last executing test programs:

1m1.984722804s ago: executing program 1 (id=72):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000140)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000340)=""/81, 0x51}], 0x2}, 0x40000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xb971, 0x10100, 0x3, 0x370, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000)
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)
io_setup(0x8, &(0x7f0000000680)=<r8=>0x0)
r9 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
r10 = syz_io_uring_setup(0x4001e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x61}, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0xba01}, 0x810)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0)
io_pgetevents(r8, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000700)={0x0, 0x989680}, 0x0)

58.65946632s ago: executing program 1 (id=78):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket(0x2c, 0x4, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x141)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000003c0)=""/4096, 0x1000)
vmsplice(r2, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c930", 0x2a}], 0x1, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT=r4])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00')
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10)

57.174179988s ago: executing program 1 (id=81):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)

54.756294807s ago: executing program 1 (id=86):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

51.718447471s ago: executing program 2 (id=89):
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

49.546030509s ago: executing program 2 (id=92):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)

47.101243606s ago: executing program 1 (id=97):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

45.298020756s ago: executing program 1 (id=100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x0, 0x0, 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20)

44.376426499s ago: executing program 2 (id=103):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

36.722978721s ago: executing program 2 (id=110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x3c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>r7})
r9 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

35.003671911s ago: executing program 2 (id=113):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

32.407462502s ago: executing program 5 (id=117):
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
fchown(r3, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbe01)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

32.384804977s ago: executing program 2 (id=118):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

31.236797525s ago: executing program 5 (id=119):
r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(r1, &(0x7f00000001c0)={0x27}, 0x6)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r3, 0xffffffffffffffff, 0x0)

31.17628299s ago: executing program 3 (id=120):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xa7!'}, {}]}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0)
close(r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]})
fspick(r0, 0x0, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

30.13762521s ago: executing program 32 (id=100):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x0, 0x0, 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20)

29.733875248s ago: executing program 5 (id=124):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

26.920654215s ago: executing program 3 (id=126):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

26.695901185s ago: executing program 5 (id=128):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

25.545865885s ago: executing program 5 (id=130):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

24.960083772s ago: executing program 3 (id=132):
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
fchown(r3, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbe01)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

22.407249719s ago: executing program 5 (id=134):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

22.13706444s ago: executing program 3 (id=135):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

16.933738802s ago: executing program 33 (id=118):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x18, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_ADT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100))
bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

14.609414306s ago: executing program 3 (id=145):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2b, 0x1, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180))

13.02711779s ago: executing program 3 (id=148):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
getdents64(r1, 0x0, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r7, 0x0, &(0x7f0000000b40)=""/31}, 0x20)

11.099387938s ago: executing program 0 (id=150):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

8.713172739s ago: executing program 0 (id=152):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x7fff, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r7=>0x0)
io_submit(r7, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r8 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)

7.519446768s ago: executing program 4 (id=153):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xfd\xff\xaa.\xf6\x9a\xbdO\xf7\b\x8dn>\x1cKU\x85\r\x93lM\x01&\xd6\x03\xf6\xfb\xddWY\x96N\t\xd6\x8e+\x1aa\a\xda\xa9*\xaf3\x02&\x8c\xe0%\xe9\x90\xb8k\xdb\xd6:\x02v\x8f\x9f\xaa\xf9\xa6&\xfc\xc4v\xc3\xc7x;\x88\xf4)L+\b\x0ff\xff\xff\xff\xff\xff\xff\xff\x7fT\x83\xf6(\xa4\x93\xachj\xc8*\xc2\x00\x1d\xc6\xd8\xd0\x89\x9bF&\xd2.\xaa\xfd\x16_\xe2\x1f\a\x18\xae\t\x8eDhh\xdfi\xfc\x16\x83\xe3\xbb=\xbf\xa3\xcb\x87\x16\x8a\xbf\x1f\xea\x9c\xb0\x1ad\xb5\x85\x85}\x0f_\xba-n\x87\x7f\xff\xab6\xc6\xac\xeeD\x14%x\xa34\x1dTU\xa9\xfb\xd0T\xb0\xc6\xebm\xbe!>I\x1f9\x9eX%U{!\xbc\xf6\xb6\x9a\x10\xfdXho\x87h\x18\xea\x8bQ\xc1WY(\xf3~\x0e5\x93h\x1a:^n\xe5\xe4\xa9\xc9\x91a\t\x80\xae\xa1\xea_7\xa1\x00gY\xd7GP\xe8\xed\x8f\xb7\xcbSA\x8aO \xaf{\xe4|\"\x8c\x9c\xa0\x92\xf0]+\x1b\xfd\xe2\xdb\x18\xd07bz\f\xf2-\xbc\xd4\x04\xf7\xe4\x1a\xbb\x10hq\xcf*\xb3e\xa076\n\xcd\x10\xd3\xc4\xd9k\xa2\xda\x8bT\x1d\xf5w\x03\x99\xc4N\xb8\xd3\x11\xeb\'3\xe4\xe0\x95%\xf3\xa1H\x8c\xd0\x198\xdfb\riy\x95vZ\xa1\xe5\x89\xb6&\x1e\xf9\x06\x1a=\x81\xc3\"\xf2\xf7.\xc0\xdbH\x02\xe6\xf9\xc6~\xc0\xbb\xe9H\xf8!\x83J\xa0\xe5\xe7\xc3|R\xd1.\x18\x9f\xeb\xb3\xf3\xfbU~\x9d\xc9\xf3\x15)\xd0Te\x0fc\v/A\x05-\x0f\xd6tO\xba\xe3\xf7\xf6j!\xa24\nm\x8as\xba\xf8\xde \xb5\xa7\x95\xa1\x1f\xd7\x7f\x8f\xd8#\n\xa9\xc6c\xe4\xd7%\xfb\xb6\xd7\xc1\xdc\xf9]\xa4\xa9@\'\x9cJ\xa2\xcf\xbfj\xee\xe3aY!\xc22\x17\xbc\xee\x9f\"(\xf0\x01\x98\x11\x05^h\xefv\xd2\xc0DW\xf1()\xff'}, {0x20, '\xa7!'}, {}]}, 0x1ea)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0)
close(r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]})
fspick(r0, 0x0, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

6.512203986s ago: executing program 34 (id=134):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)

6.457108652s ago: executing program 0 (id=155):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000140)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000340)=""/81, 0x51}], 0x2}, 0x40000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xb971, 0x10100, 0x3, 0x370, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000)
ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205)
io_setup(0x8, &(0x7f0000000680)=<r8=>0x0)
r9 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c)
r10 = syz_io_uring_setup(0x4001e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x61}, 0x0, &(0x7f0000000000)=<r11=>0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810)
syz_io_uring_submit(0x0, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0)
io_pgetevents(r8, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000700)={0x0, 0x989680}, 0x0)

6.27742708s ago: executing program 4 (id=156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0xf, 0x5d, &(0x7f00000001c0)="77897d825f6dcd76474f871c97baa5a025ae308d3e092006d66759e8111516c72d925f7afb93579d0b2a7c400c40a42624f451120f3e37c1e5220275bf64610eb7d2ee9ceb4a289cc674cd926fdca4c47d74658b94e9fa9d268c233464", 0x1, 0x7f, 0x100, 0x30, 0x4, 0x3, 0x400, 'syz0\x00'})
r1 = syz_open_procfs(0x0, 0x0)
getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c)
syz_open_procfs$userns(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='sessionid\x00')
r6 = fanotify_init(0x10, 0x181000)
fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0)
preadv(r5, &(0x7f0000001600), 0x0, 0x7, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000a40), &(0x7f00000008c0), 0x1003, r7}, 0x38)

4.572660179s ago: executing program 4 (id=157):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000b40)={'#! ', '', [{0x20, '\xa7!'}, {}]}, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x70}}, 0x0)
close(r2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]})
fspick(r0, 0x0, 0x1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@getchain={0x2c, 0x66, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe8}, {0xa, 0x7}, {0x7}}, [{0x8, 0xb, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000044}, 0x40)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

4.397561264s ago: executing program 0 (id=158):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
capset(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x1000}, 0xc)
getsockopt$netlink(r5, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)

3.115129024s ago: executing program 4 (id=159):
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
fchown(r3, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbe01)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)

2.768292838s ago: executing program 0 (id=160):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x54}}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={<r8=>r7})
r9 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0)
bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

1.627441039s ago: executing program 4 (id=161):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

849.907718ms ago: executing program 0 (id=162):
r0 = socket$kcm(0x29, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @rc={0x1f, @any, 0xf5}, @in={0x2, 0x4e23, @private=0xa010100}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3ff, 0x4b, 0x81})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pipe(0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001b000)={0x2020}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f00000007c0)=ANY=[], 0x1e0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, 0x0, 0x0)
sendmsg$rds(r5, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
io_setup(0x8, &(0x7f0000000000)=<r6=>0x0)
io_submit(r6, 0x0, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000000000080000000000000000000000000333bd609000000b0d3b2a65a90d1733b96797598c9dbdc910077ac64068d2725baad239d1df571b4694d04ea61eae72aa81eea0041c1dcb847c34f804aa6fa131ec54d8188af0460b6dda1fefa9d1cb92a34eeb354d51fdf5e60eaf25be46d4a13b337168d3bb69891c68ef1c9ab80998da03933557e4f11d26dfb7ab4beff"])
r7 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r7, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x402)

0s ago: executing program 4 (id=163):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000002640), 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts.
[  100.286397][ T5828] cgroup: Unknown subsys name 'net'
[  100.440643][ T5828] cgroup: Unknown subsys name 'cpuset'
[  100.450598][ T5828] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  101.577770][   T10] cfg80211: failed to load regulatory.db
[  102.144800][ T5828] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  105.366488][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.389076][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  105.397819][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.406182][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.413536][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  105.423976][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  105.426827][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.431995][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.438362][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  105.446474][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  105.460588][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.468440][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  105.471588][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  105.477496][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  105.483115][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.491862][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  105.499702][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  105.504929][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  105.511950][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  105.520394][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  105.527518][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  105.541261][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.549017][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  105.556700][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  105.566438][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  105.589260][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  105.591054][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.605196][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.606833][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  105.620373][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  106.497457][ T5857] chnl_net:caif_netlink_parms(): no params data found
[  106.734457][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  106.773496][ T5843] chnl_net:caif_netlink_parms(): no params data found
[  106.837027][ T5847] chnl_net:caif_netlink_parms(): no params data found
[  106.953201][ T5842] chnl_net:caif_netlink_parms(): no params data found
[  106.983624][ T5855] chnl_net:caif_netlink_parms(): no params data found
[  107.034911][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.042348][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.050131][ T5857] bridge_slave_0: entered allmulticast mode
[  107.058481][ T5857] bridge_slave_0: entered promiscuous mode
[  107.068660][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.075934][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.083334][ T5857] bridge_slave_1: entered allmulticast mode
[  107.091057][ T5857] bridge_slave_1: entered promiscuous mode
[  107.227937][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.235295][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.243252][ T5843] bridge_slave_0: entered allmulticast mode
[  107.251821][ T5843] bridge_slave_0: entered promiscuous mode
[  107.342114][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.349528][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.357265][ T5843] bridge_slave_1: entered allmulticast mode
[  107.364845][ T5843] bridge_slave_1: entered promiscuous mode
[  107.383100][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.430522][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.442082][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.449383][ T5844] bridge_slave_0: entered allmulticast mode
[  107.457107][ T5844] bridge_slave_0: entered promiscuous mode
[  107.484298][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.534723][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.545639][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.552818][ T5844] bridge_slave_1: entered allmulticast mode
[  107.561108][ T5844] bridge_slave_1: entered promiscuous mode
[  107.647892][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.655078][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.663603][ T5865] Bluetooth: hci1: command tx timeout
[  107.663609][ T5849] Bluetooth: hci0: command tx timeout
[  107.669237][ T5849] Bluetooth: hci2: command tx timeout
[  107.669447][ T5849] Bluetooth: hci3: command tx timeout
[  107.669880][ T5847] bridge_slave_0: entered allmulticast mode
[  107.693733][ T5847] bridge_slave_0: entered promiscuous mode
[  107.719143][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.732320][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.741483][ T5865] Bluetooth: hci5: command tx timeout
[  107.747065][ T5850] Bluetooth: hci4: command tx timeout
[  107.777657][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.785949][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.793394][ T5855] bridge_slave_0: entered allmulticast mode
[  107.802139][ T5855] bridge_slave_0: entered promiscuous mode
[  107.809806][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.822570][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.829858][ T5847] bridge_slave_1: entered allmulticast mode
[  107.839383][ T5847] bridge_slave_1: entered promiscuous mode
[  107.849305][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.862481][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.907497][ T5857] team0: Port device team_slave_0 added
[  107.918862][ T5843] team0: Port device team_slave_0 added
[  107.925315][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.932884][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.940563][ T5842] bridge_slave_0: entered allmulticast mode
[  107.948282][ T5842] bridge_slave_0: entered promiscuous mode
[  107.957391][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.964522][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.971906][ T5842] bridge_slave_1: entered allmulticast mode
[  107.979698][ T5842] bridge_slave_1: entered promiscuous mode
[  107.986957][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.994071][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.001350][ T5855] bridge_slave_1: entered allmulticast mode
[  108.009510][ T5855] bridge_slave_1: entered promiscuous mode
[  108.090095][ T5857] team0: Port device team_slave_1 added
[  108.099207][ T5843] team0: Port device team_slave_1 added
[  108.160767][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.239566][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.257274][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.271263][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.283279][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.311451][ T5844] team0: Port device team_slave_0 added
[  108.321066][ T5844] team0: Port device team_slave_1 added
[  108.343624][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.351181][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.377625][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.394888][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.472621][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.479685][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.506445][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.532125][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.539236][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.566065][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.610890][ T5855] team0: Port device team_slave_0 added
[  108.619818][ T5847] team0: Port device team_slave_0 added
[  108.627102][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.634064][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.661495][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.673541][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.680801][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.707742][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.755233][ T5855] team0: Port device team_slave_1 added
[  108.779675][ T5847] team0: Port device team_slave_1 added
[  108.803112][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.810590][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.837372][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.897254][ T5842] team0: Port device team_slave_0 added
[  108.936929][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.943916][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.970067][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.006312][ T5843] hsr_slave_0: entered promiscuous mode
[  109.012867][ T5843] hsr_slave_1: entered promiscuous mode
[  109.038634][ T5842] team0: Port device team_slave_1 added
[  109.052004][ T5857] hsr_slave_0: entered promiscuous mode
[  109.059119][ T5857] hsr_slave_1: entered promiscuous mode
[  109.065741][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.073550][ T5857] Cannot create hsr debugfs directory
[  109.081742][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.088752][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.115716][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.129682][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.137712][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.164508][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.178093][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.185138][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.211910][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.315007][ T5844] hsr_slave_0: entered promiscuous mode
[  109.321973][ T5844] hsr_slave_1: entered promiscuous mode
[  109.330909][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.339382][ T5844] Cannot create hsr debugfs directory
[  109.363653][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.371142][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.397217][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.410377][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.418703][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.444973][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.639794][ T5847] hsr_slave_0: entered promiscuous mode
[  109.648683][ T5847] hsr_slave_1: entered promiscuous mode
[  109.654935][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.663816][ T5847] Cannot create hsr debugfs directory
[  109.710246][ T5855] hsr_slave_0: entered promiscuous mode
[  109.716842][ T5855] hsr_slave_1: entered promiscuous mode
[  109.723096][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.730988][ T5855] Cannot create hsr debugfs directory
[  109.736754][ T5865] Bluetooth: hci3: command tx timeout
[  109.742256][ T5865] Bluetooth: hci2: command tx timeout
[  109.749096][ T5850] Bluetooth: hci0: command tx timeout
[  109.749123][ T5849] Bluetooth: hci1: command tx timeout
[  109.815524][ T5866] Bluetooth: hci4: command tx timeout
[  109.821064][ T5849] Bluetooth: hci5: command tx timeout
[  109.884728][ T5842] hsr_slave_0: entered promiscuous mode
[  109.891891][ T5842] hsr_slave_1: entered promiscuous mode
[  109.898341][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  109.906560][ T5842] Cannot create hsr debugfs directory
[  110.481433][ T5857] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  110.503744][ T5857] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  110.517996][ T5857] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  110.563305][ T5857] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  110.655130][ T5847] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.666322][ T5847] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  110.683078][ T5847] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  110.695092][ T5847] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.814069][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  110.829179][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  110.842797][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  110.870730][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  110.983891][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  111.005298][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  111.047286][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  111.063052][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  111.197153][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.231632][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  111.243669][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  111.260498][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  111.296745][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  111.425045][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.439548][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[  111.479208][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.493490][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  111.508887][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  111.522143][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  111.548122][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  111.572452][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.579929][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.620670][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.628432][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.641701][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[  111.657863][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[  111.704710][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.711916][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.762169][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.769354][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.782450][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.789673][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.800665][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.807867][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.815872][ T5849] Bluetooth: hci1: command tx timeout
[  111.826455][ T5849] Bluetooth: hci2: command tx timeout
[  111.826549][ T5866] Bluetooth: hci0: command tx timeout
[  111.831857][ T5849] Bluetooth: hci3: command tx timeout
[  111.896176][ T5849] Bluetooth: hci5: command tx timeout
[  111.896441][ T5866] Bluetooth: hci4: command tx timeout
[  111.923005][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.093377][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.156551][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[  112.227710][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.234879][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.260928][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.268134][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.314053][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  112.398458][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.405711][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.470975][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.478207][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.621293][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.643204][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.764851][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[  112.870048][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.877343][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.891642][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.898869][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.917409][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.945891][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.012641][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.302278][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  113.333248][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.431052][ T5843] veth0_vlan: entered promiscuous mode
[  113.477336][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.593634][ T5843] veth1_vlan: entered promiscuous mode
[  113.763231][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.772466][ T5855] veth0_vlan: entered promiscuous mode
[  113.797320][ T5843] veth0_macvtap: entered promiscuous mode
[  113.849570][ T5843] veth1_macvtap: entered promiscuous mode
[  113.870797][ T5855] veth1_vlan: entered promiscuous mode
[  113.897201][ T5866] Bluetooth: hci3: command tx timeout
[  113.900041][ T5849] Bluetooth: hci0: command tx timeout
[  113.902657][ T5865] Bluetooth: hci2: command tx timeout
[  113.909653][ T5849] Bluetooth: hci1: command tx timeout
[  113.975887][ T5849] Bluetooth: hci5: command tx timeout
[  113.981912][ T5849] Bluetooth: hci4: command tx timeout
[  114.001328][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.032927][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.045037][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.055707][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.064455][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.081327][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.213056][ T5847] veth0_vlan: entered promiscuous mode
[  114.236875][ T5855] veth0_macvtap: entered promiscuous mode
[  114.253014][ T5847] veth1_vlan: entered promiscuous mode
[  114.309330][ T5855] veth1_macvtap: entered promiscuous mode
[  114.321043][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.367579][ T5857] veth0_vlan: entered promiscuous mode
[  114.408632][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.431856][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.492198][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.501857][ T5857] veth1_vlan: entered promiscuous mode
[  114.521291][ T5844] veth0_vlan: entered promiscuous mode
[  114.557003][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.571548][ T5847] veth0_macvtap: entered promiscuous mode
[  114.576918][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.587226][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.610518][ T5844] veth1_vlan: entered promiscuous mode
[  114.637610][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.647234][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.656913][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.669050][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.703497][ T5847] veth1_macvtap: entered promiscuous mode
[  114.748215][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  114.849627][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.888435][ T5842] veth0_vlan: entered promiscuous mode
[  115.002278][ T5990] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.1'.
[  115.029519][ T5990] Zero length message leads to an empty skb
[  115.088889][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.131508][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.198898][ T5844] veth0_macvtap: entered promiscuous mode
[  115.254049][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.525846][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  115.554776][ T5847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.564831][ T5847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.576920][ T5847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.590566][ T5847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.686159][ T5844] veth1_macvtap: entered promiscuous mode
[  115.727344][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.808078][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.911235][ T5842] veth1_vlan: entered promiscuous mode
[  116.024260][ T5857] veth0_macvtap: entered promiscuous mode
[  116.053497][ T5857] veth1_macvtap: entered promiscuous mode
[  116.105298][ T5842] veth0_macvtap: entered promiscuous mode
[  116.192511][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.282961][ T5842] veth1_macvtap: entered promiscuous mode
[  116.332756][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.391095][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.496471][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.505262][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.554622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  116.578446][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.590894][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.661634][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.892296][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.937570][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.946337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.954673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.976695][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.985030][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  116.993853][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.002480][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.011216][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.651527][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.785555][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.813724][ T5857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.825277][ T5857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.857973][ T5857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.867031][ T5857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.090134][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.105087][ T6000] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.7'.
[  118.129229][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.173737][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.203403][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.230370][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.253296][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.340802][ T6011] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.9'.
[  120.391641][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.611501][ T6015] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.10'.
[  121.514515][ T6019] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.6'.
[  122.456049][ T6008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.463919][ T6008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.589059][ T6025] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.11'.
[  123.833237][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.885467][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.950881][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.963769][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.072200][ T6035] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.13'.
[  124.277426][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.987345][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.162909][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.228063][ T6038] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.14'.
[  125.395925][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.434454][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.474717][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.354262][ T6052] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.2'.
[  129.470440][ T6067] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.3'.
[  130.743781][ T6071] can0: slcan on ttyS3.
[  134.376698][ T6071] can0 (unregistered): slcan off ttyS3.
[  134.876403][ T6078] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.19'.
[  135.262994][ T6085] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.20'.
[  137.111122][ T6101] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.21'.
[  137.353042][ T6105] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.25'.
[  139.332766][ T6120] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.27'.
[  141.633676][ T6127] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.29'.
[  141.824898][ T6130] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.31'.
[  142.648793][ T6132] can0: slcan on ttyS3.
[  142.678532][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  142.685115][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  144.558046][ T6132] can0 (unregistered): slcan off ttyS3.
[  147.554254][ T6152] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.34'.
[  147.666374][ T6153] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.35'.
[  148.499309][ T6159] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.692341][ T6164] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.38'.
[  148.702654][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'.
[  149.644578][ T6159] loop0: detected capacity change from 0 to 2048
[  151.647810][ T6184] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.42'.
[  156.501802][ T6203] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.47'.
[  156.740516][ T6206] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.50'.
[  158.446291][ T6216] can0: slcan on ttyS3.
[  160.297316][ T6216] can0 (unregistered): slcan off ttyS3.
[  162.793854][ T6235] can0: slcan on ttyS3.
[  163.865975][ T6235] can0 (unregistered): slcan off ttyS3.
[  164.497156][ T6251] can0: slcan on ttyS3.
[  165.039024][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'.
[  165.136456][ T6251] can0 (unregistered): slcan off ttyS3.
[  166.957154][ T6263] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.60'.
[  168.517096][ T6272] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.62'.
[  169.170396][ T6275] can0: slcan on ttyS3.
[  170.275968][ T6275] can0 (unregistered): slcan off ttyS3.
[  171.734696][ T6284] random: crng reseeded on system resumption
[  173.485545][ T6292] random: crng reseeded on system resumption
[  174.312478][ T6295] random: crng reseeded on system resumption
[  175.893453][ T6306] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.71'.
[  177.056550][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[  177.165910][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  177.339308][   T24] usb 5-1: Using ep0 maxpacket: 32
[  177.853683][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  178.088405][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.114665][   T24] usb 5-1: config 0 descriptor??
[  179.135322][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  179.180492][   T24] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  179.235602][   T24] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  180.648639][ T6337] can0: slcan on ttyS3.
[  181.539973][ T6337] can0 (unregistered): slcan off ttyS3.
[  183.017674][ T5942] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  184.699612][ T6361] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.86'.
[  184.715564][ T5942] usb 1-1: Using ep0 maxpacket: 16
[  184.965614][ T5942] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  185.984695][ T5942] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.994970][ T5942] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.657866][ T5942] usb 1-1: string descriptor 0 read error: -71
[  186.664189][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.857983][ T6373] random: crng reseeded on system resumption
[  187.580543][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.835729][ T5942] usb 1-1: can't set config #1, error -71
[  188.156916][ T5942] usb 1-1: USB disconnect, device number 2
[  189.169608][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[  190.522467][ T6396] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.94'.
[  193.691700][ T5942] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  194.825559][ T6428] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.103'.
[  194.875531][ T5942] usb 6-1: Using ep0 maxpacket: 16
[  194.897610][ T5942] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  194.915658][ T5942] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  194.930340][ T5942] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.945912][ T5942] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  194.955655][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.963844][ T5942] usb 6-1: Product: syz
[  194.968835][ T5942] usb 6-1: Manufacturer: syz
[  194.978365][ T5942] usb 6-1: SerialNumber: syz
[  197.527786][ T5942] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  197.540206][ T5942] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82
[  197.674954][ T5942] usb 6-1: USB disconnect, device number 2
[  199.829960][ T6454] random: crng reseeded on system resumption
[  202.726434][ T6466] random: crng reseeded on system resumption
[  204.010498][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  204.145565][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  207.642541][ T6494] random: crng reseeded on system resumption
[  209.977365][ T6507] can0: slcan on ttyS3.
[  210.076182][ T6507] can0 (unregistered): slcan off ttyS3.
[  210.090100][ T6508] can0: slcan on ttyS3.
[  210.750027][ T6500] can0 (unregistered): slcan off ttyS3.
[  211.812804][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  211.825322][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  211.834395][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  211.856136][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  211.872116][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  212.323440][ T6525] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.129'.
[  213.985684][ T5849] Bluetooth: hci6: command tx timeout
[  215.694933][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.771145][ T6546] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.135'.
[  216.055519][ T5849] Bluetooth: hci6: command tx timeout
[  218.142349][ T5849] Bluetooth: hci6: command tx timeout
[  218.919872][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.208639][ T6558] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.138'.
[  220.215727][ T5849] Bluetooth: hci6: command tx timeout
[  220.508337][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.879487][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.911873][ T6568] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.140'.
[  222.069387][ T6521] chnl_net:caif_netlink_parms(): no params data found
[  222.699369][ T6580] random: crng reseeded on system resumption
[  222.860321][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  222.872265][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  222.880381][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  222.893198][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  222.901472][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.124915][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.142165][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.347384][ T6521] bridge_slave_0: entered allmulticast mode
[  223.358630][ T6521] bridge_slave_0: entered promiscuous mode
[  223.396560][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.403767][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.415978][ T6521] bridge_slave_1: entered allmulticast mode
[  223.453957][ T6521] bridge_slave_1: entered promiscuous mode
[  223.729177][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.750334][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.864820][ T6521] team0: Port device team_slave_0 added
[  223.888195][ T6521] team0: Port device team_slave_1 added
[  225.028573][ T5850] Bluetooth: hci2: command tx timeout
[  226.217745][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.252930][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.288026][ T6601] slcan: can't register candev
[  226.293233][ T6601] Falling back ldisc for ttyS3.
[  226.481522][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.582440][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.602529][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.657226][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.095782][ T5850] Bluetooth: hci2: command tx timeout
[  227.377455][   T12] bridge_slave_1: left allmulticast mode
[  227.383356][   T12] bridge_slave_1: left promiscuous mode
[  227.417089][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.451729][   T12] bridge_slave_0: left allmulticast mode
[  227.459185][   T12] bridge_slave_0: left promiscuous mode
[  227.465310][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.789055][ T6617] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.151'.
[  229.275013][ T5850] Bluetooth: hci2: command tx timeout
[  230.399211][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.454263][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.495026][   T12] bond0 (unregistering): Released all slaves
[  231.347263][ T5867] Bluetooth: hci2: command tx timeout
[  231.655764][ T5867] Bluetooth: hci5: command 0x0406 tx timeout
[  231.657010][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  231.663081][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  231.667909][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  231.697267][ T6521] hsr_slave_0: entered promiscuous mode
[  231.704107][ T6521] hsr_slave_1: entered promiscuous mode
[  231.710574][ T6521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.725725][ T6521] Cannot create hsr debugfs directory
[  233.624155][ T6578] chnl_net:caif_netlink_parms(): no params data found
[  234.438827][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  234.466773][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  234.478684][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  234.498053][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  234.510053][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.737936][ T6653] slcan: can't register candev
[  234.743066][ T6653] Falling back ldisc for ttyS3.
[  236.621746][ T5865] Bluetooth: hci0: command tx timeout
[  236.944877][ T6676] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.161'.
[  238.191348][   T12] hsr_slave_0: left promiscuous mode
[  238.251986][ T6694] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.163'.
[  238.336305][ T6693] page: refcount:2 mapcount:0 mapping:ffff88802439cd78 index:0x2 pfn:0x5628a
[  238.345676][ T6693] memcg:ffff88801caf2700
[  238.350010][ T6693] aops:def_blk_aops ino:fa00000
[  238.354978][ T6693] flags: 0xfff680000000bd(locked|waiters|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff)
[  238.366584][ T6693] raw: 00fff680000000bd ffffea000158a2c8 ffff88801ce82c20 ffff88802439cd78
[  238.375821][ T6693] raw: 0000000000000002 0000000000000000 00000002ffffffff ffff88801caf2700
[  238.384544][ T6693] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index))
[  238.392954][ T6693] page_owner tracks the page as allocated
[  238.398781][ T6693] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6694, tgid 6691 (syz.4.163), ts 238267851929, free_ts 234983116858
[  238.421981][ T6693]  post_alloc_hook+0x1c0/0x230
[  238.426884][ T6693]  get_page_from_freelist+0x1321/0x3890
[  238.432528][ T6693]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  238.438563][ T6693]  alloc_pages_mpol+0x1fb/0x550
[  238.443517][ T6693]  folio_alloc_noprof+0x20/0x2d0
[  238.448618][ T6693]  filemap_alloc_folio_noprof+0x3a1/0x470
[  238.454439][ T6693]  page_cache_ra_order+0x4c0/0xd00
[  238.460030][ T6693]  filemap_fault+0x1465/0x26c0
[  238.464947][ T6693]  __do_fault+0x10d/0x490
[  238.469437][ T6693]  __handle_mm_fault+0x374c/0x5490
[  238.474655][ T6693]  handle_mm_fault+0x589/0xd10
[  238.479533][ T6693]  __get_user_pages+0x589/0x3b80
[  238.484557][ T6693]  faultin_page_range+0x249/0x980
[  238.489715][ T6693]  madvise_do_behavior+0x268/0x3f0
[  238.494920][ T6693]  do_madvise+0x161/0x230
[  238.499366][ T6693]  __x64_sys_madvise+0xa9/0x110
[  238.504330][ T6693] page last free pid 5843 tgid 5843 stack trace:
[  238.510805][ T6693]  __free_frozen_pages+0x7fe/0x1180
[  238.518070][ T6693]  qlist_free_all+0x4d/0x120
[  238.522735][ T6693]  kasan_quarantine_reduce+0x195/0x1e0
[  238.528355][ T6693]  __kasan_slab_alloc+0x69/0x90
[  238.533301][ T6693]  __kmalloc_cache_node_noprof+0x217/0x420
[  238.539832][ T6693]  __get_vm_area_node+0x101/0x330
[  238.544946][ T6693]  __vmalloc_node_range_noprof+0x271/0x14b0
[  238.550971][ T6693]  __vmalloc_node_noprof+0xad/0xf0
[  238.556405][ T6693]  do_ipt_get_ctl+0x6b6/0xaa0
[  238.561168][ T6693]  nf_getsockopt+0x7c/0xe0
[  238.565677][ T6693]  ip_getsockopt+0x18c/0x1e0
[  238.570526][ T6693]  tcp_getsockopt+0xa1/0x100
[  238.575218][ T6693]  do_sock_getsockopt+0x3ff/0x800
[  238.580399][ T6693]  __sys_getsockopt+0x12f/0x260
[  238.585445][ T6693]  __x64_sys_getsockopt+0xbd/0x160
[  238.590673][ T6693]  do_syscall_64+0xcd/0x4c0
[  238.595525][ T6693] ------------[ cut here ]------------
[  238.601041][ T6693] kernel BUG at mm/filemap.c:3442!
[  238.606233][ T6693] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  238.612653][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.4.163 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  238.624550][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  238.634635][ T6693] RIP: 0010:filemap_fault+0x1847/0x26c0
[  238.640230][ T6693] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00
[  238.660027][ T6693] RSP: 0018:ffffc90003f7f5b8 EFLAGS: 00010246
[  238.666101][ T6693] RAX: 0000000000080000 RBX: ffffea000158a280 RCX: ffffc9000cb2b000
[  238.674071][ T6693] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff888022765e44
[  238.682050][ T6693] RBP: ffffc90003f7f7e8 R08: 0000000000000001 R09: 0000000000000000
[  238.690029][ T6693] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802439cd78
[  238.698009][ T6693] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  238.705989][ T6693] FS:  00007fdbc8e666c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000
[  238.714922][ T6693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  238.721517][ T6693] CR2: 0000200000001893 CR3: 0000000069242000 CR4: 0000000000350ef0
[  238.729503][ T6693] Call Trace:
[  238.732788][ T6693]  <TASK>
[  238.736281][ T6693]  ? __pfx_filemap_fault+0x10/0x10
[  238.741446][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.747129][ T6693]  __do_fault+0x10d/0x490
[  238.751496][ T6693]  __handle_mm_fault+0x3c2a/0x5490
[  238.756620][ T6693]  ? __pfx___handle_mm_fault+0x10/0x10
[  238.762110][ T6693]  ? __pfx_mt_find+0x10/0x10
[  238.766715][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.772356][ T6693]  ? find_vma+0xbf/0x140
[  238.776650][ T6693]  ? __pfx_find_vma+0x10/0x10
[  238.781360][ T6693]  handle_mm_fault+0x589/0xd10
[  238.786156][ T6693]  ? __pkru_allows_pkey+0x51/0xb0
[  238.791239][ T6693]  do_user_addr_fault+0x7a6/0x1370
[  238.796385][ T6693]  ? __lock_acquire+0xb8a/0x1c90
[  238.801360][ T6693]  ? rcu_is_watching+0x12/0xc0
[  238.806145][ T6693]  exc_page_fault+0x5c/0xb0
[  238.810758][ T6693]  asm_exc_page_fault+0x26/0x30
[  238.815617][ T6693] RIP: 0010:_copy_from_user+0x93/0xd0
[  238.821010][ T6693] Code: 02 e2 fc 89 ee 4c 89 ef 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c3 48 0f 47 d8 e8 79 ee 47 fd 0f 01 cb 4c 89 ef 48 89 de 48 89 e9 <f3> a4 0f 1f 00 49 89 cc 48 89 cb 0f 01 ca 31 ff 48 89 ce e8 95 fd
[  238.840669][ T6693] RSP: 0018:ffffc90003f7fa80 EFLAGS: 00050246
[  238.846753][ T6693] RAX: 0000000000000001 RBX: 0000200000001893 RCX: 0000000000000001
[  238.854733][ T6693] RDX: ffffed100dd0e4bb RSI: 0000200000001893 RDI: ffff88806e8725d3
[  238.862711][ T6693] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed100dd0e4ba
[  238.870686][ T6693] R10: ffff88806e8725d3 R11: 0000000000000001 R12: 0000000000000000
[  238.878656][ T6693] R13: ffff88806e8725d3 R14: dffffc0000000000 R15: 0000200000001893
[  238.886644][ T6693]  snd_rawmidi_kernel_write1+0x50a/0x8a0
[  238.892310][ T6693]  snd_rawmidi_write+0x26e/0xc10
[  238.897657][ T6693]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  238.903148][ T6693]  ? __pfx_default_wake_function+0x10/0x10
[  238.908979][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.914634][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.920309][ T6693]  ? security_file_permission+0x71/0x210
[  238.926070][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.931736][ T6693]  ? rw_verify_area+0xcf/0x680
[  238.936615][ T6693]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  238.942196][ T6693]  vfs_writev+0x5df/0xde0
[  238.946544][ T6693]  ? __pfx_vfs_writev+0x10/0x10
[  238.951407][ T6693]  ? kmem_cache_free+0x2d1/0x4d0
[  238.956356][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.962424][ T6693]  ? __fget_files+0x20e/0x3c0
[  238.967272][ T6693]  ? do_writev+0x28c/0x340
[  238.971703][ T6693]  do_writev+0x28c/0x340
[  238.975974][ T6693]  ? __pfx_do_writev+0x10/0x10
[  238.980769][ T6693]  ? srso_alias_return_thunk+0x5/0xfbef5
[  238.986434][ T6693]  do_syscall_64+0xcd/0x4c0
[  238.990993][ T6693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.996927][ T6693] RIP: 0033:0x7fdbc7f8e929
[  239.001438][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  239.021078][ T6693] RSP: 002b:00007fdbc8e66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  239.029509][ T6693] RAX: ffffffffffffffda RBX: 00007fdbc81b5fa0 RCX: 00007fdbc7f8e929
[  239.037491][ T6693] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000005
[  239.045475][ T6693] RBP: 00007fdbc8010b39 R08: 0000000000000000 R09: 0000000000000000
[  239.053450][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.061427][ T6693] R13: 0000000000000000 R14: 00007fdbc81b5fa0 R15: 00007ffc2c0b95d8
[  239.069547][ T6693]  </TASK>
[  239.072597][ T6693] Modules linked in:
[  239.080898][ T6693] ---[ end trace 0000000000000000 ]---
[  239.086449][ T6693] RIP: 0010:filemap_fault+0x1847/0x26c0
[  239.092088][ T6693] Code: 00 e9 d2 ec ff ff 48 8b 7c 24 28 e8 b3 36 2e 00 e9 79 f3 ff ff e8 79 52 c8 ff 48 c7 c6 e0 20 b9 8b 48 89 df e8 3a a0 10 00 90 <0f> 0b e8 62 52 c8 ff 48 c7 c6 e0 16 b9 8b 48 89 df e8 23 a0 10 00
[  239.112096][ T6693] RSP: 0018:ffffc90003f7f5b8 EFLAGS: 00010246
[  239.118245][ T6693] RAX: 0000000000080000 RBX: ffffea000158a280 RCX: ffffc9000cb2b000
[  239.127503][ T6693] RDX: 0000000000080000 RSI: ffffffff81f39f66 RDI: ffff888022765e44
[  239.135560][ T6693] RBP: ffffc90003f7f7e8 R08: 0000000000000001 R09: 0000000000000000
[  239.143587][ T6693] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802439cd78
[  239.151619][ T6693] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
[  239.159663][ T6693] FS:  00007fdbc8e666c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000
[  239.168669][ T6693] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  239.176177][ T6693] CR2: 0000200000001893 CR3: 0000000069242000 CR4: 0000000000350ef0
[  239.184214][ T6693] Kernel panic - not syncing: Fatal exception
[  239.190691][ T6693] Kernel Offset: disabled
[  239.195038][ T6693] Rebooting in 86400 seconds..