[ 1793.933345][T15916] Bluetooth: hci1: command tx timeout
[ 1794.290899][   T11] hsr_slave_0: left promiscuous mode
[ 1794.297282][   T11] hsr_slave_1: left promiscuous mode
[ 1794.317607][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1794.347339][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1794.362420][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1794.407021][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1794.431594][   T11] bridge_slave_1: left allmulticast mode
[ 1794.437317][   T11] bridge_slave_1: left promiscuous mode
[ 1794.445732][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1794.455735][   T11] bridge_slave_0: left allmulticast mode
[ 1794.465279][   T11] bridge_slave_0: left promiscuous mode
[ 1794.471689][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1794.509353][   T11] veth1_macvtap: left promiscuous mode
[ 1794.515059][   T11] veth0_macvtap: left promiscuous mode
[ 1794.521580][   T11] veth1_vlan: left promiscuous mode
[ 1794.526976][   T11] veth0_vlan: left promiscuous mode
[ 1795.482768][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1795.555345][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1795.617833][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1795.695045][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1796.000950][T15916] Bluetooth: hci1: command tx timeout
[ 1796.462426][   T11] bond0 (unregistering): Released all slaves
[ 1797.188701][T19470] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1797.394505][T19786] netlink: 'syz.5.2783': attribute type 1 has an invalid length.
[ 1797.402411][T19786] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2783'.
[ 1798.175616][T15916] Bluetooth: hci1: command tx timeout
[ 1799.235515][T19470] 8021q: adding VLAN 0 to HW filter on device team0
[ 1799.417395][T16029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1799.424621][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1799.476442][T16029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1799.483705][T16029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1799.545480][T19730] chnl_net:caif_netlink_parms(): no params data found
[ 1801.111573][T15916] Bluetooth: hci1: command tx timeout
[ 1801.448439][T19470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1801.686144][T19730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1801.732884][T19730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1801.770912][T19730] bridge_slave_0: entered allmulticast mode
[ 1801.800698][T19730] bridge_slave_0: entered promiscuous mode
[ 1801.897891][T19730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1801.928601][T19730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1801.977736][T19730] bridge_slave_1: entered allmulticast mode
[ 1802.003233][T19730] bridge_slave_1: entered promiscuous mode
[ 1802.218094][T19730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1802.340414][T19730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1802.598369][T19730] team0: Port device team_slave_0 added
[ 1802.745570][ T1075] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1802.827247][T19470] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1802.857415][T19730] team0: Port device team_slave_1 added
[ 1802.941039][ T1075] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1803.012016][T19730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1803.019276][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1803.059242][T19730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1803.124536][ T1075] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1803.189187][T19730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1803.216008][T19730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1803.241945][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1803.304691][T19730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1803.411402][ T1075] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1803.628242][T19843] netlink: 'syz.5.2790': attribute type 1 has an invalid length.
[ 1803.636394][T19843] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2790'.
[ 1803.902770][T19730] hsr_slave_0: entered promiscuous mode
[ 1804.223436][T19730] hsr_slave_1: entered promiscuous mode
[ 1804.267919][T19730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1804.288762][T19730] Cannot create hsr debugfs directory
[ 1807.041099][T19860] netlink: 'syz.1.2793': attribute type 1 has an invalid length.
[ 1807.049044][T19860] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2793'.
[ 1807.118482][T19861] netlink: 'syz.5.2792': attribute type 1 has an invalid length.
[ 1807.126517][T19861] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2792'.
[ 1807.559440][T19470] veth0_vlan: entered promiscuous mode
[ 1807.575274][T19470] veth1_vlan: entered promiscuous mode
[ 1807.607050][T19470] veth0_macvtap: entered promiscuous mode
[ 1807.618049][T19470] veth1_macvtap: entered promiscuous mode
[ 1808.965829][T19872] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1808.992156][T19879] netlink: 'syz.5.2794': attribute type 1 has an invalid length.
[ 1809.000373][T19879] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2794'.
[ 1809.000965][T19874] syzkaller0: entered promiscuous mode
[ 1809.081890][T19874] syzkaller0: entered allmulticast mode
[ 1809.149795][T19869] tipc: Resetting bearer <eth:syzkaller0>
[ 1809.265121][T19869] tipc: Disabling bearer <eth:syzkaller0>
[ 1809.661153][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1809.692185][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1809.716485][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1809.737697][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1809.756204][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1809.781065][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1809.801842][T19470] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1809.991383][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1810.043389][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1810.070677][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1810.100710][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1810.122737][T19470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1810.150978][T19470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1810.172707][T19470] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1810.274155][T19470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.294799][T19470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.320903][T19470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1810.345025][T19470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1812.354484][T19730] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1812.708737][ T7314] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1812.722739][ T7314] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1814.263676][T19933] netlink: 'syz.1.2802': attribute type 1 has an invalid length.
[ 1814.271784][T19933] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2802'.
[ 1815.372090][ T7314] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1815.403939][T19928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1815.415473][T19928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1815.437811][T19928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1815.733352][T19730] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1815.771342][T19730] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1815.815586][T19730] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1816.006601][T19939] netlink: 'syz.1.2803': attribute type 1 has an invalid length.
[ 1816.014760][T19939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2803'.
[ 1816.110624][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1816.110641][   T28] audit: type=1326 audit(1754234157.797:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.175581][   T28] audit: type=1326 audit(1754234157.827:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.215962][   T28] audit: type=1326 audit(1754234157.837:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.239308][   T28] audit: type=1326 audit(1754234157.837:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.281611][   T28] audit: type=1326 audit(1754234157.837:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.304602][   T28] audit: type=1326 audit(1754234157.837:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.327832][   T28] audit: type=1326 audit(1754234157.837:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.351691][   T28] audit: type=1326 audit(1754234157.837:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.375115][   T28] audit: type=1326 audit(1754234157.847:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.398133][   T28] audit: type=1326 audit(1754234157.847:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19950 comm="syz.5.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1816.674727][ T1075] hsr_slave_0: left promiscuous mode
[ 1816.703116][ T1075] hsr_slave_1: left promiscuous mode
[ 1816.720736][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1816.744597][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1816.767481][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1816.791751][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1816.802164][ T1075] bridge_slave_1: left allmulticast mode
[ 1816.817869][ T1075] bridge_slave_1: left promiscuous mode
[ 1816.831861][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1816.849946][ T1075] bridge_slave_0: left allmulticast mode
[ 1816.869446][ T1075] bridge_slave_0: left promiscuous mode
[ 1816.884669][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1816.983564][ T1075] veth1_macvtap: left promiscuous mode
[ 1816.989397][ T1075] veth0_macvtap: left promiscuous mode
[ 1816.995186][ T1075] veth1_vlan: left promiscuous mode
[ 1817.001308][ T1075] veth0_vlan: left promiscuous mode
[ 1817.899259][T15916] Bluetooth: hci0: command tx timeout
[ 1818.775151][ T1075] team0 (unregistering): Port device team_slave_1 removed
[ 1818.845242][ T1075] team0 (unregistering): Port device team_slave_0 removed
[ 1818.907511][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1818.976396][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1819.768739][ T1075] bond0 (unregistering): Released all slaves
[ 1819.970776][T15916] Bluetooth: hci0: command tx timeout
[ 1820.103219][T19730] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1820.158877][T19926] chnl_net:caif_netlink_parms(): no params data found
[ 1820.265524][T19730] 8021q: adding VLAN 0 to HW filter on device team0
[ 1820.397445][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1820.404727][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1820.518245][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1820.525490][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1820.793031][T19926] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1820.807279][T19926] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1820.815072][T19926] bridge_slave_0: entered allmulticast mode
[ 1820.822940][T19926] bridge_slave_0: entered promiscuous mode
[ 1820.831976][T19926] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1820.839425][T19926] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1820.848354][T19926] bridge_slave_1: entered allmulticast mode
[ 1820.856246][T19926] bridge_slave_1: entered promiscuous mode
[ 1821.887564][T19926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1822.000828][T15916] Bluetooth: hci0: command tx timeout
[ 1822.012305][T19926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1822.139261][T19926] team0: Port device team_slave_0 added
[ 1822.163984][T19926] team0: Port device team_slave_1 added
[ 1822.214022][T19730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1822.371063][T19926] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1822.382831][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1822.440647][T19926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1822.480913][T19926] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1822.487924][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1822.534270][T19926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1822.725951][T19926] hsr_slave_0: entered promiscuous mode
[ 1822.761542][T19926] hsr_slave_1: entered promiscuous mode
[ 1823.085711][T19730] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1824.090844][T15916] Bluetooth: hci0: command tx timeout
[ 1824.425713][T19926] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1824.770224][T19926] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.164118][T19926] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1825.643378][T19926] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1826.646324][T19730] veth0_vlan: entered promiscuous mode
[ 1826.656938][T20053] netlink: 'syz.1.2814': attribute type 1 has an invalid length.
[ 1826.702746][T20053] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2814'.
[ 1826.755757][T19730] veth1_vlan: entered promiscuous mode
[ 1826.983099][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 1826.983115][   T28] audit: type=1326 audit(1754234168.667:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.044324][   T28] audit: type=1326 audit(1754234168.667:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.136357][   T28] audit: type=1326 audit(1754234168.677:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.194399][   T28] audit: type=1326 audit(1754234168.737:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.238472][   T28] audit: type=1326 audit(1754234168.737:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.327986][   T28] audit: type=1326 audit(1754234168.747:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.400699][   T28] audit: type=1326 audit(1754234168.747:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.441656][   T28] audit: type=1326 audit(1754234168.747:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20058 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2f318eb69 code=0x7ffc0000
[ 1827.504163][T19926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1827.617708][T19926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1827.657416][T19730] veth0_macvtap: entered promiscuous mode
[ 1827.892212][T19926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1827.903467][T19926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1827.925621][T19730] veth1_macvtap: entered promiscuous mode
[ 1829.167186][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1829.218717][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.257296][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1829.308806][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.349460][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1829.389437][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.432589][T19730] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1829.618100][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1829.676982][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.720906][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1829.771081][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.823449][T19730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1829.850983][T19730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1829.863018][T19730] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1830.068715][T19730] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1830.137558][T19730] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1830.178906][T19730] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1830.219834][T19730] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1830.244143][T20088] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2817'.
[ 1830.273180][T20090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2818'.
[ 1830.429272][ T1075] hsr_slave_0: left promiscuous mode
[ 1830.452486][ T1075] hsr_slave_1: left promiscuous mode
[ 1830.648137][T20099] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2821'.
[ 1830.692424][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1830.699938][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1830.735501][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1830.743259][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1830.761539][ T1075] bridge_slave_1: left allmulticast mode
[ 1830.767541][ T1075] bridge_slave_1: left promiscuous mode
[ 1830.789334][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1831.134345][ T1075] bridge_slave_0: left allmulticast mode
[ 1831.241233][ T1075] bridge_slave_0: left promiscuous mode
[ 1831.648141][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1831.712961][ T1075] veth1_macvtap: left promiscuous mode
[ 1831.718598][ T1075] veth0_macvtap: left promiscuous mode
[ 1831.724997][ T1075] veth1_vlan: left promiscuous mode
[ 1831.738293][ T1075] veth0_vlan: left promiscuous mode
[ 1832.602641][ T1075] team0 (unregistering): Port device team_slave_1 removed
[ 1832.694402][ T1075] team0 (unregistering): Port device team_slave_0 removed
[ 1832.813224][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1832.970868][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1833.874014][ T1075] bond0 (unregistering): Released all slaves
[ 1834.348116][T19926] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1834.394473][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.422258][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1834.596523][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1834.641795][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1834.674307][T19926] 8021q: adding VLAN 0 to HW filter on device team0
[ 1834.696952][T16029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1834.704199][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1834.755229][ T5893] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1834.762488][ T5893] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1835.027441][T20134] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2825'.
[ 1837.385202][T20158] netlink: 'syz.1.2827': attribute type 1 has an invalid length.
[ 1837.393186][T20158] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2827'.
[ 1839.298634][T19926] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1839.547338][T19926] veth0_vlan: entered promiscuous mode
[ 1839.586489][T19926] veth1_vlan: entered promiscuous mode
[ 1843.764509][T19926] veth0_macvtap: entered promiscuous mode
[ 1843.859854][T19926] veth1_macvtap: entered promiscuous mode
[ 1844.419170][T20191] netlink: 'syz.7.2832': attribute type 1 has an invalid length.
[ 1844.427105][T20191] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2832'.
[ 1845.362418][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1845.405224][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1845.430513][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1845.455443][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1845.473748][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1845.488647][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1845.503568][T19926] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1845.536888][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1845.575966][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1845.622843][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1845.660648][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1846.701521][T19926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1846.750956][T19926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1846.772646][T19926] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1846.794315][T19926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.820654][T19926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.829445][T19926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1846.843454][T19926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1847.147369][T20219] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1847.410351][ T5893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1847.430227][ T5893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1847.629314][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1847.736281][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1854.458842][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1854.469934][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1862.313507][T20250] Set syz1 is full, maxelem 65536 reached
[ 1862.419523][T20275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1862.529357][T20270] tipc: Resetting bearer <eth:syzkaller0>
[ 1862.724031][T20276] syzkaller0: entered promiscuous mode
[ 1862.734172][T20276] syzkaller0: entered allmulticast mode
[ 1862.771370][T20269] tipc: Resetting bearer <eth:syzkaller0>
[ 1862.929365][T20269] tipc: Disabling bearer <eth:syzkaller0>
[ 1862.972055][T19928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1862.984670][T19928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1862.995030][T19928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1863.014391][T19928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1863.022537][T19928] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1863.030334][T19928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1865.202457][T19928] Bluetooth: hci3: command tx timeout
[ 1866.687696][T15916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1866.699775][T15916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1866.713383][T15916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1866.729144][T15916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1866.737174][T15916] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1866.745279][T15916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1867.298775][T15916] Bluetooth: hci3: command tx timeout
[ 1867.437830][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2848'.
[ 1867.798194][T20332] netlink: 'syz.7.2849': attribute type 1 has an invalid length.
[ 1867.806296][T20332] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2849'.
[ 1868.800966][T15916] Bluetooth: hci5: command tx timeout
[ 1868.879290][T14247] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1869.416790][T15916] Bluetooth: hci3: command tx timeout
[ 1870.402837][T20345] block device autoloading is deprecated and will be removed.
[ 1870.912791][T15916] Bluetooth: hci5: command tx timeout
[ 1871.440678][T15916] Bluetooth: hci3: command tx timeout
[ 1872.518517][T14247] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1872.960807][T15916] Bluetooth: hci5: command tx timeout
[ 1873.295553][T14247] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1873.707316][T20367] block device autoloading is deprecated and will be removed.
[ 1874.325540][T20359] tipc: Started in network mode
[ 1874.331333][T20359] tipc: Node identity 2ac2b549af8c, cluster identity 4711
[ 1874.358566][T20359] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1874.476868][T14247] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1874.551449][T20360] syzkaller0: entered promiscuous mode
[ 1874.556997][T20360] syzkaller0: entered allmulticast mode
[ 1874.607748][T20354] tipc: Resetting bearer <eth:syzkaller0>
[ 1874.702716][T20354] tipc: Disabling bearer <eth:syzkaller0>
[ 1874.858838][T20284] chnl_net:caif_netlink_parms(): no params data found
[ 1875.041029][T15916] Bluetooth: hci5: command tx timeout
[ 1875.125570][T20315] chnl_net:caif_netlink_parms(): no params data found
[ 1878.271500][T20284] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1878.278701][T20284] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1878.336812][T20284] bridge_slave_0: entered allmulticast mode
[ 1878.374450][T20284] bridge_slave_0: entered promiscuous mode
[ 1879.784643][T20284] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1879.800064][T20284] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1879.807924][T20284] bridge_slave_1: entered allmulticast mode
[ 1879.815775][T20284] bridge_slave_1: entered promiscuous mode
[ 1879.888302][T14247] tipc: Left network mode
[ 1881.023390][T20284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1881.055052][T20315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1881.072357][T20315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1881.089036][T20315] bridge_slave_0: entered allmulticast mode
[ 1881.198438][T20315] bridge_slave_0: entered promiscuous mode
[ 1881.225919][T20315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1881.250450][T20315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1881.274673][T20315] bridge_slave_1: entered allmulticast mode
[ 1881.300972][T20315] bridge_slave_1: entered promiscuous mode
[ 1881.394706][T20284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1882.876870][T20315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1884.373529][T20284] team0: Port device team_slave_0 added
[ 1887.863263][T20315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1887.875507][T20284] team0: Port device team_slave_1 added
[ 1887.947613][T20446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1887.967012][T20448] syzkaller0: entered promiscuous mode
[ 1887.986208][T20448] syzkaller0: entered allmulticast mode
[ 1888.025652][T20457] tipc: Resetting bearer <eth:syzkaller0>
[ 1888.109874][T20444] tipc: Resetting bearer <eth:syzkaller0>
[ 1888.212051][T20444] tipc: Disabling bearer <eth:syzkaller0>
[ 1888.424624][T20315] team0: Port device team_slave_0 added
[ 1888.492312][T20284] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1888.499396][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1888.617700][T20284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1888.695222][T20315] team0: Port device team_slave_1 added
[ 1888.889442][T20476] netlink: 'syz.7.2864': attribute type 1 has an invalid length.
[ 1888.897388][T20476] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2864'.
[ 1888.992733][T20284] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1889.017279][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1889.089165][T20284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1889.383711][T20284] hsr_slave_0: entered promiscuous mode
[ 1889.416302][T20284] hsr_slave_1: entered promiscuous mode
[ 1889.429690][T20284] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1889.450767][T20284] Cannot create hsr debugfs directory
[ 1889.457167][T20315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1889.482070][T20315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1889.595550][T20315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1889.895949][T20315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1889.910836][T20315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1889.968993][T20315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1890.157394][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2867'.
[ 1890.225943][T20491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2867'.
[ 1890.263969][T20315] hsr_slave_0: entered promiscuous mode
[ 1890.277208][T20315] hsr_slave_1: entered promiscuous mode
[ 1890.286970][T20315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1890.294858][T20315] Cannot create hsr debugfs directory
[ 1890.374246][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2867'.
[ 1890.662512][T14247] hsr_slave_0: left promiscuous mode
[ 1890.669881][T14247] hsr_slave_1: left promiscuous mode
[ 1890.715331][T14247] veth1_macvtap: left promiscuous mode
[ 1890.722125][T14247] veth0_macvtap: left promiscuous mode
[ 1891.072858][T20496] netlink: 'syz.7.2869': attribute type 1 has an invalid length.
[ 1891.091605][T20496] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2869'.
[ 1893.848344][T14247] bond0 (unregistering): Released all slaves
[ 1894.017037][T20505] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1897.370434][T14247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1897.667166][T14247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.047700][T14247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.175198][T14247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1898.247718][T20284] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1898.498875][T20284] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1898.519362][T20284] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1899.532037][T20284] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1901.340132][T20315] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1902.151805][T20315] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1902.261356][T20315] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1902.390825][T20315] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1904.580175][T20284] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1905.234092][T20526] Set syz1 is full, maxelem 65536 reached
[ 1905.333644][T20284] 8021q: adding VLAN 0 to HW filter on device team0
[ 1905.406642][ T5893] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1905.413864][ T5893] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1905.449043][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1905.456222][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1905.537081][T20315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1905.598727][T20315] 8021q: adding VLAN 0 to HW filter on device team0
[ 1905.668426][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1905.675677][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1905.725548][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1905.732758][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1906.378529][T20284] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1906.804733][T20562] block device autoloading is deprecated and will be removed.
[ 1907.511818][T20315] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1908.182124][T20571] block device autoloading is deprecated and will be removed.
[ 1908.802003][T20315] veth0_vlan: entered promiscuous mode
[ 1908.844794][T20315] veth1_vlan: entered promiscuous mode
[ 1908.915307][T20315] veth0_macvtap: entered promiscuous mode
[ 1908.926405][T20315] veth1_macvtap: entered promiscuous mode
[ 1909.000875][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1909.030816][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1909.050641][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1909.070746][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1909.099798][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1909.135408][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1909.160136][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1909.177791][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1909.210140][T20315] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1909.263592][T14247] hsr_slave_0: left promiscuous mode
[ 1909.269802][T14247] hsr_slave_1: left promiscuous mode
[ 1909.276260][T14247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1909.290684][T14247] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1909.305209][T14247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1909.322819][T14247] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1909.657405][T14247] bridge_slave_1: left allmulticast mode
[ 1909.738698][T14247] bridge_slave_1: left promiscuous mode
[ 1909.806858][T14247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1910.182850][T14247] bridge_slave_0: left allmulticast mode
[ 1910.188578][T14247] bridge_slave_0: left promiscuous mode
[ 1910.195643][T14247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1910.260006][T14247] veth1_macvtap: left promiscuous mode
[ 1910.273982][T14247] veth0_macvtap: left promiscuous mode
[ 1910.285623][T14247] veth1_vlan: left promiscuous mode
[ 1910.294730][T14247] veth0_vlan: left promiscuous mode
[ 1911.289577][T14247] team0 (unregistering): Port device team_slave_1 removed
[ 1911.414116][T14247] team0 (unregistering): Port device team_slave_0 removed
[ 1911.545399][T14247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1911.646624][T14247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1912.893370][T14247] bond0 (unregistering): Released all slaves
[ 1913.226874][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1913.247766][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1913.258507][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1913.269182][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1913.280080][T20315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1913.290954][T20315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1913.308030][T20315] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1913.522539][   T27] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[ 1913.583604][T20315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1913.609831][T20315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1913.673641][T20315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1913.722530][T20315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1913.723695][   T27] usb 8-1: not running at top speed; connect to a high speed hub
[ 1913.774126][   T27] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1913.784801][   T27] usb 8-1: config 1 has no interface number 1
[ 1913.795010][   T27] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1913.817601][T20284] veth0_vlan: entered promiscuous mode
[ 1913.854271][   T27] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1913.865276][   T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1913.873566][   T27] usb 8-1: Product: syz
[ 1913.877894][   T27] usb 8-1: Manufacturer: syz
[ 1913.882596][   T27] usb 8-1: SerialNumber: syz
[ 1914.162553][   T27] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc
[ 1914.186830][   T27] usb 8-1: USB disconnect, device number 18
[ 1914.236717][T20284] veth1_vlan: entered promiscuous mode
[ 1914.402823][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.413328][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.459905][T20284] veth0_macvtap: entered promiscuous mode
[ 1914.498109][T20284] veth1_macvtap: entered promiscuous mode
[ 1914.513923][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.544019][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.572609][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1914.594011][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.607052][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1914.621842][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.635444][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1914.648659][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.659182][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1914.669938][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.683462][T20284] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1914.691875][T17931] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1914.723490][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1914.744460][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.758202][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1914.769410][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.781135][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1914.816214][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.837432][T20284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1914.849937][T20284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1914.871311][T17931] usb 2-1: Using ep0 maxpacket: 8
[ 1914.894854][T17931] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1914.906136][T20284] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1914.918997][T17931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1914.939625][T17931] usb 2-1: Product: syz
[ 1914.950293][T20284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.962603][T17931] usb 2-1: Manufacturer: syz
[ 1914.967282][T17931] usb 2-1: SerialNumber: syz
[ 1914.976047][T20284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1914.992162][T20606] block device autoloading is deprecated and will be removed.
[ 1914.998345][T17931] usb 2-1: config 0 descriptor??
[ 1915.015990][T20284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.033853][T20284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1915.050192][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1915.050261][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.346827][T17931] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1916.124936][ T5954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1916.190948][ T5954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1916.304435][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1916.322696][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1917.273696][T19928] Bluetooth: hci1: command 0x0406 tx timeout
[ 1917.369038][T17931] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[ 1917.891152][T17931] usb 2-1: USB disconnect, device number 2
[ 1920.688579][T20642] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1920.709505][T20642] File: /dev/nullb0 PID: 20642 Comm: syz.7.2901
[ 1920.745601][T20645] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2902'.
[ 1921.141637][T20488] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1921.525034][T20488] usb 2-1: Using ep0 maxpacket: 8
[ 1921.840278][T20488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1921.968385][T20488] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1921.980997][T20488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.101470][T20488] usb 2-1: config 0 descriptor??
[ 1922.110933][T20488] usb 2-1: can't set config #0, error -71
[ 1922.382654][T20488] usb 2-1: USB disconnect, device number 3
[ 1925.385539][T20686] mkiss: ax0: crc mode is auto.
[ 1927.506377][T20708] syz.3.2918 uses obsolete (PF_INET,SOCK_PACKET)
[ 1929.519766][T20715] autofs4:pid:20715:autofs_fill_super: called with bogus options
[ 1931.089304][T20723] hub 2-0:1.0: USB hub found
[ 1931.110544][T20723] hub 2-0:1.0: 1 port detected
[ 1932.526534][T20739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2929'.
[ 1935.478951][ T1188] IPVS: starting estimator thread 0...
[ 1935.724408][T20753] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1938.012042][T20789] UBIFS error (pid: 20789): cannot open "./file0", error -22
[ 1938.014596][T20789] binder: 20783:20789 ioctl 40046210 0 returned -14
[ 1938.031609][T20789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2943'.
[ 1938.903022][T20789] team0: Port device team_slave_1 removed
[ 1939.410876][ T1188] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[ 1939.660954][ T1188] usb 4-1: device descriptor read/64, error -71
[ 1940.466105][T20799] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2946'.
[ 1940.567822][ T1188] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[ 1941.233711][T20803] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2947'.
[ 1941.407573][T20804] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2947'.
[ 1949.590792][ T1188] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 1949.874394][ T1188] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1949.887121][ T1188] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1949.898446][ T1188] usb 4-1: can't read configurations, error -71
[ 1949.925088][T15916] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1949.928039][T15916] Bluetooth: hci3: Injecting HCI hardware error event
[ 1949.933541][T19928] Bluetooth: hci3: hardware error 0x00
[ 1951.894005][T20857] block device autoloading is deprecated and will be removed.
[ 1952.323649][T19928] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1953.311451][T20872] futex_wake_op: syz.7.2964 tries to shift op by -1; fix this program
[ 1960.346521][T19928] Bluetooth: hci1: unexpected event for opcode 0x001c
[ 1963.659419][T20958] raw_sendmsg: syz.3.2989 forgot to set AF_INET. Fix it!
[ 1968.307771][T20994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2999'.
[ 1969.081503][T21006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1969.578273][T21012] random: crng reseeded on system resumption
[ 1972.694796][   T28] audit: type=1400 audit(1754234314.387:705): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=21030 comm="syz.7.3011"
[ 1972.873733][T21035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3012'.
[ 1976.631118][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.638081][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1981.037806][T21073] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3021'.
[ 1981.895767][ T5798] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1982.360664][ T5798] usb 4-1: Using ep0 maxpacket: 16
[ 1982.376777][ T5798] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 1982.405829][ T5798] usb 4-1: config 0 has no interface number 0
[ 1982.426405][ T5798] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1982.460592][ T5798] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1982.487525][ T5798] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1982.498022][ T5798] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1982.507621][ T5798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1982.525998][ T5798] usb 4-1: Product: syz
[ 1982.530368][ T5798] usb 4-1: Manufacturer: syz
[ 1982.535081][ T5798] usb 4-1: SerialNumber: syz
[ 1982.542487][ T5798] usb 4-1: config 0 descriptor??
[ 1982.551024][T21077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1982.558403][T21077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1982.570768][T17931] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1982.723908][T21086] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3026'.
[ 1982.780606][T17931] usb 8-1: Using ep0 maxpacket: 16
[ 1982.800553][T17931] usb 8-1: config 0 has an invalid interface number: 176 but max is 0
[ 1982.810000][T17931] usb 8-1: config 0 has no interface number 0
[ 1982.826179][T17931] usb 8-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=18.b3
[ 1982.826228][T21077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1982.851752][T17931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1982.871645][T17931] usb 8-1: Product: syz
[ 1982.878490][T17931] usb 8-1: Manufacturer: syz
[ 1982.892246][T17931] usb 8-1: SerialNumber: syz
[ 1982.900277][T17931] usb 8-1: config 0 descriptor??
[ 1982.914607][T17931] usb 8-1: bad CDC descriptors
[ 1982.928965][T21077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1983.137928][  T786] usb 8-1: USB disconnect, device number 19
[ 1984.695099][ T5798] CoreChips: probe of 4-1:0.41 failed with error -71
[ 1984.722602][T21098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3029'.
[ 1984.831417][T21099] atomic_op ffff88805c1fa998 conn xmit_atomic 0000000000000000
[ 1984.868036][ T5798] usb 4-1: USB disconnect, device number 6
[ 1985.982858][T21119] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3032'.
[ 1987.482772][T21128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3039'.
[ 1987.593304][T21128] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3039'.
[ 1988.746022][T21138] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1989.754811][T21144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1989.762448][T21144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1989.976385][   T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1990.235589][   T27] usb 2-1: Using ep0 maxpacket: 16
[ 1990.244143][   T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1990.288596][   T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1990.346438][   T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1990.401213][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1990.430764][   T27] usb 2-1: Product: syz
[ 1990.435110][   T27] usb 2-1: Manufacturer: syz
[ 1990.461518][   T27] usb 2-1: SerialNumber: syz
[ 1992.006665][   T27] usb 2-1: 0:2 : does not exist
[ 1992.053460][   T27] usb 2-1: unit 9 not found!
[ 1992.150958][   T27] usb 2-1: USB disconnect, device number 4
[ 1992.413796][T21161] 9pnet_fd: Insufficient options for proto=fd
[ 1992.924148][T21167] kAFS: No cell specified
[ 1994.109159][T21174] 9pnet_fd: Insufficient options for proto=fd
[ 1997.769618][T21213] kAFS: No cell specified
[ 1997.840849][T19928] Bluetooth: hci1: command 0x0406 tx timeout
[ 1998.562039][T21214] overlayfs: failed to resolve './file0': -2
[ 1998.780604][  T786] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1999.759872][  T786] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1999.768955][  T786] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1999.814216][  T786] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1999.841108][  T786] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1999.860888][  T786] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1999.892814][  T786] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1999.910686][  T786] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1999.941428][  T786] usb 8-1: Product: syz
[ 1999.968153][  T786] usb 8-1: Manufacturer: syz
[ 2000.009706][  T786] cdc_wdm 8-1:1.0: skipping garbage
[ 2000.040781][  T786] cdc_wdm 8-1:1.0: skipping garbage
[ 2000.087728][  T786] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 2000.104525][  T786] cdc_wdm 8-1:1.0: Unknown control protocol
[ 2000.461234][  T786] usb 8-1: USB disconnect, device number 20
[ 2000.475113][T21230] vivid-007: =================  START STATUS  =================
[ 2000.484143][T21230] vivid-007: Enable Output Cropping: true
[ 2000.491162][T21230] vivid-007: Enable Output Composing: true
[ 2000.498241][T21230] vivid-007: Enable Output Scaler: true
[ 2000.504382][T21230] vivid-007: Tx RGB Quantization Range: Automatic
[ 2000.511395][T21230] vivid-007: Transmit Mode: HDMI
[ 2000.516563][T21230] vivid-007: Display Present: true inactive
[ 2000.522959][T21230] vivid-007: Hotplug Present: 0x00000001
[ 2000.528827][T21230] vivid-007: RxSense Present: 0x00000001
[ 2000.535012][T21230] vivid-007: EDID Present: 0x00000001
[ 2000.540799][T21230] vivid-007: ==================  END STATUS  ==================
[ 2001.589362][   T28] audit: type=1326 audit(1754234343.277:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.3.3073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f160d18eb69 code=0x0
[ 2001.668332][T21240] syz.1.3068 (21240) used greatest stack depth: 17960 bytes left
[ 2002.820611][T17931] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 2003.030656][T17931] usb 8-1: Using ep0 maxpacket: 32
[ 2003.081148][T17931] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2004.120583][T17931] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2004.133433][T17931] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[ 2004.150198][T17931] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2004.158485][T17931] usb 8-1: Product: syz
[ 2004.164105][T17931] usb 8-1: Manufacturer: syz
[ 2004.168867][T17931] usb 8-1: SerialNumber: syz
[ 2004.185444][T17931] usb 8-1: config 0 descriptor??
[ 2004.321520][T17931] viperboard 8-1:0.0: version 0.00 found at bus 008 address 021
[ 2004.422801][T17931] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[ 2004.450919][T17931] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[ 2005.542969][T17931] usb 8-1: USB disconnect, device number 21
[ 2010.815557][T15916] Bluetooth: hci1: unexpected event for opcode 0x001c
[ 2011.112340][T21354] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3095'.
[ 2011.573081][T15916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[ 2011.584453][T15916] CPU: 1 PID: 15916 Comm: kworker/u5:0 Not tainted 6.6.101-syzkaller #0
[ 2011.592969][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2011.603128][T15916] Workqueue: hci2 hci_rx_work
[ 2011.608002][T15916] Call Trace:
[ 2011.611328][T15916]  <TASK>
[ 2011.614310][T15916]  dump_stack_lvl+0x16c/0x230
[ 2011.619106][T15916]  ? show_regs_print_info+0x20/0x20
[ 2011.624358][T15916]  ? load_image+0x3b0/0x3b0
[ 2011.628988][T15916]  sysfs_create_dir_ns+0x256/0x280
[ 2011.634207][T15916]  ? hci_rx_work+0x43a/0xd80
[ 2011.638856][T15916]  ? sysfs_warn_dup+0xa0/0xa0
[ 2011.643658][T15916]  ? do_raw_spin_unlock+0x121/0x230
[ 2011.648942][T15916]  kobject_add_internal+0x6b8/0xc70
[ 2011.654299][T15916]  kobject_add+0x156/0x220
[ 2011.658783][T15916]  ? __rwlock_init+0x150/0x150
[ 2011.663682][T15916]  ? kobject_init+0x1e0/0x1e0
[ 2011.668402][T15916]  ? _raw_spin_unlock+0x28/0x40
[ 2011.673369][T15916]  ? get_device_parent+0x366/0x390
[ 2011.678531][T15916]  device_add+0x408/0xc20
[ 2011.682999][T15916]  hci_conn_add_sysfs+0xd5/0x1e0
[ 2011.688098][T15916]  le_conn_complete_evt+0xc37/0x1220
[ 2011.693463][T15916]  ? hci_event_packet+0x4a7/0x1210
[ 2011.698654][T15916]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 2011.704956][T15916]  ? __copy_skb_header+0xa7/0x550
[ 2011.710103][T15916]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 2011.715809][T15916]  ? skb_pull_data+0xfb/0x200
[ 2011.720552][T15916]  hci_le_conn_complete_evt+0x187/0x440
[ 2011.726224][T15916]  ? hci_remote_host_features_evt+0x160/0x160
[ 2011.732314][T15916]  hci_event_packet+0x795/0x1210
[ 2011.737281][T15916]  ? bis_list+0x290/0x290
[ 2011.741633][T15916]  ? lockdep_hardirqs_on+0x98/0x150
[ 2011.746856][T15916]  ? hci_send_to_monitor+0xd7/0x4f0
[ 2011.752081][T15916]  hci_rx_work+0x43a/0xd80
[ 2011.756553][T15916]  ? process_scheduled_works+0x957/0x15b0
[ 2011.762302][T15916]  process_scheduled_works+0xa45/0x15b0
[ 2011.767891][T15916]  ? assign_work+0x400/0x400
[ 2011.772513][T15916]  ? assign_work+0x39e/0x400
[ 2011.777162][T15916]  worker_thread+0xa55/0xfc0
[ 2011.781779][T15916]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 2011.787725][T15916]  ? _raw_spin_unlock+0x40/0x40
[ 2011.792609][T15916]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 2011.798574][T15916]  kthread+0x2fa/0x390
[ 2011.802699][T15916]  ? pr_cont_work+0x560/0x560
[ 2011.807400][T15916]  ? kthread_blkcg+0xd0/0xd0
[ 2011.812012][T15916]  ret_from_fork+0x48/0x80
[ 2011.816468][T15916]  ? kthread_blkcg+0xd0/0xd0
[ 2011.821087][T15916]  ret_from_fork_asm+0x11/0x20
[ 2011.826000][T15916]  </TASK>
[ 2011.833115][T15916] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 2011.847573][T15916] Bluetooth: hci2: failed to register connection device
[ 2015.147310][T21394] netlink: 'syz.4.3108': attribute type 1 has an invalid length.
[ 2017.951447][ T5842] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 2018.161535][ T5842] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[ 2018.170038][ T5842] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 2018.298970][ T5842] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2018.305781][T21411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'.
[ 2018.318963][ T5842] usb 8-1: config 220 has no interface number 2
[ 2018.334757][ T5842] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2018.358467][ T5842] usb 8-1: config 220 interface 0 has no altsetting 0
[ 2018.368480][ T5842] usb 8-1: config 220 interface 76 has no altsetting 0
[ 2018.376156][ T5842] usb 8-1: config 220 interface 1 has no altsetting 0
[ 2018.387191][ T5842] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2018.397910][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.413975][ T5842] usb 8-1: Product: syz
[ 2018.422881][ T5842] usb 8-1: Manufacturer: syz
[ 2018.428777][ T5842] usb 8-1: SerialNumber: syz
[ 2018.612469][T21415] mmap: syz.3.3114 (21415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 2018.655058][ T5842] usb 8-1: selecting invalid altsetting 0
[ 2018.695620][ T5842] usb 8-1: Found UVC 7.01 device syz (8086:0b07)
[ 2018.703429][ T5842] usb 8-1: No valid video chain found.
[ 2018.727888][ T5842] usb 8-1: selecting invalid altsetting 0
[ 2018.735194][ T5842] usbtest: probe of 8-1:220.1 failed with error -22
[ 2018.772159][ T5842] usb 8-1: USB disconnect, device number 22
[ 2021.790711][T20222] IPVS: starting estimator thread 0...
[ 2021.930962][T21431] IPVS: using max 17 ests per chain, 40800 per kthread
[ 2022.941580][ T1188] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2023.340611][ T1188] usb 5-1: Using ep0 maxpacket: 8
[ 2023.348041][ T1188] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 2023.356590][ T1188] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2023.369713][ T1188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2023.390189][ T1188] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2023.400382][ T1188] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2023.413731][ T1188] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2023.422966][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2023.640714][ T1188] usb 5-1: GET_CAPABILITIES returned 0
[ 2023.648372][ T1188] usbtmc 5-1:16.0: can't read capabilities
[ 2023.874624][ T5855] usb 5-1: USB disconnect, device number 11
[ 2029.950725][T20222] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2030.266361][T20222] usb 5-1: Using ep0 maxpacket: 8
[ 2030.395162][T20222] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 2030.434584][T20222] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2030.643687][T20222] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2030.680593][T20222] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2030.699418][T20222] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2030.734685][T20222] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2030.767254][T20222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2031.028323][T20222] usb 5-1: usb_control_msg returned -32
[ 2031.034224][T20222] usbtmc 5-1:16.0: can't read capabilities
[ 2032.120919][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3140'.
[ 2032.135839][T21509] warning: `syz.7.3138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 2033.425420][   T27] usb 5-1: USB disconnect, device number 12
[ 2033.763101][ T1188] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2033.930251][T21528] (null): rxe_set_mtu: Set mtu to 4096
[ 2033.988457][ T1188] usb 4-1: Using ep0 maxpacket: 16
[ 2034.780187][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 2034.806968][T21528] lo speed is unknown, defaulting to 1000
[ 2034.819003][T21528] lo speed is unknown, defaulting to 1000
[ 2034.829183][T21528] lo speed is unknown, defaulting to 1000
[ 2034.951955][T21528] infiniband s
z1: set active
[ 2034.957137][T21528] infiniband s
z1: added lo
[ 2035.007401][T21528] RDS/IB: s
z1: added
[ 2035.012817][T21528] smc: adding ib device s
z1 with port count 1
[ 2035.019336][T21528] smc:    ib device s
z1 port 1 has pnetid 
[ 2035.033234][ T5842] lo speed is unknown, defaulting to 1000
[ 2035.043893][T21528] lo speed is unknown, defaulting to 1000
[ 2035.181032][T21528] lo speed is unknown, defaulting to 1000
[ 2035.307390][T21528] lo speed is unknown, defaulting to 1000
[ 2035.434364][T21528] lo speed is unknown, defaulting to 1000
[ 2035.560001][T21528] lo speed is unknown, defaulting to 1000
[ 2035.689331][T17931] lo speed is unknown, defaulting to 1000
[ 2035.732944][ T1188] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 2035.753562][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2035.768358][ T1188] usb 4-1: Product: syz
[ 2035.772929][ T1188] usb 4-1: Manufacturer: syz
[ 2035.777603][ T1188] usb 4-1: SerialNumber: syz
[ 2035.785929][ T1188] usb 4-1: config 0 descriptor??
[ 2035.793072][ T1188] hub 4-1:0.0: bad descriptor, ignoring hub
[ 2035.802290][ T1188] hub: probe of 4-1:0.0 failed with error -5
[ 2035.816690][ T1188] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[ 2037.265294][T21541] UBIFS error (pid: 21541): cannot open "./file0", error -22
[ 2037.910647][ T1188] usb 4-1: USB disconnect, device number 7
[ 2037.935331][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.941826][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 2039.793335][T21548] autofs4:pid:21548:autofs_fill_super: called with bogus options
[ 2040.720811][ T1188] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2040.912643][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2040.924737][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2040.956699][ T1188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2041.000203][ T1188] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2041.028863][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2041.059923][ T1188] usb 5-1: config 0 descriptor??
[ 2042.105553][ T1188] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[ 2042.496856][ T1188] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2042.679436][ T1188] usb 5-1: USB disconnect, device number 13
[ 2047.305134][   T28] audit: type=1326 audit(1754234388.567:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.696278][   T28] audit: type=1326 audit(1754234388.567:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.718653][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2047.796705][   T28] audit: type=1326 audit(1754234388.567:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.819361][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2047.836398][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3167'.
[ 2047.868181][T21613] syzkaller0: entered promiscuous mode
[ 2047.877245][T21613] syzkaller0: entered allmulticast mode
[ 2047.899409][   T28] audit: type=1326 audit(1754234388.577:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.935264][   T28] audit: type=1326 audit(1754234388.587:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.958202][   T28] audit: type=1326 audit(1754234388.597:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2047.993363][   T28] audit: type=1326 audit(1754234388.607:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2048.031968][   T28] audit: type=1326 audit(1754234388.617:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2048.054448][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2048.115664][   T28] audit: type=1326 audit(1754234388.637:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2048.138012][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2048.201467][   T28] audit: type=1326 audit(1754234388.637:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.1.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19e4b8eb69 code=0x7ff00000
[ 2048.769873][T21619] wg1 speed is unknown, defaulting to 1000
[ 2048.785195][T21619] wg1 speed is unknown, defaulting to 1000
[ 2048.831770][T21619] wg1 speed is unknown, defaulting to 1000
[ 2048.942738][T21619] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 2049.100940][T21619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 2049.263120][T21619] wg1 speed is unknown, defaulting to 1000
[ 2049.335090][T21619] wg1 speed is unknown, defaulting to 1000
[ 2049.410980][T21619] wg1 speed is unknown, defaulting to 1000
[ 2049.427104][T21619] wg1 speed is unknown, defaulting to 1000
[ 2049.546060][T21619] wg1 speed is unknown, defaulting to 1000
[ 2050.913011][T21632] Bluetooth: MGMT ver 1.22
[ 2055.209968][T21654] qrtr: Invalid version 0
[ 2056.980522][T21674] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 2057.787268][T21684] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3189'.
[ 2058.096441][T21690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3192'.
[ 2059.309734][T21698] pim6reg: entered allmulticast mode
[ 2060.888136][T21705] random: crng reseeded on system resumption
[ 2072.267967][T21788] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3222'.
[ 2076.469038][T21818] gretap0: entered promiscuous mode
[ 2076.477527][T21816] gretap0: left promiscuous mode
[ 2080.711198][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2081.146917][T21855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3240'.
[ 2081.232427][ T5855] usb 4-1: Using ep0 maxpacket: 32
[ 2081.254288][ T5855] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 2081.263791][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2081.272011][ T5855] usb 4-1: Product: syz
[ 2081.282153][ T5855] usb 4-1: Manufacturer: syz
[ 2081.295895][ T5855] usb 4-1: SerialNumber: syz
[ 2081.521703][ T5855] usb 4-1: config 0 descriptor??
[ 2081.946043][ T5855] airspy 4-1:0.0: usb_control_msg() failed -71 request 09
[ 2081.965238][ T5855] airspy 4-1:0.0: Could not detect board
[ 2081.965331][ T5855] airspy: probe of 4-1:0.0 failed with error -71
[ 2081.967685][ T5855] usb 4-1: USB disconnect, device number 8
[ 2082.119886][T21862] loop6: detected capacity change from 0 to 524287999
[ 2082.287138][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.296626][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.317277][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.326504][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.379111][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.388334][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.406373][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.415637][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.434815][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.444067][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.463297][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.472575][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.490988][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.500236][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.508652][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.517889][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.528832][T21862] ldm_validate_partition_table(): Disk read failed.
[ 2082.560601][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.569789][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.594412][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2082.603738][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[ 2082.690658][T21862] Dev loop6: unable to read RDB block 0
[ 2082.810882][T21862]  loop6: unable to read partition table
[ 2082.833667][T21862] loop_reread_partitions: partition scan of loop6 (3Ÿ¾xИCÖ

) failed (rc=-5)
[ 2083.120587][T17892] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[ 2083.343097][T17892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2083.380654][T17892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2083.433037][T17892] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2083.451905][T17892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2083.463325][T17892] usb 4-1: config 0 descriptor??
[ 2083.471749][T17892] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2083.478847][T17892] dvb-usb: bulk message failed: -22 (3/0)
[ 2083.497166][T17892] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2083.528532][T19928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2083.550642][T19928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2083.559885][T19928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2083.574904][T19928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2083.584269][T19928] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2083.591767][T19928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2083.782449][T17892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2083.790407][T17892] usb 4-1: media controller created
[ 2083.792316][T21868] dvb-usb: bulk message failed: -22 (2/0)
[ 2083.801836][T17892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2083.873644][T17892] dvb-usb: bulk message failed: -22 (6/0)
[ 2083.879620][T21869] lo speed is unknown, defaulting to 1000
[ 2083.880227][T17892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2083.897686][T17892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[ 2083.915902][T17892] dvb-usb: schedule remote query interval to 150 msecs.
[ 2083.923088][T17892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2084.083844][T17892] dvb-usb: bulk message failed: -22 (1/0)
[ 2084.090153][T17892] dvb-usb: error while querying for an remote control event.
[ 2084.207292][T21868] Bluetooth: MGMT ver 1.22
[ 2084.229159][T21868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2084.308200][T21868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2084.359189][ T5842] usb 4-1: USB disconnect, device number 9
[ 2084.409757][ T5842] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2084.512463][ T1075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2084.718541][ T1075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2085.079370][T21869] wg1 speed is unknown, defaulting to 1000
[ 2085.460980][ T1075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2085.692286][T19928] Bluetooth: hci0: command tx timeout
[ 2085.836938][ T1075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2087.393497][T21889] block device autoloading is deprecated and will be removed.
[ 2090.132253][T19928] Bluetooth: hci0: command tx timeout
[ 2090.140126][T21869] chnl_net:caif_netlink_parms(): no params data found
[ 2090.806330][ T1075] tipc: Left network mode
[ 2090.919285][T21869] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2090.927088][T21869] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2090.934560][T21869] bridge_slave_0: entered allmulticast mode
[ 2090.942268][T21869] bridge_slave_0: entered promiscuous mode
[ 2090.951630][T21869] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2090.958935][T21869] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2090.967250][T21869] bridge_slave_1: entered allmulticast mode
[ 2091.043159][T21869] bridge_slave_1: entered promiscuous mode
[ 2091.083428][T21869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2091.159344][T21869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2091.249059][T21869] team0: Port device team_slave_0 added
[ 2091.274530][T21869] team0: Port device team_slave_1 added
[ 2091.454823][T21869] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2091.462241][T21869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2091.509845][T21869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2091.524301][T21869] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2091.532393][T21869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2091.559157][T21869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2093.207995][T19928] Bluetooth: hci0: command tx timeout
[ 2093.490417][T21869] hsr_slave_0: entered promiscuous mode
[ 2093.600308][T21869] hsr_slave_1: entered promiscuous mode
[ 2094.965367][T20488] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 2095.155643][T20488] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 2095.240598][T20488] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.257353][T20488] usb 8-1: Product: syz
[ 2095.287142][T20488] usb 8-1: Manufacturer: syz
[ 2095.297192][T19928] Bluetooth: hci0: command tx timeout
[ 2095.303210][T20488] usb 8-1: SerialNumber: syz
[ 2095.311103][T20488] usb 8-1: config 0 descriptor??
[ 2095.319605][T20488] ch341 8-1:0.0: ch341-uart converter detected
[ 2096.401044][T20488] usb 8-1: failed to receive control message: -110
[ 2096.407678][T20488] ch341-uart: probe of ttyUSB0 failed with error -110
[ 2097.881798][ T5842] usb 8-1: USB disconnect, device number 23
[ 2097.889120][ T5842] ch341 8-1:0.0: device disconnected
[ 2099.179239][T21953] netlink: 'syz.4.3266': attribute type 4 has an invalid length.
[ 2099.381746][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.388196][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 2100.565611][ T1075] hsr_slave_0: left promiscuous mode
[ 2100.599552][ T1075] hsr_slave_1: left promiscuous mode
[ 2100.640015][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2100.691796][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2100.737686][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2100.760016][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2100.793009][ T1075] bridge_slave_1: left allmulticast mode
[ 2100.798762][ T1075] bridge_slave_1: left promiscuous mode
[ 2100.806754][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2100.825441][ T1075] bridge_slave_0: left allmulticast mode
[ 2100.831353][ T1075] bridge_slave_0: left promiscuous mode
[ 2100.838114][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2100.971344][ T1075] veth1_macvtap: left promiscuous mode
[ 2100.976936][ T1075] veth0_macvtap: left promiscuous mode
[ 2100.989372][ T1075] veth1_vlan: left promiscuous mode
[ 2100.995025][ T1075] veth0_vlan: left promiscuous mode
[ 2101.268557][ T1075] infiniband s
z1: set down
[ 2101.297266][ T1075] pim6reg (unregistering): left allmulticast mode
[ 2102.456575][ T1075] team0 (unregistering): Port device team_slave_1 removed
[ 2102.547778][ T1075] team0 (unregistering): Port device team_slave_0 removed
[ 2102.639667][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2102.727897][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2103.815108][ T1075] bond0 (unregistering): Released all slaves
[ 2103.956734][T21322] smc: removing ib device s
z1
[ 2103.986200][T17892] wg1 speed is unknown, defaulting to 1000
[ 2103.992653][ T5842] lo speed is unknown, defaulting to 1000
[ 2104.105116][T21869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 2104.213635][T21869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 2104.237104][T21869] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 2104.544280][T21980] bpq0: entered allmulticast mode
[ 2104.579051][T21869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 2105.851564][T21869] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2105.945274][T21869] 8021q: adding VLAN 0 to HW filter on device team0
[ 2106.054553][T16029] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2106.061806][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2106.118955][T16029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2106.126417][T16029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2107.790644][T21869] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2107.941119][T21869] veth0_vlan: entered promiscuous mode
[ 2107.985722][T21869] veth1_vlan: entered promiscuous mode
[ 2108.080036][T21869] veth0_macvtap: entered promiscuous mode
[ 2108.101292][T21869] veth1_macvtap: entered promiscuous mode
[ 2108.144947][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2108.172710][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2108.188984][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2108.202729][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2108.220321][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2108.238310][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2108.248878][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2108.310269][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2108.858129][T21869] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2108.951719][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2108.980390][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2109.001114][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2109.030592][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2109.055788][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2109.088743][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2109.110233][T21869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2109.131091][T21869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2109.172306][T21869] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2109.418030][T22013] netlink: 'syz.4.3278': attribute type 8 has an invalid length.
[ 2109.467068][T21869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2109.490656][T21869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2109.499467][T21869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2109.529987][T21869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2110.327654][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2110.535637][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2111.391848][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2111.399759][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2113.309456][T22042] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3290'.
[ 2114.481472][ T5842] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 2114.840353][ T5842] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 2114.851920][ T5829] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 2114.860937][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2114.873563][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2114.901448][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 2114.965600][ T5842] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 2115.010792][ T5842] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 2115.019068][ T5842] usb 4-1: Manufacturer: syz
[ 2115.109769][ T5842] usb 4-1: config 0 descriptor??
[ 2115.340766][ T5829] usb 8-1: Using ep0 maxpacket: 16
[ 2115.365003][ T5829] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2115.390489][ T5829] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2115.430656][ T5829] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2115.468185][ T5829] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2115.485546][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.505234][ T5829] usb 8-1: Product: syz
[ 2115.509646][ T5829] usb 8-1: Manufacturer: syz
[ 2115.513569][T22058] netlink: 'syz.0.3292': attribute type 20 has an invalid length.
[ 2115.525508][ T5842] appleir 0003:05AC:8243.0006: unknown main item tag 0x0
[ 2115.538916][ T5829] usb 8-1: SerialNumber: syz
[ 2115.554970][ T5842] appleir 0003:05AC:8243.0006: No inputs registered, leaving
[ 2115.671862][ T5842] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 2116.159646][ T5829] usb 8-1: 2:1 : format type 0 is detected, processed as PCM
[ 2116.480623][ T5829] usb 8-1: 2:1: cannot set freq 9338507 to ep 0x82
[ 2116.790158][ T5829] usb 8-1: USB disconnect, device number 24
[ 2117.920918][ T1188] usb 4-1: USB disconnect, device number 10
[ 2119.126304][T22080] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3299'.
[ 2119.137086][T22080] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3299'.
[ 2119.267665][ T5855] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2119.492570][ T5855] usb 5-1: Using ep0 maxpacket: 32
[ 2119.560161][ T5855] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[ 2119.577524][ T5855] usb 5-1: config 0 has no interface number 0
[ 2119.593688][ T5855] usb 5-1: config 0 interface 184 has no altsetting 0
[ 2119.630681][T22079] 9pnet_fd: Insufficient options for proto=fd
[ 2119.875686][ T5855] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2119.892543][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2119.938437][ T5855] usb 5-1: Product: syz
[ 2119.950183][ T5855] usb 5-1: Manufacturer: syz
[ 2119.975421][ T5855] usb 5-1: SerialNumber: syz
[ 2120.012971][ T5855] usb 5-1: config 0 descriptor??
[ 2120.063836][ T5855] smsc75xx v1.0.0
[ 2120.754620][ T5855] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2120.801985][ T5855] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 2120.860008][ T5855] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 2120.890072][ T5855] smsc75xx: probe of 5-1:0.184 failed with error -71
[ 2120.940624][ T5855] usb 5-1: USB disconnect, device number 14
[ 2121.883390][T22106] capability: warning: `syz.4.3302' uses deprecated v2 capabilities in a way that may be insecure
[ 2122.918571][T22121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2124.211834][T22134] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3314'.
[ 2124.766736][T22143] random: crng reseeded on system resumption
[ 2129.358714][T22167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2129.550667][T22166] syz.7.3323 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 2132.343373][T22181] netlink: 'syz.3.3328': attribute type 10 has an invalid length.
[ 2132.355516][T22181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2132.362814][T22181] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2132.370460][T22181] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2132.377625][T22181] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2132.414754][T22181] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 2136.740999][ T5901] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2136.741065][ T5829] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 2137.124112][ T5829] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2137.132908][ T5829] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config
[ 2137.212532][ T5829] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2137.225865][ T5829] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2137.250661][ T5901] usb 5-1: Using ep0 maxpacket: 16
[ 2137.270196][ T5901] usb 5-1: config 252 has an invalid interface number: 15 but max is 0
[ 2137.280266][ T5901] usb 5-1: config 252 has no interface number 0
[ 2137.288220][ T5901] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 2137.319041][ T5901] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 2137.330254][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2137.338654][ T5901] usb 5-1: Product: syz
[ 2137.343091][ T5901] usb 5-1: Manufacturer: syz
[ 2137.347984][ T5901] usb 5-1: SerialNumber: syz
[ 2137.974357][ T5829] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2138.016332][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2138.040615][ T5901] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2138.060269][ T5829] usb 4-1: Product: syz
[ 2138.080519][ T5829] usb 4-1: Manufacturer: syz
[ 2138.108333][ T5829] cdc_wdm 4-1:1.0: skipping garbage
[ 2138.114265][ T5829] cdc_wdm: probe of 4-1:1.0 failed with error -22
[ 2138.196895][T21322] usb 5-1: Failed to submit usb control message: -71
[ 2138.210820][ T5829] usb 5-1: USB disconnect, device number 15
[ 2138.218072][T21322] usb 5-1: unable to send the bmi data to the device: -71
[ 2138.241355][T21322] usb 5-1: unable to get target info from device
[ 2138.248045][T21322] usb 5-1: could not get target info (-71)
[ 2138.260381][T21322] usb 5-1: could not probe fw (-71)
[ 2139.011453][T20488] usb 4-1: USB disconnect, device number 11
[ 2140.952275][T22257] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2141.021117][T22257] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2141.038882][T22257] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2141.741219][T20873] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN
[ 2141.753037][T20873] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[ 2141.761475][T20873] CPU: 0 PID: 20873 Comm: kbnepd ûyk5€²C Not tainted 6.6.101-syzkaller #0
[ 2141.770076][T20873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 2141.780165][T20873] RIP: 0010:klist_del+0x49/0x110
[ 2141.785134][T20873] Code: 2c f7 49 89 dc 49 c1 ec 03 43 80 3c 3c 00 74 08 48 89 df e8 a9 e3 83 f7 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8b e3 83 f7 49 8b 46 58 48 89 04 24 4c 89
[ 2141.804763][T20873] RSP: 0018:ffffc9000bca78a0 EFLAGS: 00010202
[ 2141.810850][T20873] RAX: 000000000000000b RBX: ffff88814d023c60 RCX: ffff8880635e8000
[ 2141.818834][T20873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[ 2141.826820][T20873] RBP: ffffc9000bca79d0 R08: ffff88802d1c6d93 R09: 1ffff11005a38db2
[ 2141.834810][T20873] R10: dffffc0000000000 R11: ffffed1005a38db3 R12: 1ffff11029a0478c
[ 2141.842814][T20873] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000
[ 2141.850819][T20873] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2141.859769][T20873] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2141.866367][T20873] CR2: 0000001b3101bff8 CR3: 0000000069412000 CR4: 00000000003506f0
[ 2141.874352][T20873] Call Trace:
[ 2141.877647][T20873]  <TASK>
[ 2141.880595][T20873]  device_del+0x280/0x900
[ 2141.884960][T20873]  ? kill_device+0x160/0x160
[ 2141.889576][T20873]  ? netdev_unregister_kobject+0x181/0x250
[ 2141.895551][T20873]  unregister_netdevice_many_notify+0x135e/0x1810
[ 2141.902047][T20873]  ? unregister_netdevice_many+0x20/0x20
[ 2141.907710][T20873]  ? mutex_lock_nested+0x20/0x20
[ 2141.912679][T20873]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 2141.918681][T20873]  ? read_lock_is_recursive+0x20/0x20
[ 2141.924077][T20873]  ? lock_chain_count+0x20/0x20
[ 2141.928950][T20873]  unregister_netdev+0x148/0x1b0
[ 2141.933918][T20873]  ? unlist_netdevice+0x730/0x730
[ 2141.938965][T20873]  ? remove_wait_queue+0x33/0x120
[ 2141.944014][T20873]  bnep_session+0x2903/0x2af0
[ 2141.948790][T20873]  ? finish_task_switch+0x265/0x920
[ 2141.954019][T20873]  ? bnep_add_connection+0xbc0/0xbc0
[ 2141.959322][T20873]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 2141.965270][T20873]  ? _raw_spin_unlock+0x40/0x40
[ 2141.970143][T20873]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 2141.976061][T20873]  ? wait_woken+0x180/0x180
[ 2141.980579][T20873]  ? __kthread_parkme+0x7a/0x1c0
[ 2141.985537][T20873]  ? __kthread_parkme+0x162/0x1c0
[ 2141.990588][T20873]  kthread+0x2fa/0x390
[ 2141.994671][T20873]  ? bnep_add_connection+0xbc0/0xbc0
[ 2141.999989][T20873]  ? kthread_blkcg+0xd0/0xd0
[ 2142.004671][T20873]  ret_from_fork+0x48/0x80
[ 2142.009112][T20873]  ? kthread_blkcg+0xd0/0xd0
[ 2142.013723][T20873]  ret_from_fork_asm+0x11/0x20
[ 2142.018518][T20873]  </TASK>
[ 2142.021556][T20873] Modules linked in:
[ 2142.031215][T20873] ---[ end trace 0000000000000000 ]---
[ 2142.036840][T20873] RIP: 0010:klist_del+0x49/0x110
[ 2142.041961][T20873] Code: 2c f7 49 89 dc 49 c1 ec 03 43 80 3c 3c 00 74 08 48 89 df e8 a9 e3 83 f7 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 8b e3 83 f7 49 8b 46 58 48 89 04 24 4c 89
[ 2142.062005][T20873] RSP: 0018:ffffc9000bca78a0 EFLAGS: 00010202
[ 2142.068230][T20873] RAX: 000000000000000b RBX: ffff88814d023c60 RCX: ffff8880635e8000
[ 2142.076872][T20873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[ 2142.090874][T20873] RBP: ffffc9000bca79d0 R08: ffff88802d1c6d93 R09: 1ffff11005a38db2
[ 2142.097172][T22257] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 2142.098912][T20873] R10: dffffc0000000000 R11: ffffed1005a38db3 R12: 1ffff11029a0478c
[ 2142.098932][T20873] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000
[ 2142.098947][T20873] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2142.098965][T20873] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2142.098979][T20873] CR2: 0000001b3101bff8 CR3: 0000000075013000 CR4: 00000000003506f0
[ 2142.098998][T20873] Kernel panic - not syncing: Fatal exception
[ 2142.099332][T20873] Kernel Offset: disabled