last executing test programs:

15m15.788688643s ago: executing program 1 (id=9):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x101)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc0e4ddb06f9ec52a5ccf27680d696", 0xffc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)="f1210e92e468f2fb04", 0x9}], 0x1}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000bc0)=[{0x0}, {0x0, 0x11000}, {&(0x7f0000000ac0)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x4, 0x800)

15m15.560844865s ago: executing program 1 (id=10):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'})
socket$netlink(0x10, 0x3, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380)='ntfs3\x00', 0x400080, 0x0)

15m14.351415068s ago: executing program 1 (id=12):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffff48b, 0x8)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_clone(0x10000100, 0x0, 0x0, 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

15m7.694179149s ago: executing program 1 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x12f451, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

15m6.689206907s ago: executing program 1 (id=32):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2})
r3 = socket(0x2c, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000003340), &(0x7f0000003380)=@tcp=r3}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340)}, 0x20)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000b00)={0x1c, &(0x7f00000009c0)={0x40, 0xe, 0x11, "055296be87468a208b4fe36cc154426764"}, 0x0, 0x0})

15m5.169834755s ago: executing program 1 (id=37):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x8008b705, &(0x7f00000003c0)={{}, "cd17ff8a601452079979616c3652e7bdd7da1746d16f8dc6838a1eff23521294a085a932e896ca8b707126db63dee897659d2359a729e00788a792c6302efadb9461c946a9ac02d91fdad6e0ec7a2134c000c1ee97320876c0966b098f22a319ecd78aa3dae089da497f55840db06b0c217d188a5451cc898ce89f6fd77cdc81e623a3f4657325cedcc1c0f6092dd23c69a3b16e6d5ff84cc83835468755952febb373668fac44445a928e1385155b0bd816fa5e77df936f6fabaad0e56a77010e3a944950adcfd35a4d32c594217a28759bd01a83692f224130f5389c9435729acbd6d3bd575d8c551e15caabcd784add44b03f17a05df4e9440ebd4f69d4974a31aaae32e8213dcf77f368f2d3309edd678e8110bdc2c5dafb21068b9d6dd4375cf0075ee27b8a91539c82ddd17ecf7b3e9c17990d59845c3d0ad3ec270529649f1e99741726159712907af3ddc5bf07539574f39ca4530c46ea8d01291735e9e21bc307e0127096b3b567b7f037a6cf0f026646ec8f9174ef8a317210ca6e9a2446e4d3998e018e4311a9acb98ab7f1288682460cff409e634cc2c4a558166107da6f2fc068752e4d4021040384caf26810e50383beb3e510eed6aae2342c949aa04a32721dfcf3c7941f3adf888642c5b0753da552921af9f03cb9b4618ce8c838d3c4591e0cf4c31b1751add2408579c62e933ca0824ef8fd4d0414225fb27ede828746ef3f5fff20ba9411e555ece1e38e2fb43797ef5edb8df691ef275d2c796b5753e7b73cb8ce5660edcded2b13b8e2a99cdac354b22e41945eb3c3e3a00ea90b1d723a3307dd2b3b37ec0b3edb2ca26f85e6b5f0a29d4202c7cd92d607def68845a33dcc6eb320e0e9e6ee0f0128ec3294a796fab4b3d9b9ca84d82b7941eafc1077ff029bcbee0f5aa82f0bbe7eee0eb4a116a8210941d7a6941f18bb6f2f2f49e51f1b7443393de5da191722f671a13737290b9956d044a71d70a17c0cebc58c5d07333b95fc8716ef56a9ac24f49cfefbaae592376b9b16606faae6ba15e862732e53dbeff96a8bf0cb309936a633bca6e7452a09a26de7ddbef3f8e055dbd781fa15dc0c8363601ffb76acdc56621bb55eea0ad005240b13f38f802b333bfe8792e422236faf71ba65c22e47fdd5877628e731f16bea955f67b802e67639072930e2697cd90e0ca9910794e0264a69115c7f41c42c9410cf363ce98a5e8b91c2b62ce30a8f153365abf96588eeb44a0b7e38ee753ebd4dbe1e4b000887ceae1e39e9963691aa38990017c891dbf85695d43d0c6eb71615830ccf2a57f20534ca3929399bfd1e9d669c72ae2f62ccd39cf26505024562541bc3fb32e5fd52b4a7cdddc0000dc07c4ded80a4e352d7541dd2f7be6c070d51848a7af090f88e2aff8aedf73ce42426ce529831690121e8a21192a09db49ec2a251d30a0966679b32d434864c0ea6f1b1cf2604dee3d9998b660b04b3b666988db39516f70fc88018a8267e2a0ae4ad9256b93ff668d98e90a28cd45edd2411fea32dfb010c56f3946beb03494318bcd6e5e17f307ab2d9897728dfb781ed316b5b0fe616686c39a8715c9ffc593e7a66bb181f77b913c228b21408700121055ac3d873d0df429b0247360744d62b8b3ae93104e2b123a97272eb17d8caf05efb7da025729df86b91c8db1a38aaef0220c2e7fbcdc777ece9badbc67b9ec4ec2f3da351a4b8a7701168601826e22f48432ac5241f1891f94aa2819099bad845547966c28fdf624f541f6ec2ad7c62b5809048f8de9fac3041a8abf739148bb945e60d0760984a0707be86d6d9da9978dbba74c97caa9e9ec53d6e8a5690b5c362534c32efa36f36a1bfa1a1003acd55ee3660ba0b930dc42afd3b5eeac621451d3c3c7355dfcb4cbde47d7bcdc86815dd2e3c64a235c9fcdbd996f5a5b62af67acadec2d50c5233d49f5435631be20d2ce108ec3c79832297927b2ca42164516ef53c4353b3b89b550dd438782072dc6a1cf22070a567b9c4e97927722e6c8bf2f3ec187a1bb84dd954dc68f1e6d799ef0311814cbc060ac7100a9f47ccbbbe395dab715a58583aa2169de65690d12a9829a32c3f5803b3ee4a57d657e430ed668f2acdaceec6b0323439b82144f371456b42f89d8736f823912cdd79c391e6c24fbaa0ebe4d476696ae147f458b1f256b8943c692d6ce6f96dc3881b3c2fb43cd7ed5ac7ce5f466ba2fe6f98170d03b0e2f82f85c6f88d08987d0ea90e8b51df6827f0b29abe0c4e17f577420eedef97b56da67577c76e5e4f841b2f6c8b0b67b03945ca09d1fbd1105fe2034ca7dbc5a1cebca6aea6dd9ae0a307ecc9b36fc1c2f800fb05f99bcabe11a63689cef7a8273532ac2c41493ee1e133159c31707f9718f32cc699fb24b0ecc26a8beb4270d4731d922df542c4023494eade1843f5fee928e9b8f5ae7b23af06f88646217a517d232a6e1a80edb71e0ee778952bee709c730c82f405fa25519bac836f6bd798930d7ecf9738231e4c118211a3eeefe691b49596f3c7c0feac658868c5b2a9a94b876763d0bd3045315de5b944e12ffa0939f5119d7d4f5985ea6b4b8573df01fb0c7259c8aae8ed33982a705d617d17a4870fe7164cad775a2a8a0cc40ce2286106905eca00b5fa0e2e8bcec832d5a4bcce3ebf7ece2ce5265ef6c9e466c5db79b5f069a79639409ab673b90f0a2f11d4be6016e4479c3c81a442b91ea2a6217c039409c92399051cfb6c57ceec34e59b8b117779ff2dbb5daffc7eb10e9fbcfcba29f6c375d4bba592799581650d4f964829e461c9e2193897b0ccec4524feeb26a16ddb8d41f74f53285dd7b417b695d0d6e20a6f8dc1ef962e5a540048e0910d19733cb8ef734cc4ca180f625ec3b00e28371d718c00863df85aab92f20167dd719ba0bad7cb9df3314326fe10541aa5dfc09e72d4ce2b88edb6e4dd0bd3264991f8c48cc7a630ddce9c39ec020acea7fb3909fbde22a555dd1de2a2cdc00f420f45e039ddda54d4ee1cf2865c9dc84cea64d5336a964103863dc01feb6ae126fcaba6773bf06e419a257e213db23541844faf133937af33ce80bdc0ec2741598558a3ede01a4a2ab3cd0bfe0bcd122e9d5215173b8f7d5f0a594665a2a18b1002d9e5d84eb1d68d1c878918bfd801c7c3faf19485349da9df20704706dc0b3df7cfc2fba985202460643bad071dfee62b9a09a54b529d86ddf75480dc4de941fc172c48516ff5053360cad49860d4bed3b36e6069dc35b750b55b7f36d1e0423c1e7ae274c194701c109da091dc29519667491bde86d295797865a0508d774514fa418b29f3dc130183e1d34ea84733cc86fdbeb11842dc603d07108496174d7792712d192a332867800cd2885e75a4d8020ca137893fdc3cb4cf9c2fa72430b0bb2206789cf426bdcb1ef01af4a3d6379a28f5d1c1dad98d20985d2339bfa79a4dfa98006ccfd9a42be23bd890af50419ba450643a45d43677daed266dd3a28d6752cb124abd092dd28c1c095e70cad080a711bd7410cc5601ed4ff4398ef2306b912ad420ea1163ef2aa059db9a6b53dc175f372b2a62dd7f06e1cf842192eff5bea3ab684d0adeabe3886577d8fbb976165903ae1ff184e56f6a90941afdb49728431c0f6fae4cd11a68cecd1a09279ee85cfbac58453d0855c29e7c02cabe71f48a132edafaf3512c7c57e55e4e281e6acf4d198a0a6d56832ab3dfb560a6083fed31fedd0cf56fa065d435a540849504fe2da0682c821212fed3f03ce64078bde46cd47d701f63b3dff14a4d04f14e2ef6d4a424e1dca2a82ac3413e35cefb26ef9b019fa976c60c9b68f1e1bae1a448d8baa5c1acf787cdaffbe7d2bf9521d4822bb90e33f129fd368aefbabe07639bbd62534e4446eef27786ea846c7576f8e3022bb6abf2d5222b022a7a1342df7eca628453b89220b017c89a341fc4f6c9f7798255dd30e87d12afe1b3bee5050dfa3228c857632410852af088dbd49e4e650bda3b3b780efe2e42925bdef8a62bae77b9b84ecfbd192144da0a11d9e99991e21bd0b8a978b55ddf9d622e65c81740ddb1b5b7f147d109ca40275a665466bb3f421ebd6b382a1b8a889d89141569a8c967b52dc150efd637b478e25efe7779bfc211843c1fb2a3dafc41d24d8a949c6b3f6af7e88504036d699061fe32d957eab0b72665be75f6d20a740abcccbad808dddeffe77dd791317f3f584d52d16203eecd282d0359560d708cabc1a2c20b0c6a954be8c0c52ddeaf1f6a79296a1459567a0b0f65df0c6c2ac0bc069d6bc9a4dc0544cb8a334565c1d114603c777e37315ef8e3745b88a877ea75ba69472e32bf568c540bd5a47f8384412638d01f44ef32f62af0411ae49bba585c7cb00bda1ba6923c665df267d1848b4989d100ce62cb1b3dfa5d72fcde465dedf048d1bc0c7ead37b05a85e1002f5223246bc3a92abb9363d5d03781a23ce0d17cae696a5e34a2a2daa2baafa58651203c5885b7381601ffdcb9bea451be9f80465b722518074e8c92e15120ddc700444215a8cb45395e4815015be8cbb7b9806901267174bb257ce8e829d6886b1a12fbb9ecd6e5ead36f87e2abc6d7bfc4ed5251fe036b1a503b40012d464a57cc237f872fe089dab5ae9ba0b7782cb310b8a7203eb87e3856adb88fa24daa608fb82d8c07cb43857b0bd8269b37467cb2b8a9153223f9de557fb123576f7b3680978eec72e741f248b65242609339418ba4c2f63373923378e41c67c805690730ce545fb23691c799675f925f1ce2e4c76bc7533384221b5d3ced12250c31fd0b54b7e7c25312eaaf96b5c2096694bf1558301e9dec71821fb8735afb27097e107f1fe2b944a59aadb1a009e54c0b837ef74cebd03f7087e6be18fdfe99af6298891ad83d8ef6d1b0c742efc1ee830b2dc85c82f25980fd2ba51a1ecb9c0f261d0ee62541689031275da60373b173117f2f7ba383538b12ab245f5e1a603fb91ec365cb11c015ef576feee3dc29881da557b81cf26e4b81c33ab39e0d20088db24392ff0aef70a49d1522ae61adc2b41c5c720595e5a9436df8e26a581a769fc905890c1920f1210b59d90731c8fc26f823599af8dc7d8cda087c7f200fb3a3bbb50ed65089ed9d43ddc329d4f2c6250ecd3a1e048f3bd593249ba4f721eef74503e3458a65e31afed29876ba9df7a7b8749ce51a81aa9f3fbb6c59418debd6e64d2950628c1e67ac0ff98e3f96e262da8d2f2abdd5ea38d7130e9371b6d197cd07c94cb9320a8cc4e01c8afadcdf0d5088d2eb95490da4096022c7d0c21ed52f51331f2c1d141360007651a06ed8eff79abc508f9f9d33d4020061b31937c532bc88005bbb6a8d1187de1e026b1ede39641ed7f12ac7637ce9513f04b9f18861e76c60e738a8a9c9d93c0e87d9d7c10d1b45b8707eab952185fe4b84e918dcc717165fdb7bcf7db3f4db8d312fda3a8d1b57880f843b415d4b5b064e7c1fc94a78aa897a82b7323b76a933f84cc3c45c63d54d8fcec1434bfb6c66777e5356de3c5a41e94815b7e06b4a36dc3d9da1b0ee1915698443389ab0f6efe635d3773e46600ecd5b74f25591fdcced7ace767aa8445cc3f5c0964cc977c193a89e13312fede2614e9d84a036a66eaf539a9802945bfcd1db4d68c9b2f242962bdaeb610770943fa733bc3abe232c2d6581342d6070d00b9d9f34cbd45b7179a9ede96f167c7694343a4ae4740be5aebe9db5bd7ea7583fcc42504c2a85dcb7b2ceb768533d5b65e7fb"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

15m3.24968367s ago: executing program 32 (id=37):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x8008b705, &(0x7f00000003c0)={{}, "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"})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

13m50.632770764s ago: executing program 4 (id=200):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup2(r0, r3)
sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000c40)="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", 0x148}], 0x3}}], 0x1, 0x4084)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380)=0xbf, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

13m50.327437113s ago: executing program 4 (id=202):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)

13m45.147414981s ago: executing program 4 (id=218):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

13m40.216859139s ago: executing program 4 (id=228):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x2, 0x6c, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x9, [0x401, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1, 0x1}, {@remote, 0x8000}, {@multicast1, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x9c, 0x3, 0x8}, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

13m39.096382939s ago: executing program 4 (id=230):
socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={<r0=>0x0, 0x0})
r1 = dup(r0)
connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x6, @local, 0x4, 0x1}, 0x20)
r2 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$smackfs_label(r2, &(0x7f0000000300)={'\x00'}, 0x2)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x10)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x0, 0xffff, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x62e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)

13m33.870583976s ago: executing program 4 (id=241):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13m18.680839827s ago: executing program 33 (id=241):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m57.805404089s ago: executing program 0 (id=392):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)

11m56.407746656s ago: executing program 0 (id=397):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_io_uring_setup(0xefc, &(0x7f0000000200)={0x0, 0x2344, 0x10100}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x569, 0x0, 0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, 0x0, 0x4100, 0xf0cb2f4a0c2cfc5d, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a80)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000000000, 0x0})

11m53.710031794s ago: executing program 0 (id=401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0)

11m52.603528983s ago: executing program 0 (id=406):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x242, 0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000)
sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0)

11m47.466214302s ago: executing program 0 (id=421):
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000300)={0x1, @raw_data="bc689b6a16021551b6ccb5c9bd3aba3bbe9e73a6d89c27331601569eb3b43828133f5b70cb6941320e821bc25136f7adde68863c39f4fac2c1d669d957dda98bd649fdec8b3150db23b0f4e06273084979a8c60fa612c404a86e2a4241a4daf531e8e5ad4f5021a0874b0406c8f41bf28be6e9f579d011c05b24b9044af6be62f9757e30219ca7000eefe7c2bbcdaaa65387fd5e6bfa3ef9210766f486c9377c6df80564cf912ca6166260072c6e0023a37f75429a8365f73797de9951624d4268dedd5f829b2380"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x11c6, 0x3010, 0xffffffff}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x9, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

11m44.354173532s ago: executing program 0 (id=419):
vmsplice(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x38)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x16, 0xa01, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018"], &(0x7f0000000200)=""/249, 0x37, 0xf9, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$kcm(0xf, 0x3, 0x2)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0)

11m28.914710621s ago: executing program 34 (id=419):
vmsplice(0xffffffffffffffff, &(0x7f0000001540), 0x0, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x408cd, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x38)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x16, 0xa01, 0x70bd29, 0x0, {0x2}}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000018"], &(0x7f0000000200)=""/249, 0x37, 0xf9, 0xa, 0x0, 0x0, @void, @value}, 0x28)
r1 = socket$kcm(0xf, 0x3, 0x2)
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0)

6m23.359720581s ago: executing program 3 (id=850):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
timer_delete(0x0)
syz_open_dev$dri(0x0, 0xf, 0xc880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0x10000000, 0x2000, 0x0, 0x10b}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
utimensat(r4, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', 0x0, 0x100)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socket(0xa, 0x1, 0x100)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
dup(r8)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x992, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})

6m20.714989325s ago: executing program 3 (id=855):
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x1c, 0x80)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x3)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r4)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x0)

6m19.302283106s ago: executing program 3 (id=857):
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x1e, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}})
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x700}, 0x38)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0x2ec, 0x30c, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x9, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@policy={{0x154}, {[{@ipv4=@loopback, [0x245815cfc742645d, 0xffffff00, 0xffffffff, 0xff000000], @ipv6=@loopback, [0xff000000, 0xff000000, 0xff], 0x4d4, 0x3506, 0x11, 0x0, 0xa}, {@ipv4=@remote, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d3, 0x34ff, 0x2, 0x0, 0x1}, {@ipv6=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x3502, 0x5e, 0x0, 0x0, 0x16}, {@ipv6=@rand_addr=' \x01\x00', [0xff, 0xff, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4d2, 0x0, 0xc6, 0x1, 0x0, 0x18}], 0xb, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x51c)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1})
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd)

6m12.188183501s ago: executing program 3 (id=864):
setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x100000001})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$sg(0x0, 0x8, 0x500c0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
msgsnd(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_pidfd_open(r4, 0x0)
setns(r6, 0x24020000)
setresuid(0x0, 0xee01, 0xee00)
r7 = syz_clone(0x13000080, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r7, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
dup(0xffffffffffffffff)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000fe6000/0x1000)=nil})

6m9.865773061s ago: executing program 3 (id=868):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180))
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

6m7.398852196s ago: executing program 3 (id=870):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
get_robust_list(r0, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f00000001c0), 0x0, &(0x7f0000000400)={&(0x7f00000003c0)}}, &(0x7f00000004c0)=0x18)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x3}, 0x14}}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(r6, 0x0, 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0)
syz_io_uring_setup(0x4f15, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x4, 0x352}, &(0x7f0000000080), 0x0)

5m50.995966275s ago: executing program 35 (id=870):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
get_robust_list(r0, &(0x7f0000000480)=&(0x7f0000000440)={&(0x7f00000001c0), 0x0, &(0x7f0000000400)={&(0x7f00000003c0)}}, &(0x7f00000004c0)=0x18)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x3}, 0x14}}, 0x0)
recvfrom(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(r6, 0x0, 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0)
syz_io_uring_setup(0x4f15, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x4, 0x352}, &(0x7f0000000080), 0x0)

5m27.249593474s ago: executing program 5 (id=919):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = creat(&(0x7f00000008c0)='./file0\x00', 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={r7, 0xae, 0x3ff, 0x34325241, 0x3, [r8], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1})
syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046, 0x0, 0x1}, &(0x7f0000002500), &(0x7f0000002540))
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0)
sendfile(r9, r9, 0x0, 0x6)
syz_io_uring_submit(0x0, r3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={<r10=>0x0}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r10, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f00000003c0)=0x84)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r12 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x4000000, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @link_local})

5m20.528534738s ago: executing program 5 (id=925):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x500)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0)
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f}, './file0\x00'})
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0x0, 0x0, 0x0, 0x4000000, 0xffffffff}}}}]}, 0x78}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

5m19.239197363s ago: executing program 5 (id=928):
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305829, 0x0)
r0 = creat(0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x80000)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r5, @ANYBLOB="010000000000030000002100000008000300", @ANYRES32=r6, @ANYBLOB="0400ec000400870088002d800a00000002020202020200000a"], 0x1d4}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000180)={'ip_vti0\x00', <r7=>0x0, 0x20, 0x701, 0xb07, 0x8, {{0x37, 0x4, 0x2, 0x39, 0xdc, 0x65, 0x0, 0x9, 0x29, 0x0, @empty, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x4c, 0xb4, 0x3, 0x1, [{@private=0xa010102, 0x14}, {@loopback, 0x6}, {@empty, 0x5}, {@multicast1, 0x10001}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010101, 0x200}, {@multicast1, 0xffffffff}, {@private=0xa010100, 0x7}, {@multicast2, 0xfffffffd}]}, @end, @timestamp_prespec={0x44, 0x14, 0x91, 0x3, 0x0, [{@private=0xa010100, 0x3}, {@private=0xa010101, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x65, 0x3, 0x8, [{@rand_addr=0x5ad, 0x7f}, {@broadcast, 0x9}, {@rand_addr=0x64010102}, {@empty}, {@empty, 0x4}, {@multicast2, 0x10000000}]}, @cipso={0x86, 0x31, 0x2, [{0x2, 0x6, "b078c488"}, {0x7, 0x8, "60ab57055916"}, {0x7, 0x9, "f3f9007dc28163"}, {0x0, 0x4, "541f"}, {0x0, 0x10, "43c8d0554bf7178f46bc1b20adc2"}]}]}}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r8, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x17, r7, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001)
read$FUSE(r1, &(0x7f0000003000)={0x2020}, 0x2020)
recvfrom$inet(r1, &(0x7f0000000140)=""/38, 0x26, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmmsg$inet(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001800)="db", 0x1}], 0x1}}], 0x2, 0x0)

5m14.435719046s ago: executing program 5 (id=934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x40851)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000010140)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc3f}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x11, &(0x7f0000000080), 0x8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xffda)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x9c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION, @IPSET_ATTR_REVISION={0x12}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xfffffffffffffe08, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0x34}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}}, 0x0)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

5m12.565917627s ago: executing program 5 (id=937):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r3, &(0x7f0000009ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007040)=[@ip_tos_int={{0x10, 0x84, 0x1, 0x80}}], 0x10}}], 0x1, 0x20040000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB])
socket$qrtr(0x2a, 0x2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = dup(r6)
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}})
ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x1100, 0x101}})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x4, 0x1}, 0x10)
socket$tipc(0x1e, 0x6455bb3269e54a65, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x13)

5m10.794509361s ago: executing program 5 (id=939):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x64c5d34f538bdd06}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x6}}, './file0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f00000000c0)={0xd4, 0x0, 0x6})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x48, 0x0, &(0x7f0000000640)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x66, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6231f508e5b5c6a7a1f29add723bab7ec2c80095cf5c30656b5f6bff1740156a3ff7dc8c3901e6c013d533aea7f7618fb0fd813e9305139fdcbe2980c32d4e8740a0f605e1386457adafecc9a601c12e52102a737594b3b20d0eff2"})
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002b00010000000000000000000301bdb1b6941891eecf000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a92bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c0003c0574994449864dd5d6a942ba9f357ea9e2f27322e20014de66e5d4de3e8a2504aa2fe82690a182c049f88ad3fef87d6efd9680df9a6eeeed7911c70a128f04f9423da11312a5eef4e91f9d3c151eb4f967f723956a02777eb6c153ecb6c1d79b60b08a2ba428e3fa11861282e16"], 0x114}], 0x1}, 0x0)

4m55.277445747s ago: executing program 36 (id=939):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x64c5d34f538bdd06}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r3=>r1, {0x6}}, './file0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f00000000c0)={0xd4, 0x0, 0x6})
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x48, 0x0, &(0x7f0000000640)=[@register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x66, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6231f508e5b5c6a7a1f29add723bab7ec2c80095cf5c30656b5f6bff1740156a3ff7dc8c3901e6c013d533aea7f7618fb0fd813e9305139fdcbe2980c32d4e8740a0f605e1386457adafecc9a601c12e52102a737594b3b20d0eff2"})
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="140100002b00010000000000000000000301bdb1b6941891eecf000000000000140001000000000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a92bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c0003c0574994449864dd5d6a942ba9f357ea9e2f27322e20014de66e5d4de3e8a2504aa2fe82690a182c049f88ad3fef87d6efd9680df9a6eeeed7911c70a128f04f9423da11312a5eef4e91f9d3c151eb4f967f723956a02777eb6c153ecb6c1d79b60b08a2ba428e3fa11861282e16"], 0x114}], 0x1}, 0x0)

50.203962429s ago: executing program 7 (id=1585):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x18)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x98041, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r6 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r6, r6, 0x1, r1, r5)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0)
r9 = socket$inet6(0xa, 0x80000, 0x8)
sendmmsg(r9, &(0x7f0000000480), 0x21, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc})
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_netdev_private(r10, 0x8b27, &(0x7f0000000000))

49.004699586s ago: executing program 7 (id=1587):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
socket$alg(0x26, 0x5, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
dup(r3)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknodat(0xffffffffffffffff, 0x0, 0x200, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r5, 0x10c, 0x5, &(0x7f00000000c0), 0x4)

46.968157975s ago: executing program 7 (id=1590):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xd)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f041})
r5 = socket$tipc(0x1e, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, 0x0, 0x0)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x0})
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x1}, 0x10)
r8 = dup2(r2, r0)
close_range(r8, 0xffffffffffffffff, 0x0)

43.602376205s ago: executing program 7 (id=1595):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x309000, 0x0)
ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, 0x0)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200}})
ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x0, 0xffffffff, 0xfffffff9}})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r6, 0x8b2c, &(0x7f0000000040))

42.165029183s ago: executing program 7 (id=1598):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00')
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$kcm(0x2, 0xa, 0x2)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000380), 0x4)
write$tun(r0, 0x0, 0xfdef)

38.829409001s ago: executing program 7 (id=1601):
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x24}}, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
dup(r1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f00000002c0))
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x4004e502, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)

22.782728801s ago: executing program 37 (id=1601):
r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x24}}, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
dup(r1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
get_robust_list(0x0, &(0x7f0000000240)=0x0, &(0x7f00000002c0))
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x4004e502, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0)

22.731929416s ago: executing program 8 (id=1621):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0)
preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0)
write$tun(r3, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42)
io_setup(0x4082, &(0x7f0000000380))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
unshare(0x400)
landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

18.627949523s ago: executing program 8 (id=1627):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="17000000000000000400", @ANYRES32=0x1, @ANYBLOB="0000000000000000713a1333a617e5c0ce91ac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
recvmmsg(r6, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2102, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x90009427, &(0x7f0000000180))
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r8=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r8}}, 0x18)
userfaultfd(0x80801)

15.277631499s ago: executing program 8 (id=1628):
socket(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00')
r1 = syz_open_procfs(0x0, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x211000, 0x1800, 0x8}, 0x20)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000180)={@local, @multicast1, 0xffffffffffffffff, "349d922b6b637454c77e39d049e1665843fab95a9537fa469933ccf7dd482074", 0xfffffff7, 0x3, 0x5, 0x4}, 0x3c)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = socket(0x18, 0x0, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r7, r6, 0x0, 0x80006)
io_uring_setup(0x432c, &(0x7f00000004c0)={0x0, 0x8948, 0x2000, 0x6, 0xd3, 0x0, r1})
socket$kcm(0x21, 0x2, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000280)={0x7, "c5e46a07a0fb1e0c284fb660c506c8aacf22e084a106288166aeb1b23fd774b6"})

15.199260202s ago: executing program 6 (id=1629):
r0 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000380)=@arm64)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r8)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

13.452212811s ago: executing program 6 (id=1632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_sctp(0x2, 0x1, 0x84)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x3726, 0x4, 0x0, 0x3bf}, 0x0, &(0x7f0000000180))
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}})
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x44}, 0x1, 0x2, 0x0, 0x4000}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0xc10800, 0xc8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000005680), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000005a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x34}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r9, @ANYBLOB="d9cb9833c29c5193dc99c86e5588222c272776a44fb6b74cd50160bdf8799d901cdf61e9435289add848119e6da48ceeff93ef8fec44357a2b2424bc6365accade8ab1989fa0a054c8bb71ef9cbb610dce02b7e23163a0b3ebcf22188b6deb0e7fcf11d977875e258a0924ddf5d7df17c282c55ae245a55b983bed4f2b6e2f70a6b40307a38b9d7fcbfcbbad381c30c73915ae1692df829d107ee115037ee853c9112e6fcc3ada60a291a8b4f5ce02209984a2b85444e03c21a13f346de245ddb72026aacfceda6da2db963893b4ab6fa6cc7ac97a5232e617c84f28bb0fe79be24facf4e8bf4d58cb"], 0x3c}}, 0x40)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, r7, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4044085}, 0x10)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, &(0x7f0000000000))

13.257484634s ago: executing program 9 (id=1633):
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x4, &(0x7f0000000140)=""/192, 0x20000057)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
io_uring_setup(0x1611, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]})
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}]}, 0x2c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='virtio_transport_alloc_pkt\x00', r4, 0x0, 0x7}, 0x18)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000380)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x2000000, 0x0, 0xff, 0x9, 0x0, 0x0, 0x5}, 0x20)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0xb0000)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xfffffffc}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0)

11.758785641s ago: executing program 8 (id=1634):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='sched_switch\x00', r5, 0x0, 0xed}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
socket$kcm(0x2a, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000007800000000000000000000000000000000c0a655fec9861a59c895dbbca6dc4937e926af8b6fd8bb1d4a444398316bb71db5b7e15904136eeebc23352cc49e1d846032d176382780511a3f69beb451f48b42d02e"], 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000140)=0x80000004, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./file1\x00', 0x98)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

10.779811823s ago: executing program 2 (id=1635):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f000083d000/0x3000)=nil, 0x3000, 0xcf72427647ba2179, 0x4000010, r2, 0x80000000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$set_reqkey_keyring(0xe, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000300), 0x2, 0x40000)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
inotify_init1(0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r5, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
shutdown(r5, 0x1)
pipe2$watch_queue(&(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r7, 0x0)
read$watch_queue(r6, &(0x7f0000000100)=""/222, 0x10)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x11)

10.684669426s ago: executing program 6 (id=1636):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xbf}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8)
connect$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000000000000000004000000549551923801c41d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvfrom$x25(r5, 0x0, 0x0, 0x101, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0x9362, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)

10.682093366s ago: executing program 9 (id=1637):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "ce6a743e21f04a4a63b96d68c90bace01a"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0)
syz_open_procfs(r1, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000180), 0xab, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0205649, &(0x7f0000000600)=0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
sendmsg$nl_generic(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000006a00010000"], 0x18}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @multicast2}, {0x6, @random}, 0xc4, {0x2, 0x4e21, @private=0xa010102}, 'pimreg0\x00'})
socket(0x1e, 0x4, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)

8.669294922s ago: executing program 9 (id=1638):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000280)={{0x0, 0x4, 0x100000000, 0x6, 0x0, 0x101, 0xfff, 0x0, 0x10000, 0x1, 0x3, 0x1, 0x80000001, 0x2, 0x4}, 0x8, [0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001740)={0xeeb, [], 0x0, "285c4d007ecdfb"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000d3200)={<r7=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000d4200)={0x8fcd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r8=>0x0}], 0x8, "c0d407618e9a5e"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000d5200)={0x40, [], 0x80, "a63fdc6584f74d"})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000d6200)={{<r9=>0x0, 0x54da, 0xff, 0x96a, 0x5, 0x8000000000000001, 0x4, 0x3, 0x7, 0x3, 0x5, 0x8, 0x2, 0xd85, 0x2}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000d7400)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r10=>0x0}], 0x61, "5101e3174f9f6d"})
r11 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x5421, &(0x7f0000000240)={0x0, ""/256, <r12=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r12, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d8400)={0xffffffffffff7145, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}], 0x0, "91ce83f7bc488a"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000d9400)={{<r14=>0x0, 0x3ff, 0x4, 0xff, 0x100000001, 0x41b9, 0x5, 0x6dc, 0x9, 0x80000001, 0x0, 0x8, 0xfffffffffffeffff, 0xb4b, 0x8}, 0x18, [0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000d94c0)={0x0, ""/256, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d96c0)={0x1d92, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r16=>0x0}], 0x81, "149d3448098eac"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000da6c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r17=>0x0}], 0xf8, "c293aefd2eeffb"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f00000db6c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8}, {r9}, {0x0, r10}, {r12}, {0x0, r13}, {r14, r15}, {r16, r17}], 0x8, "ff0cd8c9bcb714"})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
r18 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r18, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14)

7.913178095s ago: executing program 6 (id=1639):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x40000, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x81})
pread64(r5, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
select(0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x4e23, 0x3, 'sh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x7)

7.570370628s ago: executing program 2 (id=1640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffde)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
socket(0x1e, 0x1, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r5, 0x0)
r6 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045503, &(0x7f0000002a40))
r7 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0)
ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000080))

7.548807028s ago: executing program 8 (id=1641):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x405a350)
r5 = dup(r0)
write$UHID_INPUT(r5, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
fchdir(0xffffffffffffffff)

5.257105661s ago: executing program 9 (id=1642):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
r4 = io_uring_setup(0x177f, &(0x7f0000000140))
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x300, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x10000000}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'dummy0\x00'}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
socket$packet(0x11, 0x3, 0x300)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)

5.254764157s ago: executing program 2 (id=1643):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket(0x15, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0)
r5 = getpgrp(0x0)
r6 = syz_pidfd_open(r5, 0x0)
pidfd_send_signal(r6, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
msgsnd(0x0, &(0x7f0000000600)={0x1, "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"}, 0x7ed, 0x800)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)

4.971902356s ago: executing program 6 (id=1644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r7, 0x0, 0x0)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.967265146s ago: executing program 9 (id=1645):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
socket$kcm(0x10, 0x3, 0x10)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4, 0xfffffffc}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r5, 0xb}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)

3.672679107s ago: executing program 2 (id=1646):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000700)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r6, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r5, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2ca83})
close_range(r1, 0xffffffffffffffff, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000010003000000000000000000000200000909000200ffffffc001000000080001000100000fd4c76ca42c3dc5798f66707f46ca5ba82a3bff891fb346010c88efc5eab1df0a41ac1e64c085096522d11d8024cd880576adb4ebeacdac13f632ccceb8fa5be96db032e61106cd8ba0b27fea38472154ea665c8c5573487f81384a8c411d5b12d8e8817f7f6906761d93e7524e1c7dd16148c9ff4430f2d4bd79d4ea"], 0x28}, 0x1, 0x0, 0x0, 0xc004087}, 0x40000)
dup(r0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007", 0x29}], 0x1)
r9 = io_uring_setup(0x5d59, &(0x7f0000000280)={0x0, 0xd034, 0x4, 0x2, 0x39b})
ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f0000000340)={0x0, 0x0, "2ac1538d9b8496c406f2d92a5506fe13"})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
io_uring_enter(r9, 0x5b43, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x90000, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000240)={0x3, 'macvlan0\x00', {0xd}, 0xdfca})
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x2, 0x2737})
writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1)

3.64527806s ago: executing program 8 (id=1647):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xffffffffffffff57)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK    \x00'}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1404, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x48001)
io_setup(0x6, &(0x7f0000000180)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(0xffffffffffffffff)
ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x0, 0x3, 0x17, 0xee9, 0x0, 0x0, 0x0})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000142, 0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}])
getpid()
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

3.643910705s ago: executing program 6 (id=1648):
socket(0x1e, 0x1, 0x0)
socket$inet(0x2, 0x2000000080002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r3, 0x4b32, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000240)=""/194, 0x0, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x28)
sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104000000090583"], 0x0)
socket(0x22, 0x5, 0x0)

2.263075157s ago: executing program 2 (id=1649):
socket(0x11, 0x800000003, 0x3af6)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getrlimit(0x3, 0x0)
ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0)
ioctl$TIOCMBIC(r4, 0x5417, &(0x7f00000004c0))
socket$kcm(0x21, 0x2, 0xa)
r5 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05O\xac\xb8\xc1: )mh\xc7?\xfe?[\xdb9\xef\x9fb$aZ\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x1b\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\x04j\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16T~\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x99aW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x02\xa9e`HOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-g\xa3H\xc6+\f\x7f,t\x8a\xdd^\x86v\fK7W\xf8.\xc54\x81\xac\x03Zz\x91\x8d\x96v\x8bQ{\x1a\x9c\x8e\x80\xaf\xeb\xbb\f\x19>\x91\x84n6A\x97q\x11Gn<|\xc0m52:\x89\x89c%\x18;\xb3\xb9\xf5|\xab\xf5\x98^\xf3)w+\x906W1\xfdO', 0x5)
fallocate(r5, 0x3, 0x0, 0x2)
socket$inet_dccp(0x2, 0x6, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
lseek(r6, 0x10401, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.17884212s ago: executing program 9 (id=1650):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x20)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104)
r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200)
ioctl$NBD_SET_SOCK(r4, 0xab00, r2)
ioctl$NBD_DO_IT(r3, 0xab03)
ioctl$NBD_CLEAR_SOCK(r3, 0xab04)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0xffffffffffffff00, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60, 0x4000}}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000002040)={'sit0\x00', 0x0, 0x8, 0x1, 0x7, 0x8, {{0x20, 0x4, 0x1, 0x8, 0x80, 0x65, 0x0, 0xd3, 0x29, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x38, 0x3, [{0x7, 0x2}, {0x0, 0x4, "68fe"}, {0x6, 0x2}, {0x2a1b45cfe67bff2d, 0xb, "1ee100c05c52be0000"}, {0x456f9bc3f21487fd, 0xd, "dd68fd6fb8782f25043db8"}, {0x2, 0x4, "84a2"}, {0x5, 0x9, "57e530ea6f597f"}, {0x1, 0x5, "837fe5"}]}, @cipso={0x86, 0x20, 0x0, [{0x6, 0xf, "0350d95c6bc48be3f7d23523a9"}, {0x2, 0xb, "5302d7ac7d952eeb51"}]}, @timestamp_addr={0x44, 0x14, 0xe3, 0x1, 0x6, [{@private=0xa010101, 0x4}, {@rand_addr=0x64010101, 0x7}]}]}}}}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000880)=[@in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e22, @multicast2}], 0x2c)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff0800000008003950323030302e4c2f13a531ab77b06f4e2498f64f83232c63a2f5ea43ff0851e3f0fd10f1e94feb9a0d01e61929856a143aa28f21627c39926b8f754dace2feac53cc0253b6db298067c8668c6ecb3acdb82b120df0b565989e50f55ee713e03a63ac407527298aef478b8e9f822fb36182359046eaa1ec513c"], 0x15)

0s ago: executing program 2 (id=1651):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x200, 0x0, 0x0, 0x110, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1, 0x3, 0xf, @void, @value, @void, @value}, 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioperm(0x0, 0x3, 0x80005)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x18100}, &(0x7f0000000000), &(0x7f0000000100))
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
landlock_create_ruleset(&(0x7f0000000440), 0x10, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = epoll_create1(0x0)
epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff)
mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000007})
recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d14, &(0x7f0000000000))
memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x6)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)

kernel console output (not intermixed with test programs):

212.369372][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.398120][ T7458] netlink: 'syz.2.277': attribute type 10 has an invalid length.
[  212.407438][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.469556][ T7458] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  213.367347][ T7400] hsr_slave_0: entered promiscuous mode
[  213.432915][ T7400] hsr_slave_1: entered promiscuous mode
[  213.454399][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.479489][ T7400] Cannot create hsr debugfs directory
[  213.599960][ T7468] ALSA: mixer_oss: invalid OSS volume ''
[  213.607648][ T7468] ALSA: mixer_oss: invalid OSS volume 'DIGITA'
[  214.242738][ T5832] Bluetooth: hci5: command tx timeout
[  214.523449][ T7474] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  215.532394][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.541884][ T7483] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  215.775567][ T7400] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.858922][ T7400] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  216.292586][ T7400] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  216.587137][ T7400] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  216.765861][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.783506][ T7400] 8021q: adding VLAN 0 to HW filter on device team0
[  216.800218][   T80] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.807493][   T80] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.893256][   T80] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.900704][   T80] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.076448][ T7400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.087161][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.181533][ T7494] kvm: kvm [7493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x55
[  217.215537][ T7494] kvm: kvm [7493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa0
[  217.248383][ T7494] kvm: kvm [7493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6
[  217.679130][ T7494] kvm_intel: kvm [7493]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851
[  217.836940][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.106275][ T7400] veth0_vlan: entered promiscuous mode
[  220.143371][ T7400] veth1_vlan: entered promiscuous mode
[  220.306243][ T7400] veth0_macvtap: entered promiscuous mode
[  220.345341][ T7400] veth1_macvtap: entered promiscuous mode
[  220.430363][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.441267][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.452316][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.741778][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.771344][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  220.849477][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.331928][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.345995][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.395974][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.481158][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.537387][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.547992][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.558762][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.568761][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.579749][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.590123][ T7400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.601735][ T7400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.620798][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.639078][ T7400] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.646923][ T7541] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.648050][ T7400] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.663898][ T7400] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.865712][ T7400] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.148112][ T5941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.241935][ T5941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.626930][ T5941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.652837][ T5941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.967143][ T7568] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  230.862975][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  232.148038][ T5878] usb 3-1: Using ep0 maxpacket: 8
[  232.193550][ T5878] usb 3-1: device descriptor read/all, error -71
[  244.202304][ T7680] syz.6.331 (7680) used greatest stack depth: 18864 bytes left
[  244.230011][   T29] audit: type=1800 audit(1734006806.914:5): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.331" name="/" dev="9p" ino=2 res=0 errno=0
[  250.589742][ T7706] team0: entered promiscuous mode
[  250.673225][ T7706] team_slave_0: entered promiscuous mode
[  250.692067][ T7706] team_slave_1: entered promiscuous mode
[  251.212144][ T7701] team0: left promiscuous mode
[  251.279826][ T7701] team_slave_0: left promiscuous mode
[  251.299783][ T7701] team_slave_1: left promiscuous mode
[  251.355589][ T7720] netlink: 'syz.3.340': attribute type 10 has an invalid length.
[  252.203684][ T7720] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  256.001778][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  256.144118][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  256.157906][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  258.485470][ T5878] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  258.497120][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.506885][ T5878] usb 4-1: Product: syz
[  258.511544][ T5878] usb 4-1: Manufacturer: syz
[  258.516746][ T5878] usb 4-1: SerialNumber: syz
[  258.572072][ T5878] usb 4-1: config 0 descriptor??
[  258.605407][ T5878] usb 4-1: can't set config #0, error -71
[  258.614188][ T5878] usb 4-1: USB disconnect, device number 6
[  266.700720][ T7708] syz.6.335 (7708) used greatest stack depth: 18840 bytes left
[  270.012704][ T7843] bridge0: port 3(macvlan2) entered blocking state
[  270.085547][ T7843] bridge0: port 3(macvlan2) entered disabled state
[  270.093044][ T7843] macvlan2: entered allmulticast mode
[  270.099463][ T7843] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  270.113255][ T7843] macvlan2: entered promiscuous mode
[  270.346908][ T7843] bridge0: port 3(macvlan2) entered blocking state
[  270.354043][ T7843] bridge0: port 3(macvlan2) entered forwarding state
[  282.171976][ T7916] can: request_module (can-proto-3) failed.
[  283.491838][ T7916] block nbd3: shutting down sockets
[  283.847566][ T5826] Bluetooth: hci0: command 0x0406 tx timeout
[  284.957613][ T7938] binder: BINDER_SET_CONTEXT_MGR already set
[  285.062321][ T7938] binder: 7937:7938 ioctl 4018620d 20000040 returned -16
[  287.250587][ T7948] binder: 7937:7948 unknown command 0
[  287.282569][ T7948] binder: 7937:7948 ioctl c0306201 20000a80 returned -22
[  287.772112][ T2151] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  288.014153][ T2151] usb 4-1: Using ep0 maxpacket: 32
[  288.481898][ T2151] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  288.491894][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.521966][ T2151] usb 4-1: config 0 descriptor??
[  288.547500][ T2151] gspca_main: sunplus-2.14.0 probing 041e:400b
[  290.006654][ T2151] gspca_sunplus: reg_r err -110
[  290.025901][ T2151] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  290.347832][ T7966] evm: overlay not supported
[  291.452783][ T7979] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  291.624094][ T1204] usb 4-1: USB disconnect, device number 7
[  291.632358][ T7979] Zero length message leads to an empty skb
[  291.854684][ T7985] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  291.899454][ T7985] kvm: pic: non byte read
[  295.041995][ T7998] nbd5: detected capacity change from 0 to 32
[  295.070400][ T8007] block nbd5: shutting down sockets
[  295.137080][    C0] blk_print_req_error: 22 callbacks suppressed
[  295.137106][    C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.152753][    C0] buffer_io_error: 22 callbacks suppressed
[  295.152770][    C0] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.166942][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.176196][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.184767][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.200046][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.238164][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.257649][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.286393][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.315562][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.331943][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.351384][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.359900][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.371972][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.381847][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.391837][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.399703][ T5950] ldm_validate_partition_table(): Disk read failed.
[  295.408661][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.419227][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.471753][ T5950] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  295.481660][ T5950] Buffer I/O error on dev nbd5, logical block 0, async page read
[  295.539100][ T5950] Dev nbd5: unable to read RDB block 0
[  295.599791][ T5950]  nbd5: unable to read partition table
[  295.650133][ T5950] ldm_validate_partition_table(): Disk read failed.
[  295.667323][ T5950] Dev nbd5: unable to read RDB block 0
[  295.685091][ T5950]  nbd5: unable to read partition table
[  297.325123][ T8024] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  297.352547][ T8024] CIFS mount error: No usable UNC path provided in device string!
[  297.352547][ T8024] 
[  297.362946][ T8024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  302.464648][ T2151] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  302.641953][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  304.603424][ T5876] usb 3-1: device descriptor read/all, error -71
[  305.474773][ T8067] 9pnet_fd: Insufficient options for proto=fd
[  310.561792][ T5877] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  310.734202][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.753045][ T5877] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  310.776338][ T5877] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  310.799700][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.875626][ T5877] usb 4-1: Product: syz
[  310.888858][ T5877] usb 4-1: Manufacturer: syz
[  311.860158][ T5877] usb 4-1: SerialNumber: syz
[  312.433027][ T5877] usb 4-1: 0:2 : does not exist
[  312.454056][ T5877] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  313.113493][ T5877] usb 4-1: USB disconnect, device number 8
[  313.249000][ T8106] Unsupported ieee802154 address type: 0
[  313.293757][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.550503][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  313.574807][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  314.153598][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  314.266497][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  314.274430][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  314.283482][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  314.548179][ T8118] xt_CT: You must specify a L4 protocol and not use inversions on it
[  314.552373][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  316.306071][ T8108] chnl_net:caif_netlink_parms(): no params data found
[  316.403066][ T5826] Bluetooth: hci1: command tx timeout
[  318.530218][ T5826] Bluetooth: hci1: command tx timeout
[  318.787384][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  318.794070][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  319.322854][   T29] audit: type=1800 audit(1734006882.024:6): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.452" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  320.455378][ T5877] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  320.477397][ T8157] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 2, id = 0
[  320.584044][ T5832] Bluetooth: hci1: command tx timeout
[  320.721878][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  320.736268][ T5877] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  320.746027][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.770362][ T5877] usb 3-1: Product: syz
[  320.783408][ T5877] usb 3-1: Manufacturer: syz
[  320.791062][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.800279][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.825835][ T5877] usb 3-1: SerialNumber: syz
[  320.833378][ T8162] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  320.862479][ T5877] r8152-cfgselector 3-1: Unknown version 0x0000
[  320.869070][ T5877] r8152-cfgselector 3-1: config 0 descriptor??
[  320.882229][ T8108] bridge_slave_0: entered allmulticast mode
[  320.892335][ T8162] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  320.923984][ T8108] bridge_slave_0: entered promiscuous mode
[  320.933970][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.942024][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.950331][ T8108] bridge_slave_1: entered allmulticast mode
[  320.958984][ T8108] bridge_slave_1: entered promiscuous mode
[  320.992847][ T8162] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  320.999406][ T8162] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  321.056295][ T8169] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  321.068697][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.100075][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.127100][ T5877] r8152-cfgselector 3-1: Unknown version 0x0000
[  321.151355][ T5877] r8152-cfgselector 3-1: bad CDC descriptors
[  321.197459][ T8162] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  321.236448][ T5877] r8152-cfgselector 3-1: USB disconnect, device number 13
[  321.250240][ T8162] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  321.305434][ T8162] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  321.345575][ T8108] team0: Port device team_slave_0 added
[  321.388078][ T8108] team0: Port device team_slave_1 added
[  321.402776][ T8162] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  321.440737][ T8162] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  321.482895][ T8162] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  321.536082][ T8162] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  321.545157][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.557647][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.585274][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.600147][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.665896][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.694107][    C0] vkms_vblank_simulate: vblank timer overrun
[  321.738951][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.882307][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  323.042947][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  323.353697][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  323.532116][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout
[  324.504194][ T8191] syz.6.462 (8191) used greatest stack depth: 18768 bytes left
[  324.666042][ T8182] block device autoloading is deprecated and will be removed.
[  324.713482][ T8186] Bluetooth: MGMT ver 1.23
[  324.962156][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  325.051736][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  325.127556][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  325.204437][ T5829] usb 4-1: device descriptor read/64, error -71
[  325.663104][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout
[  325.663198][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  325.792838][ T5829] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  325.982613][ T8204] batman_adv: batadv0: Adding interface: dummy0
[  325.999663][ T8204] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.069292][ T8204] batman_adv: batadv0: Interface activated: dummy0
[  326.117244][ T8108] hsr_slave_0: entered promiscuous mode
[  326.147399][ T8108] hsr_slave_1: entered promiscuous mode
[  326.161910][ T8108] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.210142][ T8108] Cannot create hsr debugfs directory
[  326.237182][ T8205] batadv0: mtu less than device minimum
[  327.210406][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.224710][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.237683][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.250683][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.264457][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.279892][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.292860][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.305772][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.319528][ T8205] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  327.693465][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  327.699717][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[  330.072337][ T8227] binder: 8216:8227 ioctl 4018620d 0 returned -22
[  331.249271][    C1] net_ratelimit: 10 callbacks suppressed
[  331.249298][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  333.019099][   T29] audit: type=1326 audit(1734006894.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8240 comm="syz.2.474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536e985d19 code=0x0
[  334.812399][ T5832] Bluetooth: hci0: Malformed Event: 0x02
[  334.911317][ T8254] TCP: out of memory -- consider tuning tcp_mem
[  334.992079][ T8108] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  335.035606][ T8108] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  335.070244][ T8108] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  335.123135][ T8108] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  335.193928][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.478'.
[  335.211375][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.6.478'.
[  335.232730][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.478'.
[  335.252844][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.478'.
[  336.403506][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0
[  336.457280][ T8108] 8021q: adding VLAN 0 to HW filter on device team0
[  336.554935][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.563213][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.617752][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.625031][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.650353][ T5832] Bluetooth: hci2: unexpected event for opcode 0x2031
[  337.902785][ T8278] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  339.405170][ T8288] atomic_op ffff88805d142198 conn xmit_atomic 0000000000000000
[  341.611067][ T5832] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  341.620348][ T5832] Bluetooth: hci2: Injecting HCI hardware error event
[  341.632136][ T5832] Bluetooth: hci2: hardware error 0x00
[  342.024758][ T8298] mmap: syz.6.490 (8298) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  342.493350][ T8306] netlink: 277 bytes leftover after parsing attributes in process `syz.6.490'.
[  343.300199][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.682131][ T5832] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  344.013038][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'.
[  344.026451][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'.
[  344.040321][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'.
[  344.051874][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.494'.
[  344.616993][ T8318] netlink: 52 bytes leftover after parsing attributes in process `syz.5.493'.
[  345.001031][ T5876] libceph: connect (1)[c::]:6789 error -101
[  345.032501][ T8318] ceph: No mds server is up or the cluster is laggy
[  345.052303][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  345.072874][   T29] audit: type=1800 audit(1734006907.804:8): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.497" name="/" dev="9p" ino=2 res=0 errno=0
[  345.093870][ T8330] netfs: Couldn't get user pages (rc=-14)
[  345.356535][ T8333] : entered promiscuous mode
[  345.883622][ T8108] veth0_vlan: entered promiscuous mode
[  345.908616][ T8108] veth1_vlan: entered promiscuous mode
[  345.937507][ T8108] veth0_macvtap: entered promiscuous mode
[  345.948424][ T8108] veth1_macvtap: entered promiscuous mode
[  345.965420][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.978132][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.988855][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.999789][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.009734][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.020636][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.031299][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.042539][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.052580][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.063570][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.075171][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.086406][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.098978][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.113595][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.139221][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.160039][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.321828][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.446805][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.627289][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.806416][ T8108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  346.859270][ T8108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.892731][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.136369][ T8108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.161705][ T8108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.200812][ T8108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.276960][ T8108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.282393][ T7279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.295972][ T7279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.926078][ T7279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.005496][ T7279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.016018][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.508'.
[  355.098888][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.508'.
[  355.176649][ T8393] macvlan2: left allmulticast mode
[  355.461922][ T1204] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  356.101809][ T8393] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  356.792587][ T8393] macvlan2: left promiscuous mode
[  356.829737][ T8393] bridge0: port 3(macvlan2) entered disabled state
[  356.965380][ T8393] bridge_slave_1: left allmulticast mode
[  357.058432][ T1204] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.086810][ T8393] bridge_slave_1: left promiscuous mode
[  357.141593][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.147388][ T1204] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  357.304842][ T1204] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  357.319778][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.337411][ T1204] usb 3-1: Product: syz
[  357.341996][ T1204] usb 3-1: Manufacturer: syz
[  357.347782][ T1204] usb 3-1: SerialNumber: syz
[  357.357624][ T8393] bridge_slave_0: left allmulticast mode
[  357.383427][ T8393] bridge_slave_0: left promiscuous mode
[  357.432040][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.591206][ T1204] usb 3-1: 0:2 : does not exist
[  357.614641][ T1204] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  358.849321][ T1204] usb 3-1: USB disconnect, device number 14
[  360.402989][ T5950] udevd[5950]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  360.930542][ T8430] can0: slcan on ttyS3.
[  361.602165][   T29] audit: type=1326 audit(1734006924.284:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  361.677813][   T29] audit: type=1326 audit(1734006924.284:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  361.724513][ T8420] can0 (unregistered): slcan off ttyS3.
[  361.790876][   T29] audit: type=1326 audit(1734006924.284:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  361.828961][   T29] audit: type=1326 audit(1734006924.284:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  362.935463][   T29] audit: type=1326 audit(1734006924.284:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  362.958371][   T29] audit: type=1326 audit(1734006924.284:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  362.982488][   T29] audit: type=1326 audit(1734006924.284:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  363.005527][   T29] audit: type=1326 audit(1734006924.284:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  364.776288][   T29] audit: type=1326 audit(1734006924.284:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3958d7cce7 code=0x7ffc0000
[  365.008769][   T29] audit: type=1326 audit(1734006924.284:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.3.522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3958d21f29 code=0x7ffc0000
[  368.737061][ T8492] openvswitch: netlink: Flow actions attr not present in new flow.
[  369.221778][ T8491] syz.6.531 (8491) used greatest stack depth: 18096 bytes left
[  370.261211][ T8497] can0: slcan on ptm0.
[  373.641756][ T5875] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  374.864093][ T5875] usb 6-1: Using ep0 maxpacket: 16
[  375.855007][ T5875] usb 6-1: device descriptor read/all, error -71
[  377.362845][ T8514] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  378.878927][ T8497] can0 (unregistered): slcan off ptm0.
[  379.692194][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  379.698602][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  381.837309][ T8561] netlink: 'syz.7.542': attribute type 10 has an invalid length.
[  383.515089][ T8579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.548'.
[  385.409087][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.551'.
[  385.583499][ T8602] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  385.583540][ T8602] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  386.820854][ T8601] tty tty32: ldisc open failed (-12), clearing slot 31
[  391.425322][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'.
[  395.873906][ T8667] netlink: 'syz.7.567': attribute type 6 has an invalid length.
[  397.156984][ T8678] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  397.266102][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'.
[  397.266168][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.567'.
[  397.266188][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.7.567'.
[  399.295757][ T8691] xt_CT: You must specify a L4 protocol and not use inversions on it
[  399.341879][ T8697] Dead loop on virtual device ip6_vti0, fix it urgently!
[  400.979353][ T8701] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  401.141216][ T8701] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  401.187477][ T5829] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  401.592941][ T8709] netlink: 'syz.7.575': attribute type 298 has an invalid length.
[  406.652285][ T8732] Bluetooth: hci0: service_discovery: expected 52 bytes, got 7 bytes
[  406.845662][ T8726] veth0_to_team: entered promiscuous mode
[  406.851486][ T8726] veth0_to_team: entered allmulticast mode
[  410.096454][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.590'.
[  410.218575][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.590'.
[  411.081820][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.590'.
[  411.090822][ T8753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.590'.
[  416.269308][ T8777] batadv0: entered promiscuous mode
[  416.328144][ T8771] delete_channel: no stack
[  416.363110][ T8777] batadv0: left promiscuous mode
[  420.250722][ T8807] Smack: duplicate mount options
[  422.153076][   T29] kauditd_printk_skb: 60 callbacks suppressed
[  422.153139][   T29] audit: type=1326 audit(1734006984.024:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  423.669784][   T29] audit: type=1326 audit(1734006984.024:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.181691][   T29] audit: type=1326 audit(1734006984.034:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.215257][   T29] audit: type=1326 audit(1734006984.034:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.239949][   T29] audit: type=1326 audit(1734006984.034:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.263391][   T29] audit: type=1326 audit(1734006984.034:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.284959][   T29] audit: type=1326 audit(1734006984.034:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.306810][   T29] audit: type=1326 audit(1734006984.044:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  424.384028][ T8828] netlink: 'syz.6.605': attribute type 10 has an invalid length.
[  424.406288][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.6.605'.
[  424.695146][   T29] audit: type=1800 audit(1734006987.194:87): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.606" name="/" dev="9p" ino=2 res=0 errno=0
[  424.717154][ T8834] netfs: Couldn't get user pages (rc=-14)
[  425.631275][   T29] audit: type=1326 audit(1734006987.574:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8826 comm="syz.3.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3958d85d19 code=0x7ffc0000
[  426.526079][ T8855] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  427.835589][ T8828] team0: Port device geneve0 added
[  427.889632][ T8828] syz.6.605 (8828) used greatest stack depth: 17904 bytes left
[  440.452351][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  440.573107][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  441.686884][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e935400: rx timeout, send abort
[  442.197256][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805e935400: abort rx timeout. Force session deactivation
[  444.832122][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.7.631'.
[  446.040113][ T8957] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  447.015562][ T8968] syz.2.633 (8968): drop_caches: 2
[  449.060470][ T8979] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  455.465349][ T2151] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  456.433699][ T2151] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  456.462874][ T2151] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  456.516023][ T2151] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  456.549366][ T9025] netlink: 'syz.5.645': attribute type 32 has an invalid length.
[  456.576487][ T2151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.659546][ T2151] usb 4-1: can't set config #27, error -71
[  456.739211][ T2151] usb 4-1: USB disconnect, device number 11
[  456.998482][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'.
[  457.021644][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'.
[  457.211890][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'.
[  457.261387][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'.
[  458.717005][ T9051] loop7: detected capacity change from 0 to 16384
[  458.742309][ T9051] blk_print_req_error: 27 callbacks suppressed
[  458.742334][ T9051] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  459.638376][ T9059] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  459.732895][ T9059] buffer_io_error: 27 callbacks suppressed
[  459.732919][ T9059] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  459.768116][ T5832] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  460.642605][ T9059] Buffer I/O error on dev loop7, logical block 1, lost async page write
[  460.823806][ T9059] Buffer I/O error on dev loop7, logical block 2, lost async page write
[  461.439012][ T9059] Buffer I/O error on dev loop7, logical block 3, lost async page write
[  461.871424][ T9059] Buffer I/O error on dev loop7, logical block 4, lost async page write
[  462.078275][ T9059] Buffer I/O error on dev loop7, logical block 5, lost async page write
[  462.115104][ T9059] Buffer I/O error on dev loop7, logical block 6, lost async page write
[  462.181803][ T9059] Buffer I/O error on dev loop7, logical block 7, lost async page write
[  462.194345][ T9059] Buffer I/O error on dev loop7, logical block 8, lost async page write
[  462.283557][ T9059] Buffer I/O error on dev loop7, logical block 9, lost async page write
[  466.245016][ T5878] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  466.253128][ T5878] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  466.981354][ T5878] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  468.685935][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.7.664'.
[  468.702792][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.7.664'.
[  468.715620][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.7.664'.
[  468.725422][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.7.664'.
[  470.120130][ T9116] netlink: 'syz.5.669': attribute type 1 has an invalid length.
[  470.127933][ T9116] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.669'.
[  472.329369][ T9124] netdevsim netdevsim3: Direct firmware load for — failed with error -2
[  472.338417][ T9124] netdevsim netdevsim3: Falling back to sysfs fallback for: —
[  478.741071][ T9166] binder: 9162:9166 ioctl c0306201 20000940 returned -14
[  486.290955][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'.
[  490.966671][ T9240] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in;
[  490.966671][ T9240]    program syz.6.696 not setting count and/or reply_len properly
[  494.303536][ T9237] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  494.313145][ T9237] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  494.348323][ T9255] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  498.419914][ T9281] Cannot find del_set index 3 as target
[  503.504783][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  503.511159][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  507.548971][ T9327] netlink: 277 bytes leftover after parsing attributes in process `syz.2.713'.
[  514.138274][ T9364] vivid-007: disconnect
[  514.155591][ T9364] vivid-007: reconnect
[  516.634101][ T9380] No control pipe specified
[  519.253298][ T9391] tty tty3: ldisc open failed (-12), clearing slot 2
[  524.796711][ T9412] delete_channel: no stack
[  525.531274][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.738'.
[  525.541053][ T9432] netlink: 'syz.3.738': attribute type 18 has an invalid length.
[  525.549277][ T9432] netlink: 'syz.3.738': attribute type 15 has an invalid length.
[  525.601801][ T9432] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  525.610910][ T9432] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  525.619646][ T9432] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  525.628379][ T9432] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  525.639788][ T9432] vxlan0: entered promiscuous mode
[  526.422522][ T9437] bpf: Bad value for 'gid'
[  545.265432][ T9536] Invalid option length (0) for dns_resolver key
[  548.364835][ T9549] netlink: 300 bytes leftover after parsing attributes in process `syz.6.762'.
[  550.261248][ T9552] trusted_key: syz.5.764 sent an empty control message without MSG_MORE.
[  551.480487][ T9564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  552.056976][ T9562] tty tty27: ldisc open failed (-12), clearing slot 26
[  553.002705][ T9574] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  554.664008][ T9585] serio: Serial port ptm0
[  554.690131][ T9590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  554.738138][ T9594] random: crng reseeded on system resumption
[  555.922198][ T9590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  555.929548][ T9590] IPv6: NLM_F_CREATE should be set when creating new route
[  555.936905][ T9590] IPv6: NLM_F_CREATE should be set when creating new route
[  556.002786][ T5832] Bluetooth: hci0: unexpected event for opcode 0x2026
[  559.988389][ T9624] /dev/nullb0: Can't open blockdev
[  560.135034][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.7.782'.
[  560.144438][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.7.782'.
[  560.224739][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  560.224800][   T29] audit: type=1326 audit(1734007122.904:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9623 comm="syz.7.782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe31985d19 code=0x0
[  563.187038][ T9640] fuse: Unknown parameter '0x0000000000000006'
[  563.297192][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  563.309899][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  566.672164][ T9669] Process accounting resumed
[  576.081401][ T9720] delete_channel: no stack
[  582.163650][ T9765] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  583.026381][ T9768] xt_cgroup: xt_cgroup: no path or classid specified
[  588.047417][ T9789] Driver unsupported XDP return value 0 on prog  (id 191) dev N/A, expect packet loss!
[  588.671856][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  592.378821][ T9825] @: renamed from vlan0 (while UP)
[  599.758345][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.825'.
[  599.767918][ T9860] netlink: 20 bytes leftover after parsing attributes in process `syz.7.825'.
[  599.887329][ T9861] netlink: 16 bytes leftover after parsing attributes in process `syz.7.825'.
[  599.896435][ T9861] netlink: 20 bytes leftover after parsing attributes in process `syz.7.825'.
[  600.550490][ T9852] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  601.222514][ T5826] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  602.375769][ T9875] serio: Serial port ptm0
[  603.180745][ T9879] (syz.5.826,9879,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  603.192227][ T9879] (syz.5.826,9879,1):ocfs2_fill_super:1178 ERROR: status = -22
[  604.949199][ T9891] QAT: Stopping all acceleration devices.
[  604.959545][ T9891] netlink: 140 bytes leftover after parsing attributes in process `syz.7.831'.
[  606.701722][ T9903] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  607.381899][ T5875] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  607.863863][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.835'.
[  607.995488][ T9916] hub 2-0:1.0: USB hub found
[  608.008860][ T9916] hub 2-0:1.0: 1 port detected
[  608.411655][ T5875] usb 8-1: Using ep0 maxpacket: 8
[  608.422134][ T5875] usb 8-1: config 0 has an invalid interface number: 48 but max is 0
[  608.443225][ T5875] usb 8-1: config 0 has no interface number 0
[  608.567994][ T5875] usb 8-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  608.579088][ T5875] usb 8-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  608.593034][ T5875] usb 8-1: config 0 interface 48 has no altsetting 0
[  608.602143][ T5875] usb 8-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  608.611251][ T5875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.624343][ T5875] usb 8-1: config 0 descriptor??
[  608.640783][ T9925] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  609.505988][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'.
[  610.632231][ T5875] usb 8-1: string descriptor 0 read error: -71
[  610.650589][ T5875] usb 8-1: USB disconnect, device number 2
[  613.404517][ T2151] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  613.464112][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  613.591901][ T2151] usb 8-1: Using ep0 maxpacket: 8
[  613.634732][ T5906] usb 6-1: Using ep0 maxpacket: 32
[  613.645834][ T5906] usb 6-1: unable to get BOS descriptor or descriptor too short
[  613.689737][ T2151] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.733188][ T5906] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 204, changing to 11
[  613.781208][ T2151] usb 8-1: config 0 has no interfaces?
[  613.856503][ T5906] usb 6-1: config 1 interface 0 has no altsetting 0
[  613.863357][ T2151] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  613.895588][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40
[  613.957030][ T2151] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.973575][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.983967][ T2151] usb 8-1: config 0 descriptor??
[  613.988964][ T5906] usb 6-1: Product: syz
[  613.993403][ T5906] usb 6-1: Manufacturer: syz
[  613.998185][ T2151] usb 8-1: can't set config #0, error -71
[  614.004177][ T5906] usb 6-1: SerialNumber: syz
[  614.010085][ T2151] usb 8-1: USB disconnect, device number 3
[  614.064736][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input14
[  614.493508][ T5179] bcm5974 6-1:1.0: could not read from device
[  615.541558][ T5906] usb 6-1: USB disconnect, device number 10
[  619.656748][T10011] netlink: 'syz.3.850': attribute type 1 has an invalid length.
[  619.664761][T10011] netlink: 'syz.3.850': attribute type 3 has an invalid length.
[  619.672742][T10011] netlink: 224 bytes leftover after parsing attributes in process `syz.3.850'.
[  620.576848][T10014] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  622.816190][T10033] netlink: 92 bytes leftover after parsing attributes in process `syz.6.856'.
[  623.417757][ T5877] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  624.977923][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.984856][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  627.538619][ T5877] usb 8-1: device descriptor read/all, error -71
[  630.243731][T10069] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  630.251577][T10069] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  630.602762][T10069] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  630.608892][T10069] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  631.552593][T10085] kvm: pic: non byte write
[  631.690875][T10085] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  633.651145][ T5826] Bluetooth: hci3: command 0x0406 tx timeout
[  633.657387][ T5826] Bluetooth: hci1: command 0x0c1a tx timeout
[  633.663587][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout
[  634.150902][T10094] binder: BINDER_SET_CONTEXT_MGR already set
[  634.157780][T10094] binder: 10081:10094 ioctl 4018620d 200002c0 returned -16
[  636.344185][T10111] ALSA: mixer_oss: invalid OSS volume 'u'
[  641.041525][T10142] pim6reg527: entered allmulticast mode
[  642.546649][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.7.879'.
[  642.555648][T10149] netlink: 48 bytes leftover after parsing attributes in process `syz.7.879'.
[  643.854051][   T29] audit: type=1800 audit(1734007206.554:111): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.881" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  643.879894][T10162] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  645.177174][T10181] xt_CT: You must specify a L4 protocol and not use inversions on it
[  646.705435][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.887'.
[  646.794038][T10200] xt_HMARK: proto mask must be zero with L3 mode
[  650.576196][T10220] kvm: pic: non byte write
[  650.614740][T10220] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  650.651697][ T5829] IPVS: starting estimator thread 0...
[  650.741667][ T5875] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  650.768352][T10226] IPVS: using max 20 ests per chain, 48000 per kthread
[  650.941680][ T5875] usb 8-1: Using ep0 maxpacket: 16
[  651.533791][ T5875] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  651.545556][ T5875] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  651.556887][ T5875] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  651.567009][ T5875] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 225
[  651.628078][ T5875] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  651.637561][ T5875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.645687][ T5875] usb 8-1: Product: syz
[  651.651051][ T5875] usb 8-1: Manufacturer: syz
[  651.655886][ T5875] usb 8-1: SerialNumber: syz
[  651.717137][ T5875] usb 8-1: config 0 descriptor??
[  651.723327][T10221] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  651.736295][    C1] port100 8-1:0.0: NFC: Urb failure (status -71)
[  651.743585][ T5875] port100 8-1:0.0: NFC: Could not get supported command types
[  651.898544][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  651.985241][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  653.135420][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  653.150947][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  653.159050][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  653.167342][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  653.954830][T10258] (syz.5.899,10258,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  653.964697][T10258] (syz.5.899,10258,0):ocfs2_fill_super:1178 ERROR: status = -22
[  657.378995][ T5826] Bluetooth: hci3: command tx timeout
[  659.655889][T10238] chnl_net:caif_netlink_parms(): no params data found
[  660.151575][ T5878] usb 8-1: USB disconnect, device number 6
[  660.163402][ T5826] Bluetooth: hci3: command tx timeout
[  662.353713][ T5826] Bluetooth: hci3: command tx timeout
[  663.857616][T10238] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.865649][T10238] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.873070][T10238] bridge_slave_0: entered allmulticast mode
[  663.880248][T10238] bridge_slave_0: entered promiscuous mode
[  663.888493][T10238] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.895820][T10238] bridge0: port 2(bridge_slave_1) entered disabled state
[  664.624514][T10238] bridge_slave_1: entered allmulticast mode
[  664.636862][T10238] bridge_slave_1: entered promiscuous mode
[  664.644593][ T5832] Bluetooth: hci3: command tx timeout
[  667.066464][T10238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.114738][T10238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  669.129588][T10238] team0: Port device team_slave_0 added
[  669.151399][T10238] team0: Port device team_slave_1 added
[  669.452550][T10328] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  669.514012][T10238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  669.521247][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  669.553091][T10338] loop7: detected capacity change from 0 to 7
[  669.560506][T10338] buffer_io_error: 6 callbacks suppressed
[  669.560525][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  669.580171][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  670.503917][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  670.949474][T10238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  670.968257][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  671.537546][T10238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  671.615301][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  671.667327][T10238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.903426][T10238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  672.904150][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  672.963676][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  673.092331][T10338] ldm_validate_partition_table(): Disk read failed.
[  673.108524][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  673.170741][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  673.291817][T10338] Buffer I/O error on dev loop7, logical block 0, async page read
[  673.390877][T10338] Dev loop7: unable to read RDB block 0
[  673.454011][T10338]  loop7: unable to read partition table
[  673.540361][T10338] loop7: partition table beyond EOD, truncated
[  673.630192][T10338] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  673.630192][T10338] 
) failed (rc=-5)
[  673.770834][ T5194] ldm_validate_partition_table(): Disk read failed.
[  673.778764][ T5194] Dev loop7: unable to read RDB block 0
[  673.786194][ T5194]  loop7: unable to read partition table
[  673.792234][ T5194] loop7: partition table beyond EOD, truncated
[  674.374953][T10238] hsr_slave_0: entered promiscuous mode
[  674.421195][T10238] hsr_slave_1: entered promiscuous mode
[  674.428775][T10238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  674.437123][T10238] Cannot create hsr debugfs directory
[  678.638908][T10238] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  678.745568][T10238] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  678.761093][T10238] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  679.918999][T10395] ntfs3: Bad value for 'gid'
[  679.923842][T10395] ntfs3: Bad value for 'gid'
[  680.526635][T10238] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  680.591565][ T5875] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  680.673846][T10238] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.689809][T10238] 8021q: adding VLAN 0 to HW filter on device team0
[  680.718049][T10238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  680.728871][T10238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  680.769154][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.776361][ T6099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.794372][ T5875] usb 8-1: device descriptor read/64, error -71
[  681.243513][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.250900][ T6099] bridge0: port 2(bridge_slave_1) entered forwarding state
[  681.951763][T10400] netlink: 52 bytes leftover after parsing attributes in process `syz.5.925'.
[  683.000446][   T29] audit: type=1326 audit(1734007245.724:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.5.928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fc6985d19 code=0x0
[  683.216547][T10412] netlink: 296 bytes leftover after parsing attributes in process `syz.5.928'.
[  683.512852][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'.
[  683.585845][T10412] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  684.961508][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  685.244853][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.930'.
[  685.385177][T10238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  686.001546][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  686.164167][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  686.185835][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  688.484595][T10459] 9pnet: Unknown protocol version 9p2000.„?ÒUÎ6ïu
[  689.073376][T10238] veth0_vlan: entered promiscuous mode
[  689.101006][T10238] veth1_vlan: entered promiscuous mode
[  689.757021][T10238] veth0_macvtap: entered promiscuous mode
[  689.766876][T10238] veth1_macvtap: entered promiscuous mode
[  689.799195][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.810283][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.820910][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.832105][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.842791][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.853826][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.864030][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.874777][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.884884][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.895600][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.905631][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  689.916197][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  689.928308][T10238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  690.000626][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.012050][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.022229][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.032941][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.043258][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.054363][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.064597][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.075326][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.085439][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.096287][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.106428][T10238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.117153][T10238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.128583][T10238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  690.139014][T10238] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  690.148089][T10238] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  690.157349][T10238] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  690.166906][T10238] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  690.541331][T10477] 9pnet_fd: Insufficient options for proto=fd
[  690.644738][T10466] fuse: Unknown parameter 'user_i00000000000000000000'
[  690.942206][ T8860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  690.950097][ T8860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.492183][T10484] xt_time: invalid argument - start or stop time greater than 23:59:59
[  691.836510][  T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  691.844705][  T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  691.934845][T10486] netlink: 256 bytes leftover after parsing attributes in process `syz.5.939'.
[  692.234903][ T1204] IPVS: starting estimator thread 0...
[  694.031749][T10487] IPVS: using max 19 ests per chain, 45600 per kthread
[  698.708442][T10518] kvm: pic: non byte write
[  698.735271][ T6624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  698.777194][ T6624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  698.899184][T10519] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  699.376489][T10526] netlink: 'syz.8.946': attribute type 2 has an invalid length.
[  700.293241][ T6624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  700.335403][ T6624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  702.688662][T10531] bpf: Bad value for 'uid'
[  703.946679][T10540] fuse: Bad value for 'user_id'
[  703.952261][T10540] fuse: Bad value for 'user_id'
[  704.338822][T10542] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  705.828287][ T6624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  705.951533][ T6624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.856750][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  708.354433][ T9776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  708.417590][ T9776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  709.741626][ T9776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  709.783798][ T9776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  709.853765][ T9776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  709.884834][T10571] netlink: 'syz.2.955': attribute type 10 has an invalid length.
[  709.884867][T10571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.955'.
[  709.959868][ T6624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  709.959972][ T6624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.070183][T10570] block nbd8: NBD_DISCONNECT
[  710.074026][T10570] block nbd8: Disconnected due to user request.
[  710.080759][T10570] block nbd8: shutting down sockets
[  710.364891][T10571] team0: Device geneve0 is of different type
[  710.365183][T10571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  711.997698][ T9776] Bluetooth: hci0: command tx timeout
[  712.643491][ T6624] bridge_slave_1: left allmulticast mode
[  712.735190][ T6624] bridge_slave_1: left promiscuous mode
[  713.280603][ T6624] bridge0: port 2(bridge_slave_1) entered disabled state
[  713.353570][ T6624] bridge_slave_0: left allmulticast mode
[  713.359614][ T6624] bridge_slave_0: left promiscuous mode
[  713.398935][ T6624] bridge0: port 1(bridge_slave_0) entered disabled state
[  713.547693][T10599] netlink: 36 bytes leftover after parsing attributes in process `syz.7.963'.
[  713.557581][T10599] netlink: 16 bytes leftover after parsing attributes in process `syz.7.963'.
[  713.752103][T10599] netlink: 36 bytes leftover after parsing attributes in process `syz.7.963'.
[  713.761111][T10599] netlink: 36 bytes leftover after parsing attributes in process `syz.7.963'.
[  714.009933][T10602] libceph: resolve 'c' (ret=-3): failed
[  714.081537][ T9776] Bluetooth: hci0: command tx timeout
[  716.162221][ T9776] Bluetooth: hci0: command tx timeout
[  716.680941][   T29] audit: type=1326 audit(1734007279.374:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.7.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  716.703692][   T29] audit: type=1326 audit(1734007279.374:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.7.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  716.726680][   T29] audit: type=1326 audit(1734007279.374:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.7.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  716.748759][   T29] audit: type=1326 audit(1734007279.384:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.7.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  717.064885][   T29] audit: type=1326 audit(1734007279.384:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10606 comm="syz.7.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  717.200606][ T6624] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  717.240657][ T6624] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  717.265417][T10612] loop7: detected capacity change from 0 to 16384
[  718.194156][ T2151] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  718.241970][ T2151] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  718.251879][ T9776] Bluetooth: hci0: command tx timeout
[  718.305881][T10617] loop7: detected capacity change from 16384 to 16383
[  718.376092][T10612] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  718.388168][T10612] I/O error, dev loop7, sector 4224 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  718.415110][T10612] I/O error, dev loop7, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  718.425002][T10612] buffer_io_error: 28 callbacks suppressed
[  718.425045][T10612] Buffer I/O error on dev loop7, logical block 512, async page read
[  718.521337][ T5906] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  718.636759][T10611] I/O error, dev loop7, sector 1664 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  718.649221][T10611] Buffer I/O error on dev loop7, logical block 208, lost async page write
[  718.658441][T10611] Buffer I/O error on dev loop7, logical block 209, lost async page write
[  718.673001][T10611] Buffer I/O error on dev loop7, logical block 210, lost async page write
[  718.683159][T10611] Buffer I/O error on dev loop7, logical block 211, lost async page write
[  718.700636][T10611] Buffer I/O error on dev loop7, logical block 212, lost async page write
[  718.710788][T10611] Buffer I/O error on dev loop7, logical block 213, lost async page write
[  718.720309][T10611] Buffer I/O error on dev loop7, logical block 214, lost async page write
[  718.730360][T10611] Buffer I/O error on dev loop7, logical block 215, lost async page write
[  718.739507][T10611] Buffer I/O error on dev loop7, logical block 216, lost async page write
[  718.796073][T10611] I/O error, dev loop7, sector 2688 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0
[  718.835721][T10611] I/O error, dev loop7, sector 3712 op 0x1:(WRITE) flags 0x800 phys_seg 48 prio class 0
[  719.259249][ T6624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.294118][ T6624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.342505][ T6624] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  719.425684][ T6624] bond0 (unregistering): Released all slaves
[  721.527915][ T6624] bond1 (unregistering): Released all slaves
[  723.416793][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  723.783412][T10641] xt_cgroup: xt_cgroup: no path or classid specified
[  724.003756][ T5906] usb 8-1: unable to get BOS descriptor or descriptor too short
[  724.009583][T10646] @: renamed from vlan0 (while UP)
[  724.019146][T10650] netlink: 60 bytes leftover after parsing attributes in process `syz.6.972'.
[  724.021075][ T5906] usb 8-1: no configurations
[  724.036032][ T5906] usb 8-1: can't read configurations, error -22
[  724.147580][T10554] chnl_net:caif_netlink_parms(): no params data found
[  724.388531][ T5906] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  724.777903][ T5906] usb 8-1: device descriptor read/64, error -32
[  725.422297][ T5906] usb usb8-port1: attempt power cycle
[  725.841629][ T5906] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  725.880296][ T5906] usb 8-1: device descriptor read/8, error -32
[  726.651705][ T5906] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  726.692372][ T5906] usb 8-1: device descriptor read/8, error -32
[  727.096386][T10683] syz.8.977(10683): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  727.296073][ T9776] Bluetooth: hci3: Invalid connection link type handle 0x00c9
[  727.311192][ T6624] IPVS: stopping master sync thread 8979 ...
[  727.511948][T10554] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.852858][ T5906] usb usb8-port1: unable to enumerate USB device
[  727.881599][T10554] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.894936][T10554] bridge_slave_0: entered allmulticast mode
[  727.903355][T10554] bridge_slave_0: entered promiscuous mode
[  727.947355][T10554] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.073294][T10554] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.093834][T10554] bridge_slave_1: entered allmulticast mode
[  728.234540][T10554] bridge_slave_1: entered promiscuous mode
[  731.069836][T10708] tipc: Trying to set illegal importance in message
[  731.142590][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  731.385811][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  731.423247][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  731.481675][ T1204] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  731.493344][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  731.500765][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  731.574061][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  731.643670][ T1204] usb 8-1: device descriptor read/64, error -32
[  732.700537][ T1204] raw-gadget.0 gadget.7: failed to queue suspend event
[  732.729399][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  732.889927][T10723] futex_wake_op: syz.7.984 tries to shift op by -1; fix this program
[  732.908304][T10723] syz.7.984: attempt to access beyond end of device
[  732.908304][T10723] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[  732.923152][T10723] hpfs: hpfs_map_sector(): read error
[  732.958599][T10723] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  733.618217][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  733.663792][T10727] netlink: 'syz.2.985': attribute type 10 has an invalid length.
[  733.771848][ T6624] hsr_slave_0: left promiscuous mode
[  733.861553][ T1204] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  733.939001][ T6624] hsr_slave_1: left promiscuous mode
[  733.953168][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  733.978161][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  734.009521][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  734.017660][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.836113][T10743] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  734.978708][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  735.052526][ T6624] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  735.060044][ T6624] batman_adv: batadv0: Removing interface: batadv_slave_1
[  735.442375][ T1204] usb 8-1: device descriptor read/64, error -32
[  735.551692][ T1204] raw-gadget.0 gadget.7: failed to queue suspend event
[  735.561128][ T1204] usb usb8-port1: attempt power cycle
[  735.571559][ T1204] raw-gadget.0 gadget.7: failed to queue disconnect event
[  735.613535][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  735.819501][ T6624] veth1_macvtap: left promiscuous mode
[  735.832083][ T6624] veth0_macvtap: left promiscuous mode
[  735.839530][ T6624] veth1_vlan: left promiscuous mode
[  735.855824][ T6624] veth0_vlan: left promiscuous mode
[  737.119064][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  737.127739][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  737.341734][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  737.375011][ T5832] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  737.401556][ T1204] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  737.436738][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  737.444224][ T1204] usb 8-1: device descriptor read/8, error -32
[  737.564517][ T1204] raw-gadget.0 gadget.7: failed to queue suspend event
[  737.572097][ T1204] raw-gadget.0 gadget.7: failed to queue reset event
[  737.661118][ T1204] raw-gadget.0 gadget.7: failed to queue resume event
[  737.745068][ T1204] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  737.800656][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  737.808025][ T1204] usb 8-1: device descriptor read/8, error -32
[  737.896182][ T6624] team0 (unregistering): Port device team_slave_1 removed
[  737.933948][ T1204] raw-gadget.0 gadget.7: failed to queue suspend event
[  737.941022][ T1204] usb usb8-port1: unable to enumerate USB device
[  738.027469][ T6624] team0 (unregistering): Port device team_slave_0 removed
[  738.292042][T10765] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  738.501823][ T1204] kernel write not supported for file bpf-prog (pid: 1204 comm: kworker/0:2)
[  739.899121][T10774] xt_CT: You must specify a L4 protocol and not use inversions on it
[  740.898738][T10554] team0: Port device team_slave_0 added
[  741.002336][T10554] team0: Port device team_slave_1 added
[  741.023050][T10764] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  741.029197][T10764] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  741.115244][T10764] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  741.135621][T10764] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  741.320492][T10764] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  742.264184][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.418922][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  742.468045][T10764] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  742.474206][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.503602][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.510633][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  742.571473][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.680802][ T9776] Bluetooth: hci3: command 0x0c1a tx timeout
[  743.688199][ T9776] Bluetooth: hci1: command 0x0c1a tx timeout
[  743.694735][ T9776] Bluetooth: hci5: command 0x0c1a tx timeout
[  743.940368][T10554] hsr_slave_0: entered promiscuous mode
[  744.172706][T10554] hsr_slave_1: entered promiscuous mode
[  744.293508][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  744.302637][T10554] Cannot create hsr debugfs directory
[  745.694551][T10829] tipc: Started in network mode
[  745.699590][T10829] tipc: Node identity ac14140f, cluster identity 4711
[  745.707585][T10829] tipc: New replicast peer: 10.1.1.2
[  745.715301][T10829] tipc: Enabled bearer <udp:syz0>, priority 10
[  745.872004][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  746.586171][T10838] syz.8.1002: attempt to access beyond end of device
[  746.586171][T10838] loop8: rw=0, sector=2, nr_sectors = 1 limit=0
[  746.600033][T10838] hfs: can't find a HFS filesystem on dev loop8
[  746.618126][T10554] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  746.691923][T10554] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  746.784208][T10842] syz.6.1004 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  746.806458][T10842] loop2: detected capacity change from 0 to 7
[  747.001633][ T2151] tipc: Node number set to 2886997007
[  747.676072][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  747.682693][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  747.743541][T10554] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  747.855802][T10842] Dev loop2: unable to read RDB block 7
[  747.871573][T10842]  loop2: AHDI p1 p2
[  747.875579][T10842] loop2: partition table partially beyond EOD, truncated
[  747.965299][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout
[  747.972172][T10554] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  748.664065][T10554] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.040990][T10864] hub 2-0:1.0: USB hub found
[  749.048365][T10864] hub 2-0:1.0: 1 port detected
[  749.736439][T10554] 8021q: adding VLAN 0 to HW filter on device team0
[  749.889596][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.896938][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  749.969016][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.976340][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.100240][T10891] libceph: resolve 'c' (ret=-3): failed
[  753.928520][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  754.183473][T10927] hub 2-0:1.0: USB hub found
[  754.189234][T10927] hub 2-0:1.0: 1 port detected
[  754.477245][ T5906] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  755.196618][ T5906] usb 9-1: config 0 has an invalid interface number: 100 but max is 0
[  755.205306][ T5906] usb 9-1: config 0 has an invalid interface number: 66 but max is 0
[  755.219972][ T5906] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.276430][ T5906] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  755.443660][ T5906] usb 9-1: config 0 has no interface number 0
[  755.449827][ T5906] usb 9-1: config 0 has no interface number 1
[  755.456161][ T5906] usb 9-1: config 0 interface 100 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  755.467240][ T5906] usb 9-1: config 0 interface 100 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  755.513400][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  755.529670][ T5906] usb 9-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  755.585050][ T5906] usb 9-1: config 0 interface 66 altsetting 153 endpoint 0x5 has invalid wMaxPacketSize 0
[  755.855360][ T5906] usb 9-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 0
[  755.873202][ T5906] usb 9-1: config 0 interface 66 altsetting 153 has 1 endpoint descriptor, different from the interface descriptor's value: 216
[  755.895164][ T5906] usb 9-1: config 0 interface 66 has no altsetting 0
[  756.710411][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  756.805728][ T5878] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[  756.815542][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  756.825843][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  756.921572][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  757.186271][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'.
[  757.235578][T10554] veth0_vlan: entered promiscuous mode
[  757.374402][ T5878] usb 8-1: device descriptor read/64, error -32
[  757.489667][ T5878] raw-gadget.0 gadget.7: failed to queue suspend event
[  757.490005][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  757.493616][T10554] veth1_vlan: entered promiscuous mode
[  757.551635][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  757.611662][ T5878] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  757.613321][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  757.613520][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  757.697653][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  757.709463][ T5906] usb 9-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad
[  757.709504][ T5906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.709529][ T5906] usb 9-1: Product: syz
[  757.709548][ T5906] usb 9-1: Manufacturer: syz
[  757.711906][ T5906] usb 9-1: config 0 descriptor??
[  757.712410][ T5906] usb 9-1: can't set config #0, error -71
[  757.714022][ T5906] usb 9-1: USB disconnect, device number 2
[  757.746900][T10554] veth0_macvtap: entered promiscuous mode
[  757.901550][ T5878] usb 8-1: device descriptor read/64, error -32
[  758.418196][T10959] 9pnet: Unknown protocol version 9p2000.„?ÒUÎ6ïu
[  758.938115][ T5878] raw-gadget.0 gadget.7: failed to queue suspend event
[  758.940171][ T5878] usb usb8-port1: attempt power cycle
[  758.940230][ T5878] raw-gadget.0 gadget.7: failed to queue disconnect event
[  758.940655][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  758.990065][T10554] veth1_macvtap: entered promiscuous mode
[  759.004851][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.004879][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.004893][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.004910][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.004927][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.004945][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.004959][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.004976][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.004991][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.005008][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.005022][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  759.005040][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.006122][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  759.010206][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010233][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.010247][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010264][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.010281][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010298][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.010312][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010329][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.010344][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010360][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.010375][T10554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  759.010392][T10554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  759.011347][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  759.044735][T10554] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  759.044781][T10554] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  759.044815][T10554] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  759.044847][T10554] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.146298][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  759.146615][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  759.351853][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  759.882464][ T5878] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[  759.962119][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  759.985762][ T5878] usb 8-1: device descriptor read/8, error -32
[  760.101520][ T5878] raw-gadget.0 gadget.7: failed to queue suspend event
[  760.123840][ T5878] raw-gadget.0 gadget.7: failed to queue reset event
[  760.215960][ T5878] raw-gadget.0 gadget.7: failed to queue resume event
[  760.794290][ T5878] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[  760.961614][T10989] mkiss: ax0: crc mode is auto.
[  761.321670][    C0] raw-gadget.0 gadget.7: ignoring, device is not running
[  761.328937][ T5878] usb 8-1: device descriptor read/8, error -32
[  761.380811][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  761.630162][ T5878] raw-gadget.0 gadget.7: failed to queue suspend event
[  761.638942][ T5878] usb usb8-port1: unable to enumerate USB device
[  761.654620][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  761.859637][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'.
[  762.474002][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  762.482812][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  763.181851][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1033'.
[  766.412324][ T5832] Bluetooth: hci3: unknown advertising packet type: 0xae
[  767.804320][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1053'.
[  767.975576][T11065] kvm: pic: non byte write
[  768.292282][T11076] CIFS: Unable to determine destination address
[  769.296432][T11053] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  769.305098][T11053] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  769.314126][T11053] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  770.915005][T11106] hub 9-0:1.0: USB hub found
[  770.953878][T11106] hub 9-0:1.0: 1 port detected
[  771.292381][T11121] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  771.305404][T11126] kvm: pic: non byte write
[  771.423632][T11134] fuse: Bad value for 'user_id'
[  771.438422][T11134] fuse: Bad value for 'user_id'
[  771.862250][T11142] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  774.016857][T11158] pimreg: entered allmulticast mode
[  774.041517][T11158] pimreg: left allmulticast mode
[  775.502901][T11167] hub 6-0:1.0: USB hub found
[  775.507843][T11167] hub 6-0:1.0: 1 port detected
[  778.186492][T11202] block device autoloading is deprecated and will be removed.
[  778.196020][T11202] syz.8.1087: attempt to access beyond end of device
[  778.196020][T11202] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  778.668519][T11217] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  778.779723][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1091'.
[  779.501829][T11229] 8021q: VLANs not supported on lo
[  780.960175][T11273] 9pnet_fd: Insufficient options for proto=fd
[  782.353483][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1112'.
[  782.900254][T11314] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1117'.
[  784.003718][T11328] netlink: 'syz.9.1119': attribute type 6 has an invalid length.
[  784.707652][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'.
[  785.180269][T11372] syz_tun: entered promiscuous mode
[  785.221894][T11372] macsec1: entered allmulticast mode
[  785.253717][T11372] syz_tun: entered allmulticast mode
[  785.342124][T11372] syz_tun: left allmulticast mode
[  785.347438][T11372] syz_tun: left promiscuous mode
[  786.082823][ T1204] kernel write not supported for file bpf-prog (pid: 1204 comm: kworker/0:2)
[  787.101782][ T1204] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  787.256064][ T1204] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  787.272993][ T1204] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.308369][ T1204] usb 9-1: Product: syz
[  787.323272][ T1204] usb 9-1: Manufacturer: syz
[  787.343793][ T1204] usb 9-1: SerialNumber: syz
[  787.438223][ T1204] r8152-cfgselector 9-1: Unknown version 0x0000
[  787.455121][ T1204] r8152-cfgselector 9-1: config 0 descriptor??
[  787.864748][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1166'.
[  787.891494][T11441] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1166'.
[  787.900610][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1166'.
[  787.906256][ T5988] r8152-cfgselector 9-1: USB disconnect, device number 3
[  787.951581][ T1204] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  787.971475][T11441] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1166'.
[  788.113387][ T1204] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  788.142584][ T1204] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  788.175746][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1169'.
[  788.180781][ T1204] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  788.203312][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1169'.
[  788.234734][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.272684][ T1204] usb 3-1: config 0 descriptor??
[  788.565166][ T1204] usb 3-1: USB disconnect, device number 15
[  788.729959][T11478] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1175'.
[  788.739532][T11478] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1175'.
[  788.943742][T11481] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  789.350804][T11486] vlan2: entered promiscuous mode
[  789.358072][T11486] vlan2: entered allmulticast mode
[  789.382963][T11486] vlan0: entered allmulticast mode
[  789.404639][T11486] veth0_vlan: entered allmulticast mode
[  789.410447][T11486] vlan0: entered promiscuous mode
[  789.474047][T11486] team0: Port device vlan2 added
[  789.943759][T11513] usb usb7: usbfs: process 11513 (syz.9.1187) did not claim interface 0 before use
[  790.280503][T11524] fuse: Bad value for 'user_id'
[  790.286123][T11524] fuse: Bad value for 'user_id'
[  790.619333][T11526] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  791.812056][T11542] netpci0: tun_chr_ioctl cmd 1074025677
[  791.830076][T11542] netpci0: linktype set to 5
[  791.917388][T11546] syzkaller1: entered promiscuous mode
[  791.987024][T11546] syzkaller1: entered allmulticast mode
[  792.369097][T11562] batman_adv: batadv0: Adding interface: ip6gretap1
[  792.384934][T11562] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  792.424247][T11562] batman_adv: batadv0: Interface activated: ip6gretap1
[  792.665380][ T5877] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  792.853953][T11573] siw: device registration error -23
[  792.873615][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1205'.
[  793.569164][T11571] team0: Device vlan3 is up. Set it down before adding it as a team port
[  793.737923][ T5877] usb 10-1: config 0 has no interfaces?
[  793.744131][ T5877] usb 10-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00
[  793.810507][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.838280][ T5877] usb 10-1: config 0 descriptor??
[  794.003021][T11582] netlink: 'syz.7.1211': attribute type 5 has an invalid length.
[  794.321036][   T46] usb 10-1: USB disconnect, device number 2
[  794.523918][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1215'.
[  794.736338][T11609] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  797.179797][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1232'.
[  797.792129][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1233'.
[  798.261608][ T5875] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  798.343128][T11684] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  798.408971][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'.
[  798.424056][ T5875] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  798.450061][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'.
[  798.461652][ T5875] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  798.511747][ T5875] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  798.531311][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.542754][ T5875] usb 10-1: Product: syz
[  798.551485][ T5875] usb 10-1: Manufacturer: syz
[  798.561560][ T5875] usb 10-1: SerialNumber: syz
[  798.778557][T11674] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  799.805946][T11674] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  800.109788][ T5875] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[  800.395040][T11722] fuse: Bad value for 'user_id'
[  800.400653][T11722] fuse: Bad value for 'user_id'
[  800.738216][ T5875] cdc_ncm 10-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  801.709445][ T5875] usb 10-1: USB disconnect, device number 3
[  802.192325][ T5875] cdc_ncm 10-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP)
[  802.370691][T11752] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  802.500167][T11751] kvm: pic: non byte write
[  802.674880][T11761] netlink: 'syz.9.1256': attribute type 11 has an invalid length.
[  802.841982][ T1204] IPVS: starting estimator thread 0...
[  802.851862][T11759] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  802.961323][T11768] IPVS: using max 17 ests per chain, 40800 per kthread
[  802.972498][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1258'.
[  803.026372][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1258'.
[  803.049789][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1258'.
[  803.636643][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1258'.
[  803.821538][T11226] udevd[11226]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory
[  803.893049][T11782] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  805.248458][T11787] 8021q: adding VLAN 0 to HW filter on device bond2
[  805.395876][T11787] bond1: (slave bond2): making interface the new active one
[  805.413969][T11787] bond1: (slave bond2): Enslaving as an active interface with an up link
[  807.052149][T11831] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  808.132809][T11854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.142052][T11854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.610754][T11862] input: syz0 as /devices/virtual/input/input16
[  809.073736][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  809.080135][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  810.162827][T11884] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  810.650422][T11898] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  811.012990][T11902] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  811.042135][T11902] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  811.383492][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880606f2c00: rx timeout, send abort
[  811.392676][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880606f2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  813.541860][T11937] netlink: 'syz.7.1299': attribute type 4 has an invalid length.
[  813.599652][T11938] netlink: 'syz.7.1299': attribute type 4 has an invalid length.
[  814.114348][ T5906] kernel write not supported for file bpf-prog (pid: 5906 comm: kworker/1:6)
[  815.262258][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.271014][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  815.348884][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  815.428143][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1311'.
[  816.522704][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  816.546262][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1316'.
[  816.606172][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  817.169210][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'.
[  817.589966][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1326'.
[  822.066831][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1347'.
[  822.076151][T12072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'.
[  822.085607][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1347'.
[  822.089282][T12073] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  822.095328][T12072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1347'.
[  824.129268][T12108] /dev/nullb0: Can't open blockdev
[  825.692868][ T5877] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  825.700549][ T5878] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  825.874437][ T5877] usb 3-1: Using ep0 maxpacket: 8
[  825.881414][ T5878] usb 10-1: Using ep0 maxpacket: 32
[  825.905693][ T5878] usb 10-1: config 0 has an invalid interface number: 111 but max is 1
[  825.924014][ T5877] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[  825.946600][ T5878] usb 10-1: config 0 has no interface number 1
[  825.956128][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.988080][ T5878] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  826.001486][ T5877] usb 3-1: Product: syz
[  826.005704][ T5877] usb 3-1: Manufacturer: syz
[  826.010425][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.027210][ T5877] usb 3-1: SerialNumber: syz
[  826.037226][ T5878] usb 10-1: Product: syz
[  826.054394][ T5877] usb 3-1: config 0 descriptor??
[  826.059604][ T5878] usb 10-1: Manufacturer: syz
[  826.072118][ T5878] usb 10-1: SerialNumber: syz
[  826.092193][ T5877] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[  826.106797][ T5878] usb 10-1: config 0 descriptor??
[  826.399344][ T5877] pwc: send_video_command error -71
[  826.404891][ T5877] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  826.412785][ T5877] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  826.456375][ T5877] usb 3-1: USB disconnect, device number 17
[  827.518207][ T5878] snd-usb-6fire 10-1:0.111: unable to receive device firmware state.
[  827.526644][ T5878] snd-usb-6fire 10-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  827.563196][ T5878] usb 10-1: USB disconnect, device number 4
[  829.442415][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  829.454076][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  829.651574][   T46] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  829.801485][   T46] usb 3-1: Using ep0 maxpacket: 16
[  829.822005][   T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  829.839183][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  829.860884][   T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  829.898485][   T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  829.921853][   T46] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  829.962695][   T46] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  829.981469][   T46] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  829.990060][   T46] usb 3-1: Manufacturer: syz
[  830.004789][   T46] usb 3-1: config 0 descriptor??
[  830.072350][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  830.168928][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  830.513305][   T46] rc_core: IR keymap rc-hauppauge not found
[  830.519295][   T46] Registered IR keymap rc-empty
[  830.524999][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.110168][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.288761][   T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  831.304038][   T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17
[  831.319326][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.511560][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.585383][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.627369][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.651683][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.679403][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.701589][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.721737][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.741691][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.790090][   T46] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  831.834738][   T46] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  831.869051][   T46] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  832.798830][   T46] usb 3-1: USB disconnect, device number 18
[  837.086173][   T29] audit: type=1804 audit(1734007399.524:118): pid=12223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1388" name="/newroot/230/file0/file0" dev="ramfs" ino=38559 res=1 errno=0
[  837.228954][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.430180][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.491027][T12229] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  837.682547][T12237] overlayfs: overlapping lowerdir path
[  838.224011][   T29] audit: type=1326 audit(1734007400.954:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12248 comm="syz.9.1394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f15a5f85d19 code=0x0
[  838.419241][T12255] ptrace attach of ""[12258] was attempted by "./syz-executor exec"[12255]
[  844.122156][T12287] debugfs: Directory 'netdev:nicvf0' with parent 'phy23' already present!
[  846.014581][T12304] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1408'.
[  847.731230][T12318] ip6t_rpfilter: unknown options
[  848.881626][ T5906] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  849.210786][T12329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  849.251823][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short
[  849.278869][ T5906] usb 3-1: not running at top speed; connect to a high speed hub
[  849.938685][ T5906] usb 3-1: config 4 has an invalid interface number: 86 but max is 0
[  849.950553][ T5906] usb 3-1: config 4 has no interface number 0
[  849.958551][ T5906] usb 3-1: config 4 interface 86 has no altsetting 0
[  849.968454][ T5906] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=99.ad
[  849.978108][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.991776][ T5906] usb 3-1: Product: syz
[  849.996030][ T5906] usb 3-1: Manufacturer: syz
[  850.016054][ T5906] usb 3-1: SerialNumber: syz
[  850.502356][   T29] audit: type=1326 audit(1734007413.224:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12338 comm="syz.7.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x0
[  850.657121][ T5906] dvb-usb: found a 'PCTV HDTV USB' in warm state.
[  850.674811][ T5906] pctv452e: pctv452e_power_ctrl: 1
[  850.674811][ T5906] 
[  850.684357][ T5906] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  850.684357][ T5906] 
[  850.758407][ T5906] dvb-usb: bulk message failed: -22 (5/0)
[  850.812307][ T5906] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  850.830301][ T5906] dvb-usb: PCTV HDTV USB error while loading driver (-19)
[  850.864601][ T5906] usb 3-1: USB disconnect, device number 19
[  852.425745][T12365] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  853.496512][ T5988] kernel write not supported for file bpf-prog (pid: 5988 comm: kworker/0:7)
[  855.133378][T12390] netdevsim netdevsim6: Direct firmware load for printk failed with error -2
[  855.142923][T12390] netdevsim netdevsim6: Falling back to sysfs fallback for: printk
[  855.215530][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1433'.
[  855.416630][T12398] fuse: Bad value for 'fd'
[  856.162630][T12398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  856.808697][T12402] CIFS mount error: No usable UNC path provided in device string!
[  856.808697][T12402] 
[  856.818876][T12402] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  860.970776][ T9776] Bluetooth: hci5: unexpected event for opcode 0x0406
[  861.522733][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1445'.
[  865.392909][T12466] syz.9.1453: attempt to access beyond end of device
[  865.392909][T12466] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  867.776334][T12484] 9pnet_fd: Insufficient options for proto=fd
[  869.570071][T12493] vlan0: entered promiscuous mode
[  869.575559][T12493] team0: entered promiscuous mode
[  869.580645][T12493] team_slave_0: entered promiscuous mode
[  869.587476][T12493] team_slave_1: entered promiscuous mode
[  869.593436][T12493] geneve0: entered promiscuous mode
[  869.599190][T12493] vlan0: entered allmulticast mode
[  869.604475][T12493] team0: entered allmulticast mode
[  869.609759][T12493] team_slave_0: entered allmulticast mode
[  869.615630][T12493] team_slave_1: entered allmulticast mode
[  869.621848][T12493] geneve0: entered allmulticast mode
[  869.629243][T12493] team0: Device vlan0 is already an upper device of the team interface
[  870.662378][T12493] team0: left allmulticast mode
[  870.668740][T12493] team_slave_0: left allmulticast mode
[  870.675647][T12493] team_slave_1: left allmulticast mode
[  870.681397][T12493] geneve0: left allmulticast mode
[  870.691797][T12493] team0: left promiscuous mode
[  870.696981][T12493] team_slave_0: left promiscuous mode
[  870.703814][T12493] team_slave_1: left promiscuous mode
[  870.710511][T12493] geneve0: left promiscuous mode
[  871.141066][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  871.147557][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  872.559176][T12507] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  872.753941][T12510] xt_nat: multiple ranges no longer supported
[  875.328014][T12532] syz.7.1467 (12532): drop_caches: 2
[  878.091612][ T9776] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  882.763317][T12587] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  884.813321][T12595] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  887.898891][ T9776] Bluetooth: hci0: unexpected event for opcode 0x0c2d
[  889.675257][ T1204] kernel write not supported for file bpf-prog (pid: 1204 comm: kworker/0:2)
[  892.290137][T12645] netlink: 'syz.8.1496': attribute type 1 has an invalid length.
[  894.678091][T12659] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  896.594637][T12660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  900.803733][T12697] binder_alloc: 12694: binder_alloc_buf, no vma
[  902.184735][T12707] Bluetooth: MGMT ver 1.23
[  908.337237][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  913.741553][   T29] audit: type=1326 audit(1734007476.464:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.603453][   T29] audit: type=1326 audit(1734007476.464:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.631868][   T29] audit: type=1326 audit(1734007477.304:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.835538][   T29] audit: type=1326 audit(1734007477.304:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.857411][   T29] audit: type=1326 audit(1734007477.304:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.879196][   T29] audit: type=1326 audit(1734007477.324:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.901157][   T29] audit: type=1326 audit(1734007477.324:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.923337][   T29] audit: type=1326 audit(1734007477.324:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.945580][   T29] audit: type=1326 audit(1734007477.334:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  914.967533][   T29] audit: type=1326 audit(1734007477.334:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12774 comm="syz.9.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15a5f85d19 code=0x7ffc0000
[  915.087791][T12788] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  915.094851][T12788] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  915.106376][T12788] vhci_hcd vhci_hcd.0: Device attached
[  915.142297][T12789] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  916.171647][ T5878] vhci_hcd: vhci_device speed not set
[  916.382281][ T5878] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[  916.401984][ T8853] vhci_hcd: stop threads
[  916.425418][ T8853] vhci_hcd: release socket
[  916.572679][ T8853] vhci_hcd: disconnect device
[  918.981561][T12814] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1538'.
[  922.541490][ T5878] vhci_hcd: vhci_device speed not set
[  929.183017][T12869] Bluetooth: MGMT ver 1.23
[  932.515949][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  932.522429][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  938.121622][T12922] openvswitch: netlink: IP tunnel dst address not specified
[  938.132184][T12922] sch_fq: defrate 2 ignored.
[  938.502020][T12932] vivid-003: disconnect
[  940.493911][T12945] ip6gre1: entered promiscuous mode
[  940.783667][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.795971][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.088608][T12924] vivid-003: reconnect
[  942.801767][ T5906] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  943.642286][ T5906] usb 10-1: Using ep0 maxpacket: 8
[  944.863690][ T5906] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  944.872177][ T5906] usb 10-1: config 179 has no interface number 0
[  944.878708][ T5906] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  944.890060][ T5906] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  944.901478][ T5906] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  944.911898][ T5906] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  944.958903][ T5906] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  944.968203][ T5906] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.043669][ T5906] usb 10-1: can't set config #179, error -71
[  945.097662][ T5906] usb 10-1: USB disconnect, device number 5
[  947.377631][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1578'.
[  951.154771][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1580'.
[  952.741544][T13019] netlink: 'syz.2.1583': attribute type 4 has an invalid length.
[  956.371534][T13042] fuse: Bad value for 'user_id'
[  956.376480][T13042] fuse: Bad value for 'user_id'
[  957.453331][T13049] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.593968][T13052] vivid-007: disconnect
[  957.606542][T13052] vivid-007: reconnect
[  958.702777][T13067] fuse: Unknown parameter 'Šþ40xffffffffffffffff'
[  964.427074][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  964.427142][   T29] audit: type=1326 audit(1734007527.763:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  964.791611][   T29] audit: type=1326 audit(1734007527.763:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  964.861501][   T29] audit: type=1326 audit(1734007527.773:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  964.938524][T13108] fuse: Bad value for 'user_id'
[  964.960545][T13108] fuse: Bad value for 'user_id'
[  965.056963][T13108] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  965.090977][   T29] audit: type=1326 audit(1734007527.773:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  965.190107][   T29] audit: type=1326 audit(1734007527.773:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  965.487008][   T29] audit: type=1326 audit(1734007527.783:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe31984680 code=0x7ffc0000
[  965.531172][   T29] audit: type=1326 audit(1734007527.783:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  966.555689][   T29] audit: type=1326 audit(1734007527.793:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  967.407349][   T29] audit: type=1326 audit(1734007527.793:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  967.468638][   T29] audit: type=1326 audit(1734007527.793:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13086 comm="syz.7.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe31985d19 code=0x7ffc0000
[  967.847541][T13124] 8021q: adding VLAN 0 to HW filter on device bond1
[  967.856107][T13124] team0: Port device bond1 added
[  968.874436][ T5832] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  969.373233][T13132] use of bytesused == 0 is deprecated and will be removed in the future,
[  969.382917][T13132] use the actual size instead.
[  971.904844][T13152] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  975.381754][T13166] QAT: Stopping all acceleration devices.
[  976.551756][T13166] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1617'.
[  980.196944][T10623] raw-gadget.0 gadget.7: failed to queue disconnect event
[  982.473076][T13194] netlink: 'syz.2.1625': attribute type 4 has an invalid length.
[  982.480977][T13194] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1625'.
[  982.826740][T13199] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  982.860225][T13199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  982.870574][T13199] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  982.886771][T13199] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  982.894990][T13199] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  982.902763][T13199] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  985.931557][ T9776] Bluetooth: hci4: command tx timeout
[  988.017651][ T9776] Bluetooth: hci4: command tx timeout
[  989.390528][T13236] Can't find ip_set type has
[  989.630637][T13246] netlink: 'syz.9.1633': attribute type 1 has an invalid length.
[  990.347508][ T9776] Bluetooth: hci4: command tx timeout
[  990.460039][T13232] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  990.962797][T13265] 
: renamed from bond0 (while UP)
[  991.945001][T13265] overlayfs: failed to resolve './bus': -2
[  991.966847][T13192] chnl_net:caif_netlink_parms(): no params data found
[  992.711723][T13199] Bluetooth: hci4: command tx timeout
[  993.378776][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  993.385291][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  996.386063][T13192] bridge0: port 1(bridge_slave_0) entered blocking state
[  996.652615][T13307] xt_time: invalid argument - start or stop time greater than 23:59:59
[  997.093711][T13192] bridge0: port 1(bridge_slave_0) entered disabled state
[  997.101063][T13192] bridge_slave_0: entered allmulticast mode
[  997.108575][T13192] bridge_slave_0: entered promiscuous mode
[  997.116880][T13192] bridge0: port 2(bridge_slave_1) entered blocking state
[  997.124474][T13192] bridge0: port 2(bridge_slave_1) entered disabled state
[  997.132082][T13192] bridge_slave_1: entered allmulticast mode
[  997.139290][T13192] bridge_slave_1: entered promiscuous mode
[  997.393543][T13192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  997.496871][T13192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.074886][T13192] team0: Port device team_slave_0 added
[  999.144452][T13192] team0: Port device team_slave_1 added
[  999.345196][T13192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  999.360793][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  999.685158][T13192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  999.774821][T13192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  999.816069][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.291390][T13192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.334659][T13329] block nbd9: shutting down sockets
[ 1000.762263][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1648'.
[ 1001.272183][T13331] 
[ 1001.274664][T13331] ======================================================
[ 1001.281714][T13331] WARNING: possible circular locking dependency detected
[ 1001.288775][T13331] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted
[ 1001.296040][T13331] ------------------------------------------------------
[ 1001.303092][T13331] syz.9.1650/13331 is trying to acquire lock:
[ 1001.309196][T13331] ffff888025b998b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xd3/0x3f0
[ 1001.318502][T13331] 
[ 1001.318502][T13331] but task is already holding lock:
[ 1001.325908][T13331] ffff88802547fb38 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[ 1001.336165][T13331] 
[ 1001.336165][T13331] which lock already depends on the new lock.
[ 1001.336165][T13331] 
[ 1001.346611][T13331] 
[ 1001.346611][T13331] the existing dependency chain (in reverse order) is:
[ 1001.355660][T13331] 
[ 1001.355660][T13331] -> #5 (&q->sysfs_lock){+.+.}-{4:4}:
[ 1001.363315][T13331]        lock_acquire+0x1ed/0x550
[ 1001.368476][T13331]        __mutex_lock+0x1ac/0xee0
[ 1001.373592][T13331]        blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[ 1001.380022][T13331]        nbd_start_device+0x16c/0xaa0
[ 1001.385440][T13331]        nbd_ioctl+0x5dc/0xf40
[ 1001.390338][T13331]        blkdev_ioctl+0x57d/0x6a0
[ 1001.395400][T13331]        __se_sys_ioctl+0xf5/0x170
[ 1001.400750][T13331]        do_syscall_64+0xf3/0x230
[ 1001.405825][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.412283][T13331] 
[ 1001.412283][T13331] -> #4 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[ 1001.421033][T13331]        lock_acquire+0x1ed/0x550
[ 1001.426082][T13331]        blk_mq_submit_bio+0x1536/0x2390
[ 1001.431746][T13331]        __submit_bio+0x2c6/0x560
[ 1001.436789][T13331]        submit_bio_noacct_nocheck+0x4d3/0xe30
[ 1001.442974][T13331]        block_read_full_folio+0x9b3/0xae0
[ 1001.448804][T13331]        filemap_read_folio+0x148/0x3b0
[ 1001.454370][T13331]        filemap_get_pages+0x18ca/0x2080
[ 1001.460024][T13331]        filemap_read+0x452/0xf50
[ 1001.465062][T13331]        blkdev_read_iter+0x2d8/0x430
[ 1001.470444][T13331]        vfs_read+0x991/0xb70
[ 1001.475139][T13331]        ksys_read+0x18f/0x2b0
[ 1001.479913][T13331]        do_syscall_64+0xf3/0x230
[ 1001.484954][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.491385][T13331] 
[ 1001.491385][T13331] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}:
[ 1001.499981][T13331]        lock_acquire+0x1ed/0x550
[ 1001.505117][T13331]        down_read+0xb1/0xa40
[ 1001.509815][T13331]        filemap_fault+0x615/0x1490
[ 1001.515039][T13331]        __do_fault+0x135/0x390
[ 1001.519909][T13331]        handle_pte_fault+0x39eb/0x5ed0
[ 1001.525466][T13331]        handle_mm_fault+0x1053/0x1ad0
[ 1001.530930][T13331]        __get_user_pages+0x1c82/0x49e0
[ 1001.536486][T13331]        populate_vma_page_range+0x264/0x330
[ 1001.542490][T13331]        __mm_populate+0x27a/0x460
[ 1001.547616][T13331]        vm_mmap_pgoff+0x2c3/0x3d0
[ 1001.552773][T13331]        ksys_mmap_pgoff+0x4eb/0x720
[ 1001.558082][T13331]        do_syscall_64+0xf3/0x230
[ 1001.563128][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.569556][T13331] 
[ 1001.569556][T13331] -> #2 (&mm->mmap_lock){++++}-{4:4}:
[ 1001.577223][T13331]        lock_acquire+0x1ed/0x550
[ 1001.582297][T13331]        __might_fault+0xc6/0x120
[ 1001.587329][T13331]        _copy_from_user+0x2a/0xc0
[ 1001.592460][T13331]        blk_trace_ioctl+0x1ad/0x9a0
[ 1001.597756][T13331]        blkdev_ioctl+0x40c/0x6a0
[ 1001.602815][T13331]        __se_sys_ioctl+0xf5/0x170
[ 1001.607950][T13331]        do_syscall_64+0xf3/0x230
[ 1001.612993][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.619476][T13331] 
[ 1001.619476][T13331] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}:
[ 1001.627318][T13331]        lock_acquire+0x1ed/0x550
[ 1001.632366][T13331]        __mutex_lock+0x1ac/0xee0
[ 1001.637406][T13331]        blk_mq_exit_sched+0x106/0x4a0
[ 1001.642871][T13331]        elevator_disable+0xde/0x3f0
[ 1001.648198][T13331]        blk_mq_update_nr_hw_queues+0x646/0x1ae0
[ 1001.654552][T13331]        nbd_start_device+0x16c/0xaa0
[ 1001.660116][T13331]        nbd_ioctl+0x5dc/0xf40
[ 1001.664899][T13331]        blkdev_ioctl+0x57d/0x6a0
[ 1001.669942][T13331]        __se_sys_ioctl+0xf5/0x170
[ 1001.675067][T13331]        do_syscall_64+0xf3/0x230
[ 1001.680107][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.686541][T13331] 
[ 1001.686541][T13331] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}:
[ 1001.694208][T13331]        validate_chain+0x18ef/0x5920
[ 1001.699683][T13331]        __lock_acquire+0x1397/0x2100
[ 1001.705068][T13331]        lock_acquire+0x1ed/0x550
[ 1001.710114][T13331]        __mutex_lock+0x1ac/0xee0
[ 1001.715155][T13331]        elevator_disable+0xd3/0x3f0
[ 1001.720453][T13331]        blk_mq_update_nr_hw_queues+0x646/0x1ae0
[ 1001.726793][T13331]        nbd_start_device+0x16c/0xaa0
[ 1001.732183][T13331]        nbd_ioctl+0x5dc/0xf40
[ 1001.736962][T13331]        blkdev_ioctl+0x57d/0x6a0
[ 1001.741993][T13331]        __se_sys_ioctl+0xf5/0x170
[ 1001.747117][T13331]        do_syscall_64+0xf3/0x230
[ 1001.752156][T13331]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.758594][T13331] 
[ 1001.758594][T13331] other info that might help us debug this:
[ 1001.758594][T13331] 
[ 1001.768838][T13331] Chain exists of:
[ 1001.768838][T13331]   &eq->sysfs_lock --> &q->q_usage_counter(io)#51 --> &q->sysfs_lock
[ 1001.768838][T13331] 
[ 1001.782782][T13331]  Possible unsafe locking scenario:
[ 1001.782782][T13331] 
[ 1001.790241][T13331]        CPU0                    CPU1
[ 1001.795611][T13331]        ----                    ----
[ 1001.801141][T13331]   lock(&q->sysfs_lock);
[ 1001.805483][T13331]                                lock(&q->q_usage_counter(io)#51);
[ 1001.813579][T13331]                                lock(&q->sysfs_lock);
[ 1001.820445][T13331]   lock(&eq->sysfs_lock);
[ 1001.825049][T13331] 
[ 1001.825049][T13331]  *** DEADLOCK ***
[ 1001.825049][T13331] 
[ 1001.833194][T13331] 5 locks held by syz.9.1650/13331:
[ 1001.838402][T13331]  #0: ffff888025a84198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40
[ 1001.847776][T13331]  #1: ffff888025a840d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0
[ 1001.858782][T13331]  #2: ffff88802547f608 (&q->q_usage_counter(io)#58){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[ 1001.869619][T13331]  #3: ffff88802547f640 (&q->q_usage_counter(queue)#42){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0
[ 1001.880642][T13331]  #4: ffff88802547fb38 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0
[ 1001.891331][T13331] 
[ 1001.891331][T13331] stack backtrace:
[ 1001.897442][T13331] CPU: 1 UID: 0 PID: 13331 Comm: syz.9.1650 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0
[ 1001.908227][T13331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[ 1001.918562][T13331] Call Trace:
[ 1001.921852][T13331]  <TASK>
[ 1001.924879][T13331]  dump_stack_lvl+0x241/0x360
[ 1001.929576][T13331]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1001.934791][T13331]  ? __pfx__printk+0x10/0x10
[ 1001.939403][T13331]  print_circular_bug+0x13a/0x1b0
[ 1001.944468][T13331]  check_noncircular+0x36a/0x4a0
[ 1001.949440][T13331]  ? __pfx_validate_chain+0x10/0x10
[ 1001.954670][T13331]  ? __pfx_check_noncircular+0x10/0x10
[ 1001.960243][T13331]  ? lockdep_lock+0x123/0x2b0
[ 1001.965126][T13331]  validate_chain+0x18ef/0x5920
[ 1001.970006][T13331]  ? __pfx_validate_chain+0x10/0x10
[ 1001.975227][T13331]  ? __pfx_lock_acquire+0x10/0x10
[ 1001.980262][T13331]  ? bad_range+0x5f/0x270
[ 1001.984612][T13331]  ? __pfx_lock_release+0x10/0x10
[ 1001.989823][T13331]  ? mark_lock+0x9a/0x360
[ 1001.994163][T13331]  ? look_up_lock_class+0x77/0x170
[ 1001.999292][T13331]  ? register_lock_class+0x102/0x980
[ 1002.004595][T13331]  ? __lock_acquire+0x1397/0x2100
[ 1002.009731][T13331]  ? __pfx_register_lock_class+0x10/0x10
[ 1002.015385][T13331]  ? mark_lock+0x9a/0x360
[ 1002.019734][T13331]  __lock_acquire+0x1397/0x2100
[ 1002.024606][T13331]  lock_acquire+0x1ed/0x550
[ 1002.029132][T13331]  ? elevator_disable+0xd3/0x3f0
[ 1002.034096][T13331]  ? __pfx_lock_acquire+0x10/0x10
[ 1002.039143][T13331]  ? __pfx___might_resched+0x10/0x10
[ 1002.044450][T13331]  ? xa_find_after+0x1b1/0x700
[ 1002.049226][T13331]  ? xa_find_after+0x689/0x700
[ 1002.053998][T13331]  __mutex_lock+0x1ac/0xee0
[ 1002.058517][T13331]  ? elevator_disable+0xd3/0x3f0
[ 1002.063496][T13331]  ? __pfx_xa_find_after+0x10/0x10
[ 1002.068643][T13331]  ? elevator_disable+0xd3/0x3f0
[ 1002.073634][T13331]  ? __pfx___mutex_lock+0x10/0x10
[ 1002.078721][T13331]  ? blk_mq_sched_free_rqs+0x21b/0x290
[ 1002.084214][T13331]  ? __pfx_blk_mq_sched_free_rqs+0x10/0x10
[ 1002.090125][T13331]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1002.095574][T13331]  ? lockdep_hardirqs_on+0x99/0x150
[ 1002.100965][T13331]  elevator_disable+0xd3/0x3f0
[ 1002.105761][T13331]  blk_mq_update_nr_hw_queues+0x646/0x1ae0
[ 1002.111594][T13331]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1002.117518][T13331]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 1002.123779][T13331]  ? rcu_is_watching+0x15/0xb0
[ 1002.128644][T13331]  ? __mutex_lock+0xaf9/0xee0
[ 1002.133344][T13331]  ? __mutex_lock+0x5ef/0xee0
[ 1002.138045][T13331]  ? nbd_ioctl+0x13c/0xf40
[ 1002.142625][T13331]  ? __pfx___mutex_lock+0x10/0x10
[ 1002.147666][T13331]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1002.153658][T13331]  nbd_start_device+0x16c/0xaa0
[ 1002.158529][T13331]  nbd_ioctl+0x5dc/0xf40
[ 1002.162885][T13331]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1002.167673][T13331]  ? __asan_memset+0x23/0x50
[ 1002.172328][T13331]  ? smack_file_ioctl+0x29e/0x3a0
[ 1002.177550][T13331]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1002.182946][T13331]  ? file_to_blk_mode+0xcc/0x140
[ 1002.187896][T13331]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1002.192673][T13331]  blkdev_ioctl+0x57d/0x6a0
[ 1002.197187][T13331]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1002.202594][T13331]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1002.207648][T13331]  __se_sys_ioctl+0xf5/0x170
[ 1002.212263][T13331]  do_syscall_64+0xf3/0x230
[ 1002.216811][T13331]  ? clear_bhb_loop+0x35/0x90
[ 1002.221608][T13331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1002.227528][T13331] RIP: 0033:0x7f15a5f85d19
[ 1002.231976][T13331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1002.251636][T13331] RSP: 002b:00007f15a6d72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1002.260155][T13331] RAX: ffffffffffffffda RBX: 00007f15a6176080 RCX: 00007f15a5f85d19
[ 1002.268311][T13331] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007
[ 1002.276321][T13331] RBP: 00007f15a6001a20 R08: 0000000000000000 R09: 0000000000000000
[ 1002.284302][T13331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1002.292298][T13331] R13: 0000000000000000 R14: 00007f15a6176080 R15: 00007ffe3b505808
[ 1002.300287][T13331]  </TASK>
[ 1002.566193][T13192] hsr_slave_0: entered promiscuous mode
[ 1002.572698][T13192] hsr_slave_1: entered promiscuous mode
[ 1002.579536][T13192] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1002.587239][T13192] Cannot create hsr debugfs directory
[ 1003.009220][T13192] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1003.039773][T13192] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1003.050595][T13192] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1003.060604][T13192] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1003.135636][T13192] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1003.158352][T13192] 8021q: adding VLAN 0 to HW filter on device team0
[ 1003.174563][  T955] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1003.181755][  T955] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1003.205276][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1003.212658][ T5941] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1003.397593][T13192] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1003.446651][T13192] veth0_vlan: entered promiscuous mode
[ 1003.464030][T13192] veth1_vlan: entered promiscuous mode
[ 1003.503765][T13192] veth0_macvtap: entered promiscuous mode
[ 1003.517436][T13192] veth1_macvtap: entered promiscuous mode
[ 1003.536704][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.555633][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.566536][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.583076][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.596733][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.616941][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.627134][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.637792][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.647823][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.658360][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.668715][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.679351][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.704817][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1003.718424][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.733159][T13192] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1003.748218][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.766060][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.777219][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.791063][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.801651][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.819163][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.829615][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.844130][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.856137][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.870063][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.884503][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.900004][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.912308][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1003.928180][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1003.940515][T13192] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1003.959384][T13192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.971063][T13192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.980019][T13192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.988997][T13192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1004.036424][T13192] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[ 1004.070485][  T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.080967][T13192] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht'
[ 1004.085283][  T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1004.118547][ T8853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1004.127644][ T8853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50