last executing test programs:

19m36.212901755s ago: executing program 32 (id=194):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4})
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x34, r9, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}]}]}, 0x34}}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

11m50.239978424s ago: executing program 4 (id=770):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130a0102f7ff000000000000fd36ad2cf2baca88536c20e4d7dd2607af0002091f084d361f0894f4ed38388f73290215b567471e81589d773748977165aeec3d8f6c5aa54c425fb96b77cc4771451c093b18af288e0bcf7341b98612d2244dc13927c62b0321f25ed99810f79d6d45"], 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x40010)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x5, 0x3}, 0x10)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmmsg$inet(r4, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x81)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x42, 0x2007, @fd=r1, 0x1, 0x4, 0xff, 0x7})
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x1, 0x800)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000001c0)={0x1, r8})
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f0000000080)={0x3, r8})
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x68, &(0x7f0000000080)=0x9, 0x4)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(r5, 0x0, 0x0)

11m46.022063492s ago: executing program 4 (id=776):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
open(0x0, 0x0, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r7, &(0x7f00000063c0)=""/1024, 0x400)

11m44.818125573s ago: executing program 4 (id=777):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440), &(0x7f00000000c0)=0x8)
syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4)
shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)

11m40.700386503s ago: executing program 4 (id=784):
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004"], 0xa0}}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="d04cd774e1d51602", &(0x7f0000000000), 0x8a, r9}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20)
mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

11m36.941249098s ago: executing program 4 (id=789):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(0xffffffffffffffff, 0x0, r1, 0x0, 0x46)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x9}, {0xa, 0x4e24, 0x2, @empty, 0x4}, r2, 0xfffffffb}}, 0x48)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000300)={0x80006001})
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x2c2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093'], 0x2a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000001b40)={0x70, 0xb3}, 0x20)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r5, 0x0, 0x0)
keyctl$read(0xb, r5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f0000000080))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r6, 0x8b2a, &(0x7f0000000040))
fsopen(&(0x7f0000000200)='ufs\x00', 0x1)

11m34.770048496s ago: executing program 4 (id=794):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_emit_ethernet(0x52, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44880)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40096101, &(0x7f0000000100)={{}, 0x7})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28)
timer_create(0x3, 0x0, &(0x7f0000044000))

11m23.800350178s ago: executing program 33 (id=786):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_emit_ethernet(0x52, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44880)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000100)={{}, 0x7})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28)
timer_create(0x3, 0x0, &(0x7f0000044000))

11m18.972795972s ago: executing program 34 (id=794):
socket$kcm(0x10, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_emit_ethernet(0x52, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(0x0, 0x2, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44880)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40096101, &(0x7f0000000100)={{}, 0x7})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28)
timer_create(0x3, 0x0, &(0x7f0000044000))

9m22.859869376s ago: executing program 2 (id=941):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="5fdbdf5d953e04bf5ab18e56965c6bd873d583727ca9e5742c7458083e38dc9dc355ab27930fa527d130586b1692c03ad0702b09a5b82a92c695941c415c030b2faf4d97", 0x44, 0x4010000, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
pread64(r1, &(0x7f0000000100)=""/78, 0x4e, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x80)
getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0x0, &(0x7f0000000280))
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)

9m20.674524813s ago: executing program 2 (id=943):
r0 = socket(0x25, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4}], 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0xfffffffffffffd23)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_nanosleep(0x2, 0x225c17d03, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
connect$l2tp6(r0, &(0x7f0000002880)={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x3}, 0x20)
r8 = syz_io_uring_setup(0x10bc3, &(0x7f0000000680)={0x0, 0x105a, 0x40, 0x3, 0x224}, &(0x7f0000000640)=<r9=>0x0, &(0x7f0000000580)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r8, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x538}, 0x0, 0x1000})
io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$nl_route(r6, 0x0, 0x48006)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000440)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

9m19.343986673s ago: executing program 2 (id=945):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, 0x0)
setpgid(0x0, r4)
mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0xa3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x11, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, 0x0, 0x0)
r7 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0)
dup(r7)

9m17.603590147s ago: executing program 2 (id=947):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0xf4, 0x8, 0xa, 0xf0a, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x892f}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "0f892b485d046c9329fc2fab944957b724197f85e0b5a98c9cf97d548e01e48cfd5373352d833ad95107c3136b851d699740f5d95168482198d966c77773427708690b8b0baec3ee2b13f76b69baca5d85f7378db86267a24b3f7ef9"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0x11c}}, 0x8050)

9m15.497827173s ago: executing program 2 (id=951):
socket$inet(0x2, 0x4000000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x0, 0x0, 0x5f, 0xff, 0x0, 0xa6, 0x2, 0x5}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004"], 0xa0}}, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r7 = syz_io_uring_setup(0x9e, 0x0, 0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1})
io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="d04cd774e1d51602", &(0x7f0000000000), 0x8a, r9}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20)
mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0)

9m11.95079962s ago: executing program 2 (id=953):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r4, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x466}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x3, "90f541a5e60000000003f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)

8m56.842311785s ago: executing program 35 (id=953):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r4, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="2b72646d6120accf1dbe7909239f8eb702133329b4239b6c52836d6a0434b2c9d7a6a3d2f93e0e737163ea1b0951b7c06ae8638e16c47f3fa9721aa2e0eeff16a1eb014e4c3cca9c4154fcb56b3b1362c9ff60b349b145c44957f6f75698"], 0x6)
socket$inet6(0xa, 0x800000000000002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_FLAGS={0x8, 0x8, 0x466}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0)
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x3, "90f541a5e60000000003f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)

7m30.899149284s ago: executing program 6 (id=1089):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000180)=0x7)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$inet6(0xa, 0x3, 0x5)
memfd_secret(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setuid(0xee01)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f000001b000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000040), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000200"/16], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2$9p(&(0x7f0000000080), 0x80000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7m27.376939318s ago: executing program 6 (id=1103):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(0x0, 0x6)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x4c}}, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
socket(0x10, 0x80003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r4, &(0x7f0000002400)=[{&(0x7f0000000140)=""/225, 0xe1}], 0x1)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000180)={0x2, 0x4})
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r6, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x4044044)

7m20.140105026s ago: executing program 6 (id=1106):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x1)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000100000000000005ff0700000b0000000000000a04000000000049ebe8cdec2271bf6e6e641952699346fa2b3ab65c86b90f25c6a47e8a453436590a75b34af9e74e594bdf9d2fb370f7b9d124b55e0122a1d6868ef7e98009bdd729e3c12beb175068a83ddb9955483c0576855127612700d72d57cf581cb8930f9882458164340c8f67b2c1b58153567399ae33d460639f2030b4b39ddc210d82391d84b655f59e5248ce55888d2fbb1543cc53896f344b3f89b81bfb2f7745c5b4dfed4bc232ab9bd45433a09b68200ee09e636c537325dcd1eb40b109fab4b0b63980ff9d8905e074fd281e4226032b356633c5abb6348e7365a93eafda34"], 0x0, 0x32, 0x0, 0xa, 0x7ff}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="fcb7", 0x2}, {0x0}], 0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910000000000000c381d150d10563a83d00e4ff500000005d2b61ecdcb38285fe9d426d7fda0e7b7ee3c83effb05f3c727c255c53a88957ad79"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/mnt\x00')
ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x6, 0xd04, 'netbios-ns\x00', {0x5}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00009af000/0x1000)=nil, 0x400000, 0x2, 0x2})

7m18.424520405s ago: executing program 6 (id=1108):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x501, 0x0)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000080601010000000000000000000000010900020073797a32000000000900020073797a"], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x10)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, 0x0, 0x0, 0xb, 0x0, 0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)

7m15.868547831s ago: executing program 6 (id=1114):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, 0x0, &(0x7f00000001c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740))
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000080000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000020400"/28], 0x50)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7)
setpriority(0x0, 0x1, 0xa7a8)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}})
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb85"])
accept4(r0, 0x0, 0x0, 0x0)

7m13.046945087s ago: executing program 6 (id=1116):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x103002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xf800000000000000, 0x10000, 0x1c, 0x3, 0x15})
wait4(0x0, 0x0, 0x1000000, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES64=r1, @ANYRES16=r5, @ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRESDEC=r5], 0x50)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r8, &(0x7f00000002c0)=[{0x0}], 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r9 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

6m57.115625634s ago: executing program 36 (id=1116):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x103002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xf800000000000000, 0x10000, 0x1c, 0x3, 0x15})
wait4(0x0, 0x0, 0x1000000, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES64=r1, @ANYRES32=r1, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRES32=r4, @ANYRES64=r1, @ANYRES16=r5, @ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRESDEC=r5], 0x50)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, &(0x7f0000000440), 0x10)
listen(r7, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r8, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r8, &(0x7f00000002c0)=[{0x0}], 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r9 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884)

6m4.555079634s ago: executing program 7 (id=1213):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

6m4.457639619s ago: executing program 7 (id=1214):
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f00000000c0)})
getpriority(0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="178be143e0028418740c74c4761439d79435bc8286e0e0ef1d1178bc7d5081dbbe8ab40db89c7f791208034f45d5ca5ed9754198a9418c461fefd198ed651697690a1c8fdd94346451dd4d0a9864a366e7948a7153b7dd2e25703551b507573ff9af994b6e65337361569e7d1f14d889d4bc46838d42b08f28948d92d35756c5c91d022b80b251ad", @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES64=r1], 0x20)
r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2)
dup2(r3, r3)
preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000003e000701fefffffffcefffff017c000008004280040008000c0001800621f000800a00000c00028006001780b82f0000c7f7b8d60d19c42e12fac57287783451779d76f990f7081ed0566a75c6706ac0527c651dd594c576ba25ef1055d936aae076cb7f9c48080e79ae6a94fb5e350e95faa2d9f67df8aa0d304fca91fbc209f8562d65837e6b87127f47d3edaa53aef0e3f11d93830a8d5d4433827fbc29b17e1dd699f599b868437f1484fb6dad1077ea4dfcf0369e5c3306c180d213aa60ea9582a94bffca86e5321455d00d5a423a885c12b2643fe3e680a9456e57634c2496d7"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
r6 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000006000)=@req={0x28, &(0x7f0000005fc0)={'ip6gretap0\x00', @ifru_addrs=@nfc={0x27, 0x0, 0x0, 0x7}}})
sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x400c094)
writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1)
sendmsg$inet6(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1)

5m56.731309307s ago: executing program 7 (id=1229):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_dellink={0x20, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x18050}}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x0, &(0x7f0000000180)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x260dec, 0x0, 0x0, 0x10001})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

5m43.314779635s ago: executing program 7 (id=1243):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0', 0x3a, [0x5c]}, 0x7d)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wlan1\x00'})
connect$inet6(0xffffffffffffffff, &(0x7f0000002280)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
pipe2(&(0x7f0000000200)={<r4=>0x0, <r5=>0x0}, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x1, 0x40001043, r4, 0x0)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r5, 0x0, 0x6, 0x0)
write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef)
close_range(r3, 0xffffffffffffffff, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0)
write$FUSE_STATFS(r2, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x0, {{0x5, 0x7cf7, 0x7, 0x6, 0x0, 0x5, 0x8, 0x8}}}, 0x60)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

5m34.590413025s ago: executing program 7 (id=1261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$kcm(0x10, 0x2, 0x0)
mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
lseek(r4, 0x10000000005, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
r6 = timerfd_create(0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}})
ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000000)=0x3)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000d80)={0x4d1, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000021002b000201feffff00000000000000fe880000000000000000000000000001fc010000000000000000000000000000040004"], 0xc0}}, 0x0)

5m31.274355838s ago: executing program 7 (id=1267):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x50, [0x3, 0x1, 0x2, 0x1, 0x7f, 0xbcc, 0x8, 0x80, 0x9, 0x4, 0x3, 0xd9, 0x6, 0x7f, 0x9, 0x7, 0x5, 0x7, 0x7, 0x8, 0xc, 0x98800, 0x8, 0x0, 0x1, 0x8, 0x5, 0x1, 0x1, 0x1, 0x8, 0x2, 0x27ac8c95, 0x5, 0x9, 0x10, 0x4, 0x4, 0xffff045b, 0x7fff, 0x10, 0x1, 0x80000001, 0x8, 0x8, 0x9, 0x4006, 0x4e7c, 0x10000, 0x9, 0x8, 0x9bb, 0x1, 0x7, 0x5, 0xf3, 0x2, 0x773, 0x7, 0x6, 0x8, 0x8, 0x7ff, 0xfb47, 0xbdf0, 0x400, 0x9c, 0x10000, 0x6, 0xf, 0x7, 0x1, 0x84, 0xffffff00, 0x5434, 0x6fb9e432, 0x9, 0x7f, 0x10, 0x1, 0x80000000, 0x2, 0x5, 0x0, 0x8000, 0x6, 0x5, 0x3, 0xfffeffff, 0x50, 0xfffffff3, 0x92, 0x878, 0x297, 0x0, 0xffffcc08, 0x16000000, 0x6, 0x1, 0x80000001, 0x1, 0xca6, 0x2, 0x2, 0x8, 0x4, 0x4, 0x2, 0xffffffff, 0x8, 0x4, 0x4, 0x4, 0x0, 0x1ff, 0x4, 0x79d9b987, 0xc, 0x0, 0x232, 0xff, 0x3, 0xffd, 0x3, 0x0, 0xba81, 0x5, 0x4]}})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r3, &(0x7f0000000480)=[{&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/217, 0xd9}], 0x2)
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x12, r3, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}], 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}], 0x1c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x0, 0x4}})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000007c000000090a010400000000010000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f380011800e000100636f6e6e6c696d69740003002400028008000240000000010800014000000020080001400000000608000140000080010800034000000004"], 0xc4}}, 0x0)

5m15.704101118s ago: executing program 37 (id=1267):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'macvlan0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0x50, [0x3, 0x1, 0x2, 0x1, 0x7f, 0xbcc, 0x8, 0x80, 0x9, 0x4, 0x3, 0xd9, 0x6, 0x7f, 0x9, 0x7, 0x5, 0x7, 0x7, 0x8, 0xc, 0x98800, 0x8, 0x0, 0x1, 0x8, 0x5, 0x1, 0x1, 0x1, 0x8, 0x2, 0x27ac8c95, 0x5, 0x9, 0x10, 0x4, 0x4, 0xffff045b, 0x7fff, 0x10, 0x1, 0x80000001, 0x8, 0x8, 0x9, 0x4006, 0x4e7c, 0x10000, 0x9, 0x8, 0x9bb, 0x1, 0x7, 0x5, 0xf3, 0x2, 0x773, 0x7, 0x6, 0x8, 0x8, 0x7ff, 0xfb47, 0xbdf0, 0x400, 0x9c, 0x10000, 0x6, 0xf, 0x7, 0x1, 0x84, 0xffffff00, 0x5434, 0x6fb9e432, 0x9, 0x7f, 0x10, 0x1, 0x80000000, 0x2, 0x5, 0x0, 0x8000, 0x6, 0x5, 0x3, 0xfffeffff, 0x50, 0xfffffff3, 0x92, 0x878, 0x297, 0x0, 0xffffcc08, 0x16000000, 0x6, 0x1, 0x80000001, 0x1, 0xca6, 0x2, 0x2, 0x8, 0x4, 0x4, 0x2, 0xffffffff, 0x8, 0x4, 0x4, 0x4, 0x0, 0x1ff, 0x4, 0x79d9b987, 0xc, 0x0, 0x232, 0xff, 0x3, 0xffd, 0x3, 0x0, 0xba81, 0x5, 0x4]}})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
readv(r3, &(0x7f0000000480)=[{&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/217, 0xd9}], 0x2)
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x12, r3, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}], 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}], 0x1c)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x0, 0x4}})
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000007c000000090a010400000000010000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001f380011800e000100636f6e6e6c696d69740003002400028008000240000000010800014000000020080001400000000608000140000080010800034000000004"], 0xc4}}, 0x0)

3m25.84439887s ago: executing program 9 (id=1462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
sendmsg$nl_generic(r5, 0x0, 0x4000800)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r6, 0x40000000af01, 0x0)
write(0xffffffffffffffff, &(0x7f0000000140)="480100001a000708ab0925040900070002ab0700a90100001d60369321001d000a800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46", 0xcb)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = dup(r7)
r9 = fcntl$dupfd(r6, 0x0, r7)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000580)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8})
r10 = eventfd2(0x8001, 0x0)
ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f00000000c0)={0x0, r10})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x95}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

3m24.438781324s ago: executing program 9 (id=1464):
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0xcd40, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
shutdown(r2, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000003000000000100"], 0x0, 0x32, 0x0, 0x1}, 0x28)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}})
fallocate(r5, 0x0, 0x0, 0x1000f4)
lseek(r5, 0x2, 0x4)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc})
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
syz_open_dev$vivid(0x0, 0x2, 0x2)
gettid()
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
iopl(0x3)

3m21.981390322s ago: executing program 9 (id=1470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$snapshot(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r1=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={<r2=>0x0}, &(0x7f0000000500)=0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x90, 0x13, 0x7, 0x401, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x5}, [@typed={0x8, 0xfd, 0x0, 0x0, @pid=r1}, @nested={0x8, 0xf9, 0x0, 0x1, [@nested={0x4, 0x3c}, @generic]}, @nested={0x46, 0xc8, 0x0, 0x1, [@generic="790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9038eec246329026e8067860efe08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db90"]}, @nested={0x1c, 0x43, 0x0, 0x1, [@typed={0x6, 0x114, 0x0, 0x0, @str='[\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast2}, @generic, @generic]}, @nested={0x8, 0xbc, 0x0, 0x1, [@nested={0x4, 0xe8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x2b1e}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x2c, r5, 0x483, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x4)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x2, 0xff, 0x7, 0xc, 0x8, 0x8001, 0x8, 0xf}, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x9, 0x7c3, 0x8, 0x1, 0x8}, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]})
sync()
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, 0x0)

3m18.691837689s ago: executing program 9 (id=1477):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x4, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00', 0x0, 0x4})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002300)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x80000000, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
write(r2, &(0x7f0000000000)="0a000000010001", 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0], 0x1, 0x80800, 0x0, <r10=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r10, 0x4008af23, &(0x7f0000000280)={0x0, 0xb996})
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c4000000040000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94)
ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)

3m14.627782826s ago: executing program 9 (id=1482):
syz_open_dev$swradio(0x0, 0x1, 0x2)
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioperm(0x0, 0x6, 0x8c80)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x4}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000003c0)={r5, &(0x7f0000000040), 0x20000000}, 0x20)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r6, 0x0, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c598700", @ANYRES16=0x0], 0x3c}}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x2}, 0x8)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}})
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)

3m11.56253323s ago: executing program 9 (id=1488):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000009440)=0x3)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4})
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x34, r10, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}]}]}, 0x34}}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

2m55.696856108s ago: executing program 38 (id=1488):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x101000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000009440)=0x3)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0)
ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4})
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)={0x34, r10, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}]}]}, 0x34}}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

4.542092205s ago: executing program 8 (id=2119):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x70bd25, 0x25df5bfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800)

4.393726836s ago: executing program 8 (id=2123):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})
writev(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000003c0)="40000000000000000000b634b3144f", 0xf}], 0x2)

2.989376399s ago: executing program 8 (id=2130):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbf4, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4)

2.578412838s ago: executing program 8 (id=2134):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x1009, 0xfffd, 0x0, 0xffff}, 'syz0\x00', 0x26})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0xfffffffffffffffc)

2.303026335s ago: executing program 8 (id=2136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb709)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)

1.968612759s ago: executing program 1 (id=2141):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x141402)
r0 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76)

1.846680275s ago: executing program 1 (id=2142):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x2, &(0x7f0000000040)="0f11", 0x9, 0x1, 0x458, 0x58, 0xc3b8, 0x1, 0x0, 'syz0\x00'})

1.797957802s ago: executing program 3 (id=2144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x40814, 0x203}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

1.724581536s ago: executing program 8 (id=2145):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)

1.682440427s ago: executing program 1 (id=2146):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

1.617980783s ago: executing program 3 (id=2148):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000280)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.584606422s ago: executing program 5 (id=2149):
r0 = getpid()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone3(&(0x7f0000000180)={0x80000000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r2, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x23b)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', <r5=>0x0, 0x7800, 0x1, 0xfff, 0x4, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x2, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}})
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f00000003c0)={@rand_addr=0x64010102, @multicast1, r5}, 0xc)
setns(0xffffffffffffffff, 0x10000000)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x4, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)

1.419296691s ago: executing program 3 (id=2151):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x10000001, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x976}]]}, 0x34}, 0x1, 0x0, 0x0, 0x54a1a7b10f47ca8e}, 0x8804)

1.288797644s ago: executing program 3 (id=2153):
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/4082, 0xff2}], 0x1, 0x15f, 0x0)

1.091759993s ago: executing program 3 (id=2154):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd62)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0xa)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

756.551535ms ago: executing program 3 (id=2155):
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="25bd90f679d9a367b71ab321c2828ff6e75f83bf2746333b8e4da8934d20a4c61ef230c96cd1e947f7ec5101192340937605dc60440407bb00211af7546f88eaf0eaa5b84abfe911c27c84a56670830f50467031dea6"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x40004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd62)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0xa)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
setpgid(0x0, 0x0)

548.253478ms ago: executing program 0 (id=2156):
r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103})
io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0)

515.001214ms ago: executing program 1 (id=2157):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1ff}, @TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x44}}, 0x0)

356.601939ms ago: executing program 5 (id=2158):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r0, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

356.157105ms ago: executing program 1 (id=2159):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

355.95173ms ago: executing program 0 (id=2160):
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

297.920061ms ago: executing program 5 (id=2161):
syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r0, 0x0}])

297.300591ms ago: executing program 0 (id=2162):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@local}, {@my=0x1, 0x4000}, 0x400, "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"}, 0x418})

254.636243ms ago: executing program 1 (id=2163):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x4a, 0x0, 0x2}, 0x28)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0)

213.32682ms ago: executing program 0 (id=2164):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1e520b4c951ee12e"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0)

146.357722ms ago: executing program 5 (id=2165):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00')
pread64(r1, &(0x7f0000000080)=""/220, 0xdc, 0x47)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0)

145.677281ms ago: executing program 0 (id=2166):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
listen(r0, 0x4)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/175, 0xaf}], 0x1)

100.60065ms ago: executing program 5 (id=2167):
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fcffffffffffff92ee25250b2004aaff"], 0x0}, 0x94)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000117000000000000000001"], 0x114}], 0x1}, 0x0)

67.955501ms ago: executing program 0 (id=2168):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200)
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/88)

0s ago: executing program 5 (id=2169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae03, 0xbb)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4000000000010042)

kernel console output (not intermixed with test programs):

0] type 2 family 0 port 6081 - 0
[ 1050.662593][T12202] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.804356][   T30] audit: type=1400 audit(1752841671.096:240): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12391 comm="syz.3.1173" dest=2
[ 1051.437317][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1051.660975][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.669940][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.677997][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.687442][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.935935][T11501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.456760][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.526788][   T30] audit: type=1400 audit(1752841672.816:241): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12400 comm="syz.3.1176" daddr=ff02::1 dest=20004
[ 1052.938064][T12408] binder: BINDER_SET_CONTEXT_MGR already set
[ 1052.944512][T12408] binder: 12404:12408 ioctl 4018620d 200000000040 returned -16
[ 1053.356860][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.530757][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.798751][   T30] audit: type=1400 audit(1752841674.126:242): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12412 comm="syz.7.1178" daddr=ff01::1
[ 1054.607029][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.558557][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.657974][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.087459][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.152239][T12427] erofs (device nullb0): cannot find valid erofs superblock
[ 1059.131102][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.261997][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.946032][T12410] erspan0: entered promiscuous mode
[ 1059.967550][T12410] batman_adv: batadv0: Adding interface: macvlan2
[ 1059.974045][T12410] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1060.918890][T12410] batman_adv: batadv0: Interface activated: macvlan2
[ 1060.961342][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.044281][T12443] syz.1.1185 (12443): drop_caches: 2
[ 1061.051935][T12443] syz.1.1185 (12443): drop_caches: 2
[ 1062.108407][ T5851] IPVS: starting estimator thread 0...
[ 1062.124285][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.223544][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.247100][T12467] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1062.496473][T12472] syz.1.1192 (12472): drop_caches: 2
[ 1062.513694][T12472] syz.1.1192 (12472): drop_caches: 2
[ 1063.204253][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.528059][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1191'.
[ 1063.715501][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.773908][T12471] vxcan3: entered promiscuous mode
[ 1063.986935][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.207218][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.928772][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1064.970392][T12491] libceph: resolve '.
[ 1064.970392][T12491] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[ 1064.970392][T12491] ' (ret=-3): failed
[ 1065.094651][T12496] syz.3.1205 (12496): drop_caches: 2
[ 1065.102152][T12496] syz.3.1205 (12496): drop_caches: 2
[ 1065.666646][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.692599][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.164434][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.180141][   T30] audit: type=1400 audit(1752841687.276:243): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12501 comm="syz.1.1197" daddr=2001::1 dest=65532
[ 1067.526334][   T30] audit: type=1400 audit(1752841687.706:244): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12514 comm="syz.9.1198" daddr=ff01::1
[ 1068.207369][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.595709][   T13] bridge_slave_1: left allmulticast mode
[ 1068.601654][   T13] bridge_slave_1: left promiscuous mode
[ 1068.628642][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.766662][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.807243][T12527] syz.1.1202 (12527): drop_caches: 2
[ 1068.826199][T12527] syz.1.1202 (12527): drop_caches: 2
[ 1069.727953][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.820315][   T13] bridge_slave_0: left allmulticast mode
[ 1069.835473][   T13] bridge_slave_0: left promiscuous mode
[ 1069.844576][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1071.815284][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1071.862886][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.279598][T12554] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 12554 comm: syz.3.1209)
[ 1072.299677][T12554] comedi comedi3: ni_at_a2150: I/O port conflict (0x2f00,28)
[ 1072.436680][   T30] audit: type=1800 audit(1752841692.626:245): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1209" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=36069 res=0 errno=0
[ 1072.929590][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.629077][T10410] Bluetooth: hci0: unexpected event for opcode 0x202a
[ 1073.961184][T12561] siw: device registration error -23
[ 1074.044897][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1074.213447][   T30] audit: type=1400 audit(1752841694.546:246): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12555 comm="syz.9.1220" daddr=fe80::1b dest=16385
[ 1074.851647][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.186315][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.791443][   T13]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1075.811437][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1075.825568][   T13]  (unregistering): Released all slaves
[ 1076.227514][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1077.261058][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1078.273908][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.123902][T12592] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1079.147321][   T30] audit: type=1326 audit(1752841699.476:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12587 comm="syz.8.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0e038e9a9 code=0x0
[ 1079.956359][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.109857][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.176261][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.187597][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.199144][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.209101][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.249760][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.259971][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.268881][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1081.278031][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.695330][ T5851] libceph: connect (1)[c::]:6789 error -101
[ 1082.719629][ T5851] libceph: mon0 (1)[c::]:6789 connect error
[ 1082.744807][T12614] ceph: No mds server is up or the cluster is laggy
[ 1083.566597][   T13] hsr_slave_0: left promiscuous mode
[ 1083.592991][   T13] hsr_slave_1: left promiscuous mode
[ 1083.599912][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1083.614831][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1084.330231][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1226'.
[ 1084.339480][T12637] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 1084.737627][T12281] Bluetooth: hci1: command 0x0405 tx timeout
[ 1085.802901][ T5851] net_ratelimit: 38 callbacks suppressed
[ 1085.802924][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.818216][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1086.085126][   T13] veth1_macvtap: left promiscuous mode
[ 1086.105319][   T13] veth0_macvtap: left promiscuous mode
[ 1086.133597][   T13] veth1_vlan: left promiscuous mode
[ 1086.150060][   T13] veth0_vlan: left promiscuous mode
[ 1087.241406][T12648] tty tty35: ldisc open failed (-12), clearing slot 34
[ 1087.250711][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1087.381508][T12654] loop6: detected capacity change from 0 to 524287999
[ 1087.407627][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1231'.
[ 1088.288181][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1089.247130][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1089.256703][   T30] audit: type=1400 audit(1752841708.956:248): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12659 comm="syz.9.1233" daddr=ff01::1
[ 1089.332780][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1090.536781][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1091.106643][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1091.158642][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.209266][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.296402][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1094.580426][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.656476][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1096.388257][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1097.198309][   T30] audit: type=1400 audit(1752841975.453:249): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12688 comm="syz.1.1244" daddr=ff01::1
[ 1097.407274][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1097.935642][   T30] audit: type=1400 audit(1752841976.253:250): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12698 comm="syz.8.1246" daddr=fe80::aa dest=17955
[ 1098.129595][   T30] audit: type=1400 audit(1752841976.253:251): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12698 comm="syz.8.1246" daddr=::ffff:172.20.20.18 dest=15
[ 1098.792042][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1098.913400][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1099.608186][   T13] IPVS: stop unused estimator thread 0...
[ 1100.436196][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.011775][T12724] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1101.522079][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.855711][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1102.526490][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1103.877591][T11195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1103.942619][ T2990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1103.966173][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1104.195340][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1104.999519][T12756] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[ 1105.008829][T12756] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[ 1105.246572][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.683640][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.748143][   T30] audit: type=1400 audit(1752841984.053:252): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12754 comm="syz.8.1258" daddr=fc01::
[ 1106.077109][   T30] audit: type=1400 audit(1752841984.073:253): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12754 comm="syz.8.1258" daddr=fc02:: dest=20004
[ 1106.293159][   T30] audit: type=1400 audit(1752841984.153:254): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12754 comm="syz.8.1258" daddr=fe80::15 dest=20000
[ 1106.642381][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'.
[ 1107.234747][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1108.746788][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1108.806590][   T30] audit: type=1400 audit(1752841986.653:255): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12758 comm="syz.7.1261" daddr=fc01::
[ 1109.004975][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1109.015184][   T30] audit: type=1400 audit(1752841986.653:256): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12758 comm="syz.7.1261" daddr=fc02::
[ 1109.033794][   T30] audit: type=1400 audit(1752841986.663:257): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12773 comm="syz.1.1263" daddr=ff01::1
[ 1110.319061][T12795] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1110.675667][ T5847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1111.738027][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1112.046648][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1112.670726][   T30] audit: type=1400 audit(1752841991.003:258): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12803 comm="syz.9.1270" daddr=ff01::1
[ 1112.776624][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1113.282761][T12815] IPv6: Can't replace route, no match found
[ 1113.817890][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.314427][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.363410][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.399889][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.523358][   T30] audit: type=1400 audit(1752841993.033:259): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12825 comm="syz.8.1276" daddr=ff01::1
[ 1115.606242][ T9094] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1116.080980][T12835] netlink: 'syz.1.1278': attribute type 4 has an invalid length.
[ 1116.089101][T12835] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1278'.
[ 1116.456674][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1116.938674][ T9094] usb 10-1: device not accepting address 2, error -71
[ 1117.498178][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1118.462985][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1118.474953][   T30] audit: type=1400 audit(1752841996.803:260): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12845 comm="syz.8.1281" daddr=::ffff:172.20.20.34 dest=20003
[ 1118.550450][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1118.640804][T12853] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1282'.
[ 1119.654690][T12853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1119.683280][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.554504][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.596440][   T30] audit: type=1400 audit(1752841998.223:261): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12861 comm="syz.3.1283" daddr=ff01::1
[ 1120.686666][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.766649][T12871] unsupported nlmsg_type 40
[ 1122.116468][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.146084][   T30] audit: type=1400 audit(1752841999.753:262): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12875 comm="syz.9.1287" daddr=ff01::1
[ 1122.902096][T12889] mkiss: ax0: crc mode is auto.
[ 1123.166477][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1124.451364][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1124.493347][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1124.636131][T12891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1124.879604][T12895] syz.1.1292 (12895): drop_caches: 2
[ 1124.887719][T12895] syz.1.1292 (12895): drop_caches: 2
[ 1125.786779][ T5966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.934967][T12910] binder: 12903:12910 ioctl c0306201 0 returned -14
[ 1127.388621][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1127.566103][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.196544][T12281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1128.211838][T12281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1128.223070][T12281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1128.252743][T12281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1128.263051][T12281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1128.271923][   T30] audit: type=1400 audit(1752842006.433:263): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12912 comm="syz.3.1296" daddr=ff01::1
[ 1128.683532][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.753405][T12917] lo speed is unknown, defaulting to 1000
[ 1129.178478][   T30] audit: type=1400 audit(1752842007.503:264): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12915 comm="syz.1.1298" daddr=ff01::1
[ 1129.763878][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.054355][   T30] audit: type=1400 audit(1752842008.373:265): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12928 comm="syz.3.1299" daddr=ff01::1
[ 1130.668500][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.864569][T10410] Bluetooth: hci4: command tx timeout
[ 1130.874171][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.882920][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1131.923891][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.425889][   T30] audit: type=1400 audit(1752842010.453:266): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12941 comm="syz.3.1302" daddr=ff01::1
[ 1132.484070][T12917] chnl_net:caif_netlink_parms(): no params data found
[ 1132.950576][T10410] Bluetooth: hci4: command tx timeout
[ 1133.531738][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1134.071796][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1134.196968][T12964] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1134.598907][T12951] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1305'.
[ 1134.620146][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1135.005984][T10410] Bluetooth: hci4: command tx timeout
[ 1135.930473][   T30] audit: type=1400 audit(1752842013.903:267): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12970 comm="syz.1.1308" daddr=ff01::1
[ 1135.947507][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1136.057031][   T30] audit: type=1400 audit(1752842014.263:268): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12972 comm="syz.9.1309" dest=20001
[ 1136.121066][T12917] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.145442][T12917] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.710687][   T30] audit: type=1400 audit(1752842014.943:269): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12983 comm="syz.3.1312" daddr=ff01::1
[ 1136.742080][T12917] bridge_slave_0: entered allmulticast mode
[ 1136.774742][T12917] bridge_slave_0: entered promiscuous mode
[ 1136.775961][   T30] audit: type=1400 audit(1752842014.993:270): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12979 comm="syz.8.1310" daddr=ff01::1
[ 1136.799082][T12917] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1136.841419][T12917] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1137.663150][T10410] Bluetooth: hci4: command tx timeout
[ 1137.664468][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1137.668808][   T30] audit: type=1400 audit(1752842015.303:271): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12993 comm="syz.3.1314" daddr=ff01::1
[ 1137.683946][T12999] vxcan0: tx drop: invalid da for name 0x0000000000000003
[ 1137.702211][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1138.088735][T12917] bridge_slave_1: entered allmulticast mode
[ 1138.348781][T13001] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1138.460534][T13001] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1138.498162][   T13] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1138.535558][T12917] bridge_slave_1: entered promiscuous mode
[ 1138.585352][T13003] syz.3.1316: attempt to access beyond end of device
[ 1138.585352][T13003] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1138.612293][T13003] (syz.3.1316,13003,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1138.629321][T13003] (syz.3.1316,13003,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1138.660183][T13003] (syz.3.1316,13003,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1138.732166][T13003] (syz.3.1316,13003,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1138.768370][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1139.825206][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1140.446244][T10410] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1140.686072][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1140.857058][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1141.152695][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'.
[ 1141.386057][   T30] audit: type=1400 audit(1752842019.493:272): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13005 comm="syz.1.1318" daddr=fc02::1 dest=20003
[ 1141.482245][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1317'.
[ 1141.512382][T13010] kAFS: No cell specified
[ 1142.350731][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1142.368505][T12917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1142.454071][T12917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1143.726919][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1143.735137][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1143.741680][T12917] team0: Port device team_slave_0 added
[ 1143.766132][   T30] audit: type=1400 audit(1752842021.433:273): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13021 comm="syz.9.1320" daddr=ff01::1
[ 1144.026432][   T30] audit: type=1400 audit(1752842022.333:274): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13031 comm="syz.9.1324" daddr=ff01::1
[ 1144.780501][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1144.890460][T12917] team0: Port device team_slave_1 added
[ 1145.816078][ T5940] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1145.887466][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1146.801462][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1327'.
[ 1147.031465][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1147.297601][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1147.754055][T13056] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1147.839630][T13055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1148.649522][ T5940] usb 9-1: device descriptor read/all, error -71
[ 1149.357508][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1150.557858][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1150.586648][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1150.616203][T13066] veth0_to_team: entered promiscuous mode
[ 1150.621992][T13066] veth0_to_team: entered allmulticast mode
[ 1151.631834][T13079] CIFS: Unable to determine destination address
[ 1151.775683][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1152.291520][   T30] audit: type=1326 audit(1752842030.453:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13075 comm="syz.9.1333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dd438e9a9 code=0x0
[ 1152.778576][T10410] Bluetooth: hci1: command 0x0405 tx timeout
[ 1152.951098][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1153.865696][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1153.910835][ T2970] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1154.042947][ T2970] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.094403][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1154.196163][   T30] audit: type=1400 audit(1752842032.413:276): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13091 comm="syz.1.1337"
[ 1154.568391][T12917] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1154.568411][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1154.568450][T12917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1155.040403][ T2970] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1155.050951][ T2970] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.664672][T13108] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1155.679023][T13108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1156.012753][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1156.393213][T12917] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1156.726028][   T30] audit: type=1400 audit(1752842034.893:277): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13101 comm="syz.3.1340" daddr=ff01::1
[ 1156.927849][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1156.980026][T12917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1157.007107][T12917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1157.110378][ T2970] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1157.235352][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1157.255713][ T2970] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1158.286119][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1158.287356][   T30] audit: type=1400 audit(1752842036.553:278): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13112 comm="syz.8.1342" daddr=fe80::
[ 1160.252484][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1160.455672][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1160.476659][T13120] netlink: 'syz.9.1344': attribute type 21 has an invalid length.
[ 1160.496034][   T30] audit: type=1400 audit(1752842489.878:279): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13112 comm="syz.8.1342" daddr=ff01::1
[ 1160.568347][ T2970] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1160.595931][ T2970] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1160.738551][T13134] netlink: 'syz.9.1344': attribute type 21 has an invalid length.
[ 1160.748796][T13128] xt_recent: Unsupported userspace flags (000000b2)
[ 1160.756125][T13134] netlink: 6 bytes leftover after parsing attributes in process `syz.9.1344'.
[ 1160.756158][T13120] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1344'.
[ 1160.889884][T13136] ALSA: mixer_oss: invalid OSS volume 'LI'
[ 1161.551476][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1161.718493][T12917] hsr_slave_0: entered promiscuous mode
[ 1161.725385][T12917] hsr_slave_1: entered promiscuous mode
[ 1161.736439][T13126] xt_NFQUEUE: number of total queues is 0
[ 1161.748263][T12917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1161.778151][T12917] Cannot create hsr debugfs directory
[ 1162.384696][T13149] overlayfs: failed to resolve './file0': -2
[ 1162.800856][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1162.998349][   T30] audit: type=1400 audit(1752842494.318:280): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13139 comm="syz.8.1349" daddr=::ffff:172.20.20.20 dest=20001
[ 1163.105919][T13153] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.1350'.
[ 1163.328671][T12204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1163.855655][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1164.939687][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1165.140613][T13159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1165.254486][T13166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1165.336076][   T30] audit: type=1326 audit(1752842496.648:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1166.324993][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1166.334182][   T30] audit: type=1326 audit(1752842496.658:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1166.374120][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1166.515949][   T30] audit: type=1326 audit(1752842496.658:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1166.575332][   T30] audit: type=1326 audit(1752842496.658:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1166.941155][   T30] audit: type=1326 audit(1752842496.668:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1167.523220][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1167.743908][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1355'.
[ 1167.753038][T13180] nbd: must specify a size in bytes for the device
[ 1167.797113][   T30] audit: type=1326 audit(1752842496.668:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1167.919188][T13192] misc userio: Invalid payload size
[ 1167.924936][T13192] misc userio: Invalid payload size
[ 1167.932148][T13192] misc userio: The device must be registered before sending interrupts
[ 1168.356069][   T30] audit: type=1326 audit(1752842496.668:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1168.527197][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1168.547017][   T30] audit: type=1326 audit(1752842496.668:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1168.721798][   T30] audit: type=1326 audit(1752842496.668:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1168.847381][   T30] audit: type=1326 audit(1752842496.668:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13169 comm="syz.1.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcfadd8e9a9 code=0x7ffc0000
[ 1169.296787][T13200] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1358'.
[ 1169.409104][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1169.566457][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1170.397362][ T2970] bridge_slave_1: left allmulticast mode
[ 1170.403073][ T2970] bridge_slave_1: left promiscuous mode
[ 1170.410346][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.486030][T13199] xt_CT: No such helper "snmp"
[ 1170.565212][ T2970] bridge_slave_0: left allmulticast mode
[ 1170.607107][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1170.638814][ T2970] bridge_slave_0: left promiscuous mode
[ 1170.971661][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.003968][   T30] kauditd_printk_skb: 42 callbacks suppressed
[ 1171.003997][   T30] audit: type=1400 audit(1752842502.318:333): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13191 comm="syz.3.1358" daddr=fe80::41
[ 1172.223172][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1172.510536][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1172.687900][T13227] loop6: detected capacity change from 0 to 524287999
[ 1172.713534][T13227] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1365'.
[ 1173.250079][ T9094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1173.297559][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1173.310811][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1173.323872][ T2970] bond0 (unregistering): Released all slaves
[ 1176.216881][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1176.408214][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1369'.
[ 1178.007481][T13257] ISOFS: Unable to identify CD-ROM format.
[ 1178.606463][T13244] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1179.776402][T13270] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1179.793819][T13270] netlink: 'syz.9.1375': attribute type 1 has an invalid length.
[ 1179.805534][ T2970] hsr_slave_0: left promiscuous mode
[ 1179.853987][ T2970] hsr_slave_1: left promiscuous mode
[ 1179.861988][T13271] netlink: 'syz.9.1375': attribute type 1 has an invalid length.
[ 1179.871983][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1179.882289][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1179.975785][ T2970] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1180.084411][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1180.402386][T13284] loop6: detected capacity change from 0 to 524287999
[ 1180.426595][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'.
[ 1181.396100][ T2970] veth1_macvtap: left promiscuous mode
[ 1181.401793][ T2970] veth0_macvtap: left promiscuous mode
[ 1181.407644][ T2970] veth1_vlan: left promiscuous mode
[ 1181.416202][ T2970] veth0_vlan: left promiscuous mode
[ 1181.592379][T13290] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1379'.
[ 1182.434789][ T2970] team0 (unregistering): Port device team_slave_1 removed
[ 1182.484242][ T2970] team0 (unregistering): Port device team_slave_0 removed
[ 1182.926144][T13270] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1182.927070][T13271] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1183.053840][T13275] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1185.296424][T12917] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1185.606158][T13310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1185.614574][T13310] batadv_slave_0: entered promiscuous mode
[ 1186.436647][ T9094] libceph: connect (1)[c::]:6789 error -101
[ 1186.442761][ T9094] libceph: mon0 (1)[c::]:6789 connect error
[ 1186.646259][T12917] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1186.691282][T13323] siw: device registration error -23
[ 1187.509338][   T30] audit: type=1400 audit(1752842518.278:334): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13313 comm="syz.1.1383" daddr=fe80::1b dest=16385
[ 1187.553512][ T9094] libceph: connect (1)[c::]:6789 error -101
[ 1187.667175][ T9094] libceph: mon0 (1)[c::]:6789 connect error
[ 1187.677804][T13318] ceph: No mds server is up or the cluster is laggy
[ 1187.931203][   T30] audit: type=1400 audit(1752842519.258:335): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13327 comm="syz.9.1384" daddr=ff01::1
[ 1188.830395][ T2970] IPVS: stop unused estimator thread 0...
[ 1189.006169][T10410] Bluetooth: hci4: command 0x0405 tx timeout
[ 1189.421394][T13332] bond0: (slave tunl0): Error: Device type is different from other slaves
[ 1190.242347][T12281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1190.259797][T12281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1190.273956][T12281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1190.285136][T12281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1190.298173][T12281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1190.604890][T13354] netlink: 'syz.1.1390': attribute type 39 has an invalid length.
[ 1191.443763][T13348] lo speed is unknown, defaulting to 1000
[ 1191.918596][T13348] chnl_net:caif_netlink_parms(): no params data found
[ 1191.951218][T12569] bridge_slave_1: left allmulticast mode
[ 1191.958266][T12569] bridge_slave_1: left promiscuous mode
[ 1191.964211][T12569] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1191.980713][T12569] bridge_slave_0: left allmulticast mode
[ 1191.986550][T12569] bridge_slave_0: left promiscuous mode
[ 1191.992338][T12569] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.161611][T12569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1192.188820][T12569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1192.214015][T12569] bond0 (unregistering): Released all slaves
[ 1192.333392][T13348] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1192.341199][T13348] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1192.349500][T13348] bridge_slave_0: entered allmulticast mode
[ 1192.357940][T13348] bridge_slave_0: entered promiscuous mode
[ 1192.366050][T12281] Bluetooth: hci5: command tx timeout
[ 1192.379979][T12569] hsr_slave_0: left promiscuous mode
[ 1192.387481][T12569] hsr_slave_1: left promiscuous mode
[ 1192.393331][T12569] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1192.401935][T12569] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1192.575339][T12569] team0 (unregistering): Port device team_slave_1 removed
[ 1192.615210][T12569] team0 (unregistering): Port device team_slave_0 removed
[ 1192.794991][T13348] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1192.804723][T13348] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1192.812676][T13348] bridge_slave_1: entered allmulticast mode
[ 1192.821019][T13348] bridge_slave_1: entered promiscuous mode
[ 1192.882700][T13348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1192.903654][T13348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1192.979278][T13348] team0: Port device team_slave_0 added
[ 1192.994951][T13348] team0: Port device team_slave_1 added
[ 1193.025172][T13348] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1193.032334][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1193.060276][T13348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1193.074689][T13348] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1193.083537][T13348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1193.110225][T13348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1193.164598][T13348] hsr_slave_0: entered promiscuous mode
[ 1193.171291][T13348] hsr_slave_1: entered promiscuous mode
[ 1193.178887][T13348] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1193.186612][T13348] Cannot create hsr debugfs directory
[ 1193.653509][T13348] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1193.664523][T13348] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1193.674440][T13348] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1193.684161][T13348] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1193.758892][T13348] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1193.782137][T13348] 8021q: adding VLAN 0 to HW filter on device team0
[ 1193.793547][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1193.800724][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1193.816503][T12569] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1193.823639][T12569] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1194.021568][T13348] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1194.069715][T13348] veth0_vlan: entered promiscuous mode
[ 1194.083416][T13348] veth1_vlan: entered promiscuous mode
[ 1194.117636][T13348] veth0_macvtap: entered promiscuous mode
[ 1194.127415][T13348] veth1_macvtap: entered promiscuous mode
[ 1194.148633][T13348] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1194.163663][T13348] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1194.175722][T13348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.185574][T13348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.195273][T13348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.204199][T13348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1194.273271][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.282215][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.318297][ T2990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1194.326358][ T2990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1194.631905][T12281] Bluetooth: hci5: command tx timeout
[ 1195.590102][T13392] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1195.624598][T13388] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1196.077274][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1393'.
[ 1196.296027][T13407] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1393'.
[ 1196.374658][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1393'.
[ 1196.805927][T12281] Bluetooth: hci5: command tx timeout
[ 1196.923970][T13411] loop6: detected capacity change from 0 to 524287999
[ 1196.949300][T13411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1391'.
[ 1197.847352][T13407] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1197.889069][T13410] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1392'.
[ 1197.990676][T13410] syz.3.1392: attempt to access beyond end of device
[ 1197.990676][T13410] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1198.005650][T13410] syz.3.1392: attempt to access beyond end of device
[ 1198.005650][T13410] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1198.019574][T13410] Mount JFS Failure: -5
[ 1198.463341][T13414] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1199.144274][T12281] Bluetooth: hci5: command tx timeout
[ 1199.250637][T13428] netlink: 'syz.0.1394': attribute type 5 has an invalid length.
[ 1199.747968][T13435] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1200.676650][T13442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1398'.
[ 1201.801325][T13448] CIFS mount error: No usable UNC path provided in device string!
[ 1201.801325][T13448] 
[ 1201.813823][T13448] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1202.265320][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1404'.
[ 1202.290076][T13459] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1202.445474][   T30] audit: type=1400 audit(1752842533.608:336): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13450 comm="syz.8.1404" daddr=::ffff:172.20.20.20 dest=20001
[ 1203.302821][   T30] audit: type=1326 audit(1752842533.808:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13450 comm="syz.8.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0e038e9a9 code=0x0
[ 1206.927522][   T30] audit: type=1400 audit(1752842538.238:338): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13482 comm="syz.9.1413" daddr=::ffff:172.20.20.59 dest=20003
[ 1207.311396][   T30] audit: type=1400 audit(1752842538.248:339): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13482 comm="syz.9.1413" daddr=fe80::aa
[ 1207.696044][T13496] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1207.914642][T13501] overlay: Bad value for 'redirect_dir'
[ 1208.396617][T13505] ubi: mtd0 is already attached to ubi31
[ 1209.394328][T13513] trusted_key: encrypted_key: insufficient parameters specified
[ 1210.641012][T13516] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1211.180856][   T30] audit: type=1400 audit(1752842542.178:340): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13517 comm="syz.1.1421" daddr=fe80::19
[ 1211.930781][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[ 1211.939768][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'.
[ 1212.932492][   T30] audit: type=1400 audit(1752842544.258:341): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13532 comm="syz.1.1425" daddr=fc00:: dest=20004
[ 1213.224803][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1424'.
[ 1213.234337][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1424'.
[ 1217.167683][   T30] audit: type=1400 audit(1752842548.488:342): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13565 comm="syz.9.1433" daddr=ff01::1
[ 1220.577729][T13577] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1220.841202][T13579] ceph: No mds server is up or the cluster is laggy
[ 1220.865110][T11195] libceph: connect (1)[c::]:6789 error -101
[ 1221.023246][T11195] libceph: mon0 (1)[c::]:6789 connect error
[ 1221.182817][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'.
[ 1221.192072][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'.
[ 1221.986516][   T30] audit: type=1400 audit(1752842553.308:343): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13589 comm="syz.8.1437" daddr=ff01::1 dest=65533
[ 1222.198971][T13595] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1437'.
[ 1223.213505][   T30] audit: type=1400 audit(1752842554.138:344): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13592 comm="syz.1.1438" daddr=::ffff:255.255.255.255
[ 1225.575940][   T30] audit: type=1400 audit(1752842556.678:345): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13616 comm="syz.3.1442" dest=2
[ 1226.002696][T13629] siw: device registration error -23
[ 1226.439636][   T30] audit: type=1400 audit(1752842557.358:346): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13618 comm="syz.1.1443" daddr=fe88::2 dest=20001
[ 1227.635534][T13631] netlink: 'syz.0.1445': attribute type 1 has an invalid length.
[ 1227.656022][T13631] netlink: 'syz.0.1445': attribute type 2 has an invalid length.
[ 1227.814493][T13650] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1448'.
[ 1227.956848][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1450'.
[ 1232.152965][T13659] ceph: No mds server is up or the cluster is laggy
[ 1232.160307][ T9094] libceph: connect (1)[c::]:6789 error -101
[ 1232.173024][ T9094] libceph: mon0 (1)[c::]:6789 connect error
[ 1232.890409][T13679] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1233.039837][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1234.459897][T13685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1459'.
[ 1234.518399][ T9094] IPVS: starting estimator thread 0...
[ 1234.551244][T13691] random: crng reseeded on system resumption
[ 1234.626094][T13690] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1235.453890][T13706] tmpfs: Unknown parameter '—'
[ 1235.640245][T13705] 9pnet_fd: Insufficient options for proto=fd
[ 1236.117085][T13711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1463'.
[ 1236.251767][T13714] input: syz0 as /devices/virtual/input/input13
[ 1236.595564][T13719] overlayfs: failed to clone lowerpath
[ 1237.764859][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.487039][T13731] netlink: 'syz.9.1470': attribute type 6 has an invalid length.
[ 1242.868866][T13755] overlayfs: failed to clone upperpath
[ 1243.011989][T13764] syz.8.1475 (13764): drop_caches: 2
[ 1243.029414][T13764] syz.8.1475 (13764): drop_caches: 2
[ 1243.906834][   T30] audit: type=1400 audit(1752842580.238:347): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13771 comm="syz.0.1479" daddr=ff01::1
[ 1245.895868][   T30] audit: type=1326 audit(1752842582.218:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13772 comm="syz.8.1481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe0e038e9a9 code=0x0
[ 1246.815020][T13791] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 13791 comm: syz.3.1478)
[ 1247.555260][   T30] audit: type=1800 audit(1752842583.168:349): pid=13791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1478" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=36069 res=0 errno=0
[ 1248.094037][T13794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'.
[ 1248.401490][T13800] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1250.682566][T13816] netlink: 'syz.1.1489': attribute type 11 has an invalid length.
[ 1253.867930][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'.
[ 1255.077571][T13862] netlink: 'syz.8.1498': attribute type 1 has an invalid length.
[ 1257.348503][T13869] xt_hashlimit: size too large, truncated to 1048576
[ 1258.020064][T13877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1502'.
[ 1258.042709][T13877] tipc: Started in network mode
[ 1258.060951][T13877] tipc: Node identity 7, cluster identity 5
[ 1258.128977][   T30] audit: type=1400 audit(1752842594.458:350): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13873 comm="syz.8.1501" daddr=ff01::1
[ 1258.696077][T13877] tipc: Node number set to 7
[ 1258.764505][T13877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1502'.
[ 1259.061291][T13886] netlink: 'syz.8.1504': attribute type 3 has an invalid length.
[ 1259.069380][T13886] netlink: 'syz.8.1504': attribute type 1 has an invalid length.
[ 1259.077549][T13886] netlink: 216 bytes leftover after parsing attributes in process `syz.8.1504'.
[ 1259.086991][T13886] NCSI netlink: No device for ifindex 33022
[ 1259.210024][T13888] hub 8-0:1.0: USB hub found
[ 1259.219710][T13888] hub 8-0:1.0: 1 port detected
[ 1260.766763][T13900] Device name not specified.
[ 1260.766763][T13900] 
[ 1262.389729][   T30] audit: type=1400 audit(1752842598.138:351): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13906 comm="syz.1.1508" daddr=ff04::1
[ 1262.995433][   T30] audit: type=1800 audit(1752842599.328:352): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1509" name="bus" dev="overlay" ino=1884 res=0 errno=0
[ 1263.425172][T13921] program syz.8.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1266.462144][T13938] netlink: 'syz.0.1517': attribute type 1 has an invalid length.
[ 1267.170365][T13946] No control pipe specified
[ 1268.187204][T10410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1268.202555][T10410] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1268.211165][T10410] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1268.220642][T10410] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1268.229864][T10410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1268.353832][   T30] audit: type=1400 audit(1752842604.688:353): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13949 comm="syz.1.1519" daddr=fe80::41
[ 1269.193550][ T8666] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1270.293274][T12281] Bluetooth: hci1: command tx timeout
[ 1270.688090][T13947] lo speed is unknown, defaulting to 1000
[ 1270.876764][ T8666] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1271.052006][T13980] siw: device registration error -23
[ 1271.747079][T13979] binder: BINDER_SET_CONTEXT_MGR already set
[ 1271.753110][T13979] binder: 13975:13979 ioctl 4018620d 200000000040 returned -16
[ 1271.812613][   T30] audit: type=1400 audit(2000000002.210:354): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13971 comm="syz.0.1522" daddr=fe80::1b dest=16385
[ 1272.368269][T12281] Bluetooth: hci1: command tx timeout
[ 1272.772267][   T30] audit: type=1400 audit(2000000002.840:355): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13973 comm="syz.3.1523" daddr=::ffff:127.0.0.1 dest=20000
[ 1273.141122][ T8666] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1273.216642][   T30] audit: type=1400 audit(2000000003.610:356): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13993 comm="syz.1.1526" daddr=ff01::1
[ 1274.069791][T14006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[ 1274.076433][T14006] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1274.084356][T14006] vhci_hcd vhci_hcd.0: Device attached
[ 1274.818631][   T30] audit: type=1400 audit(2000000004.600:357): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14004 comm="syz.1.1530" daddr=ff01::1
[ 1274.833526][T12281] Bluetooth: hci1: command tx timeout
[ 1274.926071][ T5847] usb 39-1: new high-speed USB device number 4 using vhci_hcd
[ 1274.939879][T14007] vhci_hcd: connection reset by peer
[ 1274.947589][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'.
[ 1274.956802][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'.
[ 1274.997725][   T13] vhci_hcd: stop threads
[ 1275.002206][   T13] vhci_hcd: release socket
[ 1275.081851][   T13] vhci_hcd: disconnect device
[ 1276.402783][   T30] audit: type=1400 audit(2000000006.640:358): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14014 comm="syz.1.1531" daddr=ff01::1
[ 1277.337091][T10410] Bluetooth: hci1: command tx timeout
[ 1278.711024][ T8666] bridge_slave_1: left allmulticast mode
[ 1278.732541][T14033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1535'.
[ 1278.743932][ T8666] bridge_slave_1: left promiscuous mode
[ 1278.922192][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1279.555684][T14036] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.1536'.
[ 1279.976853][ T8666] bridge_slave_0: left allmulticast mode
[ 1280.067448][ T8666] bridge_slave_0: left promiscuous mode
[ 1280.094406][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1280.116275][ T5847] vhci_hcd: vhci_device speed not set
[ 1281.305980][   T30] audit: type=1400 audit(2000000010.920:359): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14053 comm="syz.0.1540" daddr=ff01::1
[ 1281.700793][T14068] Cannot find del_set index 0 as target
[ 1282.457797][   T30] audit: type=1400 audit(2000000012.170:360): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14066 comm="syz.0.1543" daddr=ff01::1
[ 1284.751166][T14087] No control pipe specified
[ 1285.362461][ T8666] batman_adv: batadv0: Interface deactivated: macvlan2
[ 1285.385454][ T8666] batman_adv: batadv0: Removing interface: macvlan2
[ 1286.843024][ T8666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1286.858520][ T8666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1286.872009][ T8666] bond0 (unregistering): Released all slaves
[ 1286.896697][T13947] chnl_net:caif_netlink_parms(): no params data found
[ 1286.956761][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1542'.
[ 1286.969237][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'.
[ 1287.057872][T14100] syz.8.1548: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1287.073597][T14100] CPU: 0 UID: 0 PID: 14100 Comm: syz.8.1548 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 1287.073625][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1287.073638][T14100] Call Trace:
[ 1287.073647][T14100]  <TASK>
[ 1287.073656][T14100]  dump_stack_lvl+0x189/0x250
[ 1287.073685][T14100]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 1287.073716][T14100]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1287.073738][T14100]  ? __pfx__printk+0x10/0x10
[ 1287.073763][T14100]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1287.073788][T14100]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1287.073819][T14100]  warn_alloc+0x214/0x310
[ 1287.073841][T14100]  ? stack_depot_save_flags+0x40/0x900
[ 1287.073865][T14100]  ? __pfx_warn_alloc+0x10/0x10
[ 1287.073889][T14100]  ? kasan_save_track+0x4f/0x80
[ 1287.073918][T14100]  ? xskq_create+0x56/0x170
[ 1287.073935][T14100]  ? xsk_init_queue+0xb0/0x110
[ 1287.073962][T14100]  ? xsk_setsockopt+0x43f/0x710
[ 1287.073987][T14100]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1287.074013][T14100]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1287.074046][T14100]  ? do_syscall_64+0xfa/0x3b0
[ 1287.074066][T14100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.074114][T14100]  __vmalloc_node_range_noprof+0x125/0x12f0
[ 1287.074172][T14100]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1287.074204][T14100]  ? __kasan_kmalloc+0x93/0xb0
[ 1287.074228][T14100]  vmalloc_user_noprof+0xad/0xf0
[ 1287.074252][T14100]  ? xskq_create+0xbf/0x170
[ 1287.074273][T14100]  xskq_create+0xbf/0x170
[ 1287.074296][T14100]  xsk_init_queue+0xb0/0x110
[ 1287.074332][T14100]  xsk_setsockopt+0x43f/0x710
[ 1287.074367][T14100]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1287.074407][T14100]  ? do_sock_setsockopt+0x54/0x1b0
[ 1287.074437][T14100]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1287.074471][T14100]  do_sock_setsockopt+0x17c/0x1b0
[ 1287.074505][T14100]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1287.074541][T14100]  do_syscall_64+0xfa/0x3b0
[ 1287.074564][T14100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.074584][T14100]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1287.074604][T14100]  ? clear_bhb_loop+0x60/0xb0
[ 1287.074630][T14100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.074650][T14100] RIP: 0033:0x7fe0e038e9a9
[ 1287.074678][T14100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1287.074698][T14100] RSP: 002b:00007fe0e11f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1287.074720][T14100] RAX: ffffffffffffffda RBX: 00007fe0e05b6160 RCX: 00007fe0e038e9a9
[ 1287.074735][T14100] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[ 1287.074749][T14100] RBP: 00007fe0e0410ca1 R08: 0000000000000004 R09: 0000000000000000
[ 1287.074762][T14100] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1287.074776][T14100] R13: 0000000000000000 R14: 00007fe0e05b6160 R15: 00007fffa35e09a8
[ 1287.074806][T14100]  </TASK>
[ 1287.074846][T14100] Mem-Info:
[ 1287.366958][T14100] active_anon:642 inactive_anon:6386 isolated_anon:0
[ 1287.366958][T14100]  active_file:15509 inactive_file:37015 isolated_file:0
[ 1287.366958][T14100]  unevictable:772 dirty:183 writeback:0
[ 1287.366958][T14100]  slab_reclaimable:6286 slab_unreclaimable:115870
[ 1287.366958][T14100]  mapped:34376 shmem:4627 pagetables:986
[ 1287.366958][T14100]  sec_pagetables:3 bounce:0
[ 1287.366958][T14100]  kernel_misc_reclaimable:0
[ 1287.366958][T14100]  free:1290071 free_pcp:25738 free_cma:0
[ 1287.412699][T14100] Node 0 active_anon:2568kB inactive_anon:25544kB active_file:61636kB inactive_file:148060kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:137348kB dirty:728kB writeback:0kB shmem:16972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11552kB pagetables:3784kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB
[ 1287.446845][T14100] Node 1 active_anon:0kB inactive_anon:0kB active_file:400kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1287.478831][T14100] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1287.507804][T14100] lowmem_reserve[]: 0 2500 2502 2502 2502
[ 1287.513592][T14100] Node 0 DMA32 free:1248080kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2564kB inactive_anon:25500kB active_file:59864kB inactive_file:147992kB unevictable:1552kB writepending:652kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:83296kB local_pcp:29876kB free_cma:0kB
[ 1287.546529][T14100] lowmem_reserve[]: 0 0 1 1 1
[ 1287.551286][T14100] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1287.580599][T14100] lowmem_reserve[]: 0 0 0 0 0
[ 1287.585414][T14100] Node 1 Normal free:3896836kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:400kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19648kB local_pcp:11200kB free_cma:0kB
[ 1287.616718][T14100] lowmem_reserve[]: 0 0 0 0 0
[ 1287.621453][T14100] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1287.634203][T14100] Node 0 DMA32: 143*4kB (U) 84*8kB (UM) 128*16kB (UME) 66*32kB (UME) 512*64kB (UME) 144*128kB (UME) 126*256kB (UME) 78*512kB (UME) 39*1024kB (UME) 7*2048kB (UME) 260*4096kB (UM) = 1248028kB
[ 1287.653407][T14100] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[ 1287.665297][T14100] Node 1 Normal: 209*4kB (UE) 44*8kB (UE) 54*16kB (UME) 224*32kB (UME) 76*64kB (UME) 14*128kB (UE) 12*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3896836kB
[ 1287.683563][T14100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1287.693157][T14100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1287.702490][T14100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1287.712069][T14100] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1287.721384][T14100] 57148 total pagecache pages
[ 1287.726459][T14100] 0 pages in swap cache
[ 1287.730629][T14100] Free swap  = 124996kB
[ 1287.734779][T14100] Total swap = 124996kB
[ 1287.739008][T14100] 2097051 pages RAM
[ 1287.743054][T14100] 0 pages HighMem/MovableOnly
[ 1287.747772][T14100] 424693 pages reserved
[ 1287.751929][T14100] 0 pages cma reserved
[ 1287.922237][T14102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[ 1289.401098][   T30] audit: type=1400 audit(2000000019.790:361): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14123 comm="syz.0.1554" daddr=ff01::1
[ 1290.493381][T13947] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1290.522087][T13947] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.523886][T13947] bridge_slave_0: entered allmulticast mode
[ 1290.568372][T13947] bridge_slave_0: entered promiscuous mode
[ 1290.903929][T13947] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1290.916087][T13947] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.076684][T13947] bridge_slave_1: entered allmulticast mode
[ 1291.087811][T13947] bridge_slave_1: entered promiscuous mode
[ 1291.120245][T14145] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1291.140665][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1555'.
[ 1291.333725][ T8666] hsr_slave_0: left promiscuous mode
[ 1292.101147][ T8666] hsr_slave_1: left promiscuous mode
[ 1292.131190][ T8666] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1292.189490][ T8666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1292.206199][ T8666] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1292.570611][T14164] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 1293.543077][ T8666] veth1_macvtap: left promiscuous mode
[ 1293.606028][ T8666] veth0_macvtap: left promiscuous mode
[ 1293.611732][ T8666] veth1_vlan: left promiscuous mode
[ 1293.746934][   T30] audit: type=1400 audit(2000000024.150:362): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14168 comm="syz.3.1564" daddr=fe80::1b dest=16385
[ 1296.796905][ T8666] veth0_vlan: left promiscuous mode
[ 1298.499673][   T30] audit: type=1400 audit(2000000028.870:363): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14176 comm="syz.0.1566" daddr=ff01::1
[ 1298.900363][T14184] overlayfs: failed to clone upperpath
[ 1299.336770][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.975804][   T30] audit: type=1400 audit(2000000031.330:364): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14198 comm="syz.8.1571" daddr=ff01::1
[ 1302.143528][ T8666] team0 (unregistering): Port device team_slave_1 removed
[ 1302.204312][ T8666] team0 (unregistering): Port device team_slave_0 removed
[ 1302.301112][T14213] ubi31: detaching mtd0
[ 1302.467110][T14213] ubi31: mtd0 is detached
[ 1303.563622][T14221] loop6: detected capacity change from 0 to 524287999
[ 1303.575065][T14221] buffer_io_error: 4 callbacks suppressed
[ 1303.575082][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.589263][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.597566][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.605517][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.614641][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.623561][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.634094][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.647953][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.658344][T14221] ldm_validate_partition_table(): Disk read failed.
[ 1303.665021][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.673381][T14221] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1303.683069][T14221] Dev loop6: unable to read RDB block 0
[ 1303.689406][T14221]  loop6: unable to read partition table
[ 1303.695416][T14221] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 1303.824838][T13947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1303.841265][T13947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1304.021073][T13947] team0: Port device team_slave_0 added
[ 1304.092907][T13947] team0: Port device team_slave_1 added
[ 1304.119840][T14231] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1579'.
[ 1305.777479][T13947] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1305.784480][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1305.822447][T13947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1305.841833][T13947] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1305.851831][T13947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1305.943925][T13947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1306.492243][ T5966] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1306.521051][T13947] hsr_slave_0: entered promiscuous mode
[ 1306.557769][T13947] hsr_slave_1: entered promiscuous mode
[ 1306.569955][T14249] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1306.582750][T13947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1306.595660][T13947] Cannot create hsr debugfs directory
[ 1306.642434][T14249] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 1306.696411][ T5966] usb 4-1: Using ep0 maxpacket: 8
[ 1306.713725][ T5966] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1306.737638][ T5966] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10
[ 1306.749048][ T5966] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1306.795200][ T5966] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1306.901126][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'.
[ 1306.928939][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1306.939215][ T8666] IPVS: stop unused estimator thread 0...
[ 1306.949465][ T5966] usb 4-1: Product: syz
[ 1306.953679][ T5966] usb 4-1: Manufacturer: syz
[ 1306.963155][ T5966] usb 4-1: SerialNumber: syz
[ 1306.993126][ T5966] usb 4-1: config 0 descriptor??
[ 1307.007737][ T5966] cdc_ncm 4-1:0.0: CDC Union missing and no IAD found
[ 1307.026112][ T5966] cdc_ncm 4-1:0.0: bind() failure
[ 1307.201377][ T5966] usb 4-1: USB disconnect, device number 5
[ 1307.296286][T14263] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1308.276208][T14261] syz.8.1584 (14261): drop_caches: 2
[ 1308.284735][T14261] syz.8.1584 (14261): drop_caches: 2
[ 1308.986455][T14273] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1309.053315][   T30] audit: type=1400 audit(2000000039.450:365): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14276 comm="syz.1.1588" daddr=fc01:: dest=20000
[ 1310.307098][T14281] syz_tun: entered allmulticast mode
[ 1311.274573][   T30] audit: type=1400 audit(2000000041.670:366): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14288 comm="syz.1.1590" daddr=ff01::1 dest=20002
[ 1311.303493][   T30] audit: type=1400 audit(2000000041.680:367): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14283 comm="syz.8.1589" daddr=ff02::1 dest=20130
[ 1311.386435][T14294] overlayfs: missing 'lowerdir'
[ 1313.404774][T14277] syz_tun: left allmulticast mode
[ 1313.540893][   T30] audit: type=1326 audit(2000000043.940:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1313.598556][   T30] audit: type=1326 audit(2000000043.970:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1313.623900][   T30] audit: type=1326 audit(2000000043.970:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1313.666049][   T30] audit: type=1326 audit(2000000043.970:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.061398][   T30] audit: type=1326 audit(2000000043.970:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.086528][   T30] audit: type=1326 audit(2000000043.970:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.111547][   T30] audit: type=1326 audit(2000000043.970:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.139994][   T30] audit: type=1326 audit(2000000043.970:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.172642][   T30] audit: type=1326 audit(2000000043.970:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.200437][   T30] audit: type=1326 audit(2000000043.970:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.226243][   T30] audit: type=1326 audit(2000000043.970:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.251540][   T30] audit: type=1326 audit(2000000043.970:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.285345][   T30] audit: type=1326 audit(2000000043.970:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.318547][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1593'.
[ 1314.327684][   T30] audit: type=1326 audit(2000000043.970:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14296 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2016d8e9a9 code=0x7ffc0000
[ 1314.421004][T14306] netlink: 'syz.0.1594': attribute type 4 has an invalid length.
[ 1314.428964][T14306] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1594'.
[ 1315.533422][T13947] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1317.360830][T10410] Bluetooth: hci5: command 0x0406 tx timeout
[ 1317.583842][T13947] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1317.643710][T13947] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1317.703126][T13947] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1318.461597][T14342] bridge0: port 3(gretap0) entered blocking state
[ 1318.468858][T14342] bridge0: port 3(gretap0) entered disabled state
[ 1318.477007][T14342] gretap0: entered allmulticast mode
[ 1318.484363][T14342] gretap0: entered promiscuous mode
[ 1318.688424][T14344] usb usb8: usbfs: process 14344 (syz.3.1598) did not claim interface 0 before use
[ 1319.916163][T14350] new mount options do not match the existing superblock, will be ignored
[ 1319.937489][T14350] option changes via remount are deprecated (pid=14338 comm=syz.8.1601)
[ 1321.587794][T13947] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1321.869126][T13947] 8021q: adding VLAN 0 to HW filter on device team0
[ 1322.277071][   T76] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1322.284275][   T76] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1322.406005][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1322.413223][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1322.444299][T14368] xt_limit: Overflow, try lower: 65536/2147483648
[ 1323.511629][T14384] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1326.020447][T14399] 9pnet_fd: Insufficient options for proto=fd
[ 1326.039074][   T30] kauditd_printk_skb: 70 callbacks suppressed
[ 1326.039089][   T30] audit: type=1400 audit(2000000056.440:452): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14394 comm="syz.0.1613" daddr=::ffff:172.20.20.20 dest=20001
[ 1326.410759][T14402] netlink: 304 bytes leftover after parsing attributes in process `syz.8.1614'.
[ 1326.692450][T14410] netlink: 'syz.0.1616': attribute type 3 has an invalid length.
[ 1329.790361][T14429] new mount options do not match the existing superblock, will be ignored
[ 1329.813069][T14429] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[ 1330.579344][T10410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1330.601154][T10410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1330.612021][T10410] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1330.682051][T10410] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1331.089523][T10410] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1331.412178][T14432] lo speed is unknown, defaulting to 1000
[ 1331.561145][T14446] Invalid source name
[ 1331.565267][T14446] UBIFS error (pid: 14446): cannot open "./file0", error -22
[ 1331.598555][T14446] binder: 14441:14446 ioctl 40046210 0 returned -14
[ 1331.625914][T14446] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1624'.
[ 1332.188049][T14446] team0: Port device team_slave_1 removed
[ 1332.649182][T14459] netlink: 'syz.0.1626': attribute type 4 has an invalid length.
[ 1333.181935][T12281] Bluetooth: hci4: command tx timeout
[ 1333.551163][T14455] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1333.765986][T14469] ubi31: attaching mtd0
[ 1333.884910][T14469] ubi31: scanning is finished
[ 1334.486108][T14469] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1334.493719][T14469] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1334.501102][T14469] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1334.508187][T14469] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[ 1334.515671][T14469] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1334.522607][T14469] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1334.530828][T14469] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1981941989
[ 1334.541363][T14469] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1334.554775][T14473] ubi31: background thread "ubi_bgt31d" started, PID 14473
[ 1334.804847][T14477] IPv6: Can't replace route, no match found
[ 1337.451669][T12281] Bluetooth: hci4: command tx timeout
[ 1337.491260][T14481] pim6reg: entered allmulticast mode
[ 1338.238546][T14490] input: syz1 as /devices/virtual/input/input14
[ 1338.368332][T14484] Process accounting resumed
[ 1339.485862][T10410] Bluetooth: hci4: command tx timeout
[ 1340.560461][T14432] chnl_net:caif_netlink_parms(): no params data found
[ 1341.596184][T10410] Bluetooth: hci4: command tx timeout
[ 1341.895451][ T2954] bridge_slave_1: left allmulticast mode
[ 1341.916634][ T2954] bridge_slave_1: left promiscuous mode
[ 1342.880587][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.918752][ T2954] bridge_slave_0: left allmulticast mode
[ 1342.927935][ T2954] bridge_slave_0: left promiscuous mode
[ 1343.114594][ T2954] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1345.320507][T14538] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1347.586168][   T30] audit: type=1400 audit(2000000077.440:453): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14549 comm="syz.3.1648" dest=2
[ 1347.695953][ T5940] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1347.889333][ T5940] usb 9-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[ 1347.906391][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.937402][ T5940] usb 9-1: config 0 descriptor??
[ 1347.959922][ T5940] usb 9-1: Invalid firmware size=18.
[ 1348.087546][ T2954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1348.099696][ T2954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1348.110163][ T2954] bond0 (unregistering): Released all slaves
[ 1348.145896][T14554] smc: net device bond0 applied user defined pnetid SYZ2
[ 1348.234595][ T9094] usb 9-1: USB disconnect, device number 5
[ 1348.351600][T14566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1652'.
[ 1348.361049][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1652'.
[ 1348.524933][T14566] overlayfs: failed to clone upperpath
[ 1348.627204][T14570] ubi31: detaching mtd0
[ 1348.668444][T14570] ubi31: mtd0 is detached
[ 1349.185894][ T2954] hsr_slave_0: left promiscuous mode
[ 1349.207718][ T2954] hsr_slave_1: left promiscuous mode
[ 1349.230667][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1349.302456][ T2954] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1350.158460][T14586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1351.163485][T10410] Bluetooth: hci5: unexpected event for opcode 0x1001
[ 1351.421051][T14591] syz.3.1660 (14591): drop_caches: 2
[ 1351.430566][T14591] syz.3.1660 (14591): drop_caches: 2
[ 1351.491861][ T2954] team0 (unregistering): Port device team_slave_1 removed
[ 1351.612468][T14609] overlayfs: failed to clone upperpath
[ 1351.621229][ T2954] team0 (unregistering): Port device team_slave_0 removed
[ 1354.340590][T14432] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1354.351484][T14432] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1354.359602][T14432] bridge_slave_0: entered allmulticast mode
[ 1354.380992][T14432] bridge_slave_0: entered promiscuous mode
[ 1354.405627][T14432] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1354.413996][T14432] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1354.426173][T14432] bridge_slave_1: entered allmulticast mode
[ 1354.433318][T14432] bridge_slave_1: entered promiscuous mode
[ 1354.605224][T14432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1354.709181][T14432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1355.338752][T10410] Bluetooth: hci5: unexpected event for opcode 0x2027
[ 1355.397460][T14432] team0: Port device team_slave_0 added
[ 1355.492935][T14432] team0: Port device team_slave_1 added
[ 1356.480441][T14432] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1356.487570][T14432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1356.514045][T14432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1356.534842][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1671'.
[ 1356.551372][T14432] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1356.561118][T14432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1357.185601][T14432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1357.405349][T14432] hsr_slave_0: entered promiscuous mode
[ 1357.435637][T14432] hsr_slave_1: entered promiscuous mode
[ 1357.448207][T14432] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1358.153371][   T30] audit: type=1400 audit(2000000088.370:454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14650 comm="syz.1.1677" daddr=ff01::1
[ 1358.178513][T14432] Cannot create hsr debugfs directory
[ 1359.630303][   T30] audit: type=1400 audit(2000000089.840:455): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14676 comm="syz.0.1686" daddr=fc01:: dest=20000
[ 1360.786991][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.644527][T14704] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2
[ 1362.786086][ T8660] Bluetooth: hci1: Frame reassembly failed (-84)
[ 1364.685852][T10410] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1366.646429][   T30] audit: type=1400 audit(2000000093.860:456): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14710 comm="syz.3.1695" daddr=::ffff:10.1.1.1 dest=20003
[ 1367.218798][T14432] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1367.976288][T14740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1368.031163][T14432] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1368.168610][T14432] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1368.572504][T14432] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1368.828687][T14432] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1368.876760][T14432] 8021q: adding VLAN 0 to HW filter on device team0
[ 1368.894940][ T8660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1368.902176][ T8660] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1368.935342][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1368.942616][ T8660] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1369.712633][T14768] netlink: 'syz.8.1711': attribute type 3 has an invalid length.
[ 1369.733901][T14768] netlink: 'syz.8.1711': attribute type 3 has an invalid length.
[ 1369.754804][T14768] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1711'.
[ 1371.283640][T14781] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1371.293185][T14781] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 1371.835268][T14432] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1376.488462][   T30] audit: type=1400 audit(2000000106.890:457): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14834 comm="syz.1.1727" daddr=::ffff:172.20.20.67 dest=20003
[ 1376.629296][   T30] audit: type=1400 audit(2000000107.030:458): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14836 comm="syz.3.1728" daddr=fe88::4
[ 1377.150981][T14817] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[ 1377.158282][T14432] veth0_vlan: entered promiscuous mode
[ 1377.216971][T14432] veth1_vlan: entered promiscuous mode
[ 1377.269748][   T30] audit: type=1400 audit(2000000107.670:459): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14836 comm="syz.3.1728" daddr=::ffff:224.0.0.1 dest=20000
[ 1377.442823][T14432] veth0_macvtap: entered promiscuous mode
[ 1377.571848][T14432] veth1_macvtap: entered promiscuous mode
[ 1377.637731][T14432] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1377.654927][T14432] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1377.669334][T14432] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1377.691388][T14432] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1377.716110][T14432] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1377.735558][T14432] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.079968][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.089300][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1379.162097][ T8660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.174387][ T8660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1380.546867][T14878] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.233041][   T30] audit: type=1400 audit(2000000112.630:460): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14930 comm="syz.3.1761" saddr=172.30.0.4 daddr=172.20.20.170
[ 1382.585298][    T9] IPVS: starting estimator thread 0...
[ 1382.686077][T14948] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1384.707475][   T30] audit: type=1400 audit(2000000115.020:461): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14975 comm="syz.5.1778" daddr=ff01::1
[ 1385.638060][   T30] audit: type=1400 audit(2000000115.980:462): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14989 comm="syz.1.1782" daddr=ff01::1
[ 1385.980242][T15000] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1784'.
[ 1386.037145][T15000] hub 8-0:1.0: USB hub found
[ 1386.045764][T15000] hub 8-0:1.0: 1 port detected
[ 1386.135877][T15000] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1784'.
[ 1386.368109][   T30] audit: type=1400 audit(2000000116.470:463): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14993 comm="syz.8.1784" daddr=fe80::
[ 1386.398446][   T30] audit: type=1400 audit(2000000116.470:464): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=14993 comm="syz.8.1784" daddr=::ffff:172.20.20.170 dest=20002
[ 1386.405885][ T5966] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1386.686984][T14992] syz.3.1783 (14992): drop_caches: 2
[ 1386.692835][T14992] syz.3.1783 (14992): drop_caches: 2
[ 1386.742912][ T5966] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[ 1386.766151][ T5966] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1386.788112][ T5966] usb 6-1: config 0 has no interface number 0
[ 1386.805827][ T5966] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1386.839453][ T5966] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1386.894093][ T5966] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1386.934818][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.962991][ T5966] usb 6-1: Product: syz
[ 1386.968098][ T5966] usb 6-1: Manufacturer: syz
[ 1386.973928][ T5966] usb 6-1: SerialNumber: syz
[ 1386.985418][ T5966] usb 6-1: config 0 descriptor??
[ 1387.443123][   T30] audit: type=1400 audit(2000000117.830:465): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15028 comm="syz.8.1797" daddr=ff01::1
[ 1388.045331][ T5966] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1388.062565][ T5966] usb 6-1: USB disconnect, device number 3
[ 1388.408109][T15049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1800'.
[ 1388.437784][T15049] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1800'.
[ 1388.496535][   T30] audit: type=1400 audit(2000000118.830:466): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15034 comm="syz.0.1800" daddr=fe80::
[ 1388.849607][   T30] audit: type=1400 audit(2000000118.830:467): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15034 comm="syz.0.1800" daddr=::ffff:172.20.20.170 dest=20002
[ 1389.198918][T15062] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1811'.
[ 1389.222327][T15062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1389.283564][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1813'.
[ 1390.440640][T15096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1821'.
[ 1390.516870][T15096] hub 8-0:1.0: USB hub found
[ 1390.526055][T15096] hub 8-0:1.0: 1 port detected
[ 1390.620536][T15096] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1821'.
[ 1390.647568][   T30] audit: type=1400 audit(2000000120.590:468): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15087 comm="syz.0.1823" daddr=ff01::1
[ 1391.726204][   T30] audit: type=1400 audit(2000000120.960:469): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15085 comm="syz.3.1821" daddr=fe80::
[ 1391.759590][   T30] audit: type=1400 audit(2000000120.960:470): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15085 comm="syz.3.1821" daddr=::ffff:172.20.20.170 dest=20002
[ 1392.434292][T15121] syz.3.1829 (15121): drop_caches: 2
[ 1392.440237][T15121] syz.3.1829 (15121): drop_caches: 2
[ 1393.121776][   T30] audit: type=1400 audit(2000000123.520:471): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15131 comm="syz.0.1835" daddr=ff01::1
[ 1395.616072][ T5847] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[ 1395.795115][   T30] audit: type=1400 audit(2000000126.190:472): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15165 comm="syz.5.1846" daddr=fe80::aa dest=20002
[ 1396.107655][T15173] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1849'.
[ 1396.134153][ T5847] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1396.144298][ T5847] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1396.153122][ T5847] usb 9-1: can't read configurations, error -71
[ 1396.162408][T15173] netlink: zone id is out of range
[ 1396.176064][T15173] netlink: zone id is out of range
[ 1396.181226][T15173] netlink: zone id is out of range
[ 1396.193157][T15173] netlink: zone id is out of range
[ 1396.201833][T15173] netlink: zone id is out of range
[ 1396.212762][T15173] netlink: zone id is out of range
[ 1396.219920][T15173] netlink: zone id is out of range
[ 1396.225178][T15173] netlink: zone id is out of range
[ 1396.234040][T15173] netlink: zone id is out of range
[ 1396.239585][T15173] netlink: zone id is out of range
[ 1396.419792][   T30] audit: type=1400 audit(2000000126.780:473): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15181 comm="syz.5.1854" daddr=ff01::1
[ 1397.170160][   T30] audit: type=1400 audit(2000000127.360:474): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15188 comm="syz.1.1858" daddr=ff01::1
[ 1397.515844][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1859'.
[ 1398.097564][T15199] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1859'.
[ 1398.155830][   T30] audit: type=1400 audit(2000000128.490:475): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15191 comm="syz.5.1859" daddr=fe80::
[ 1398.200952][   T30] audit: type=1400 audit(2000000128.490:476): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15191 comm="syz.5.1859" daddr=::ffff:172.20.20.170 dest=20002
[ 1398.388803][   T30] audit: type=1400 audit(2000000128.790:477): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15210 comm="syz.1.1864" daddr=::ffff:127.0.0.1
[ 1398.418023][T15207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1862'.
[ 1400.002532][ T5940] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1401.355730][ T5940] usb 6-1: Using ep0 maxpacket: 16
[ 1401.373816][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1401.474418][ T5940] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1401.533600][ T5940] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1401.562369][ T5940] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.596630][ T5940] usb 6-1: config 0 descriptor??
[ 1401.664965][   T30] audit: type=1400 audit(2000000132.020:478): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15264 comm="syz.1.1884" daddr=ff01::1
[ 1401.839342][ T5940] usb 6-1: USB disconnect, device number 4
[ 1402.077643][T15282] syz.3.1888 (15282): drop_caches: 2
[ 1402.083317][T15282] syz.3.1888 (15282): drop_caches: 2
[ 1402.348004][ T9094] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1402.479775][T15309] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[ 1402.520010][ T9094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1402.547969][ T9094] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1402.582642][ T9094] usb 9-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00
[ 1402.654049][ T9094] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1403.786995][ T9094] usb 9-1: config 0 descriptor??
[ 1404.760057][ T9094] ntrig 0003:1B96:000F.0004: unknown main item tag 0x0
[ 1404.771349][ T9094] ntrig 0003:1B96:000F.0004: unknown main item tag 0x0
[ 1404.793081][ T9094] ntrig 0003:1B96:000F.0004: unknown main item tag 0x0
[ 1404.826481][ T9094] ntrig 0003:1B96:000F.0004: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.8-1/input0
[ 1405.064863][ T9094] usb 9-1: USB disconnect, device number 8
[ 1408.045803][T11501] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1408.317770][T11501] usb 9-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[ 1408.337363][T11501] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.400549][T11501] usb 9-1: config 0 descriptor??
[ 1408.535738][   T30] audit: type=1400 audit(2000000138.930:479): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15402 comm="syz.5.1925" daddr=fe80::25 dest=20000
[ 1408.755761][ T5966] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1408.826867][T11501] elecom 0003:056E:00E6.0005: unknown main item tag 0x0
[ 1408.833997][T11501] elecom 0003:056E:00E6.0005: unknown main item tag 0x0
[ 1408.841445][T12204] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1408.851013][T11501] elecom 0003:056E:00E6.0005: unknown main item tag 0x0
[ 1408.858837][T11501] elecom 0003:056E:00E6.0005: unknown main item tag 0x0
[ 1408.866501][T11501] elecom 0003:056E:00E6.0005: unknown main item tag 0x0
[ 1408.878371][T11501] elecom 0003:056E:00E6.0005: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.8-1/input0
[ 1408.915930][ T5966] usb 4-1: Using ep0 maxpacket: 32
[ 1408.923404][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1408.935870][ T5966] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 1408.945103][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.961690][ T5966] usb 4-1: config 0 descriptor??
[ 1409.018293][T12204] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1409.028356][ T5847] usb 9-1: USB disconnect, device number 9
[ 1409.032214][T12204] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1409.044403][T12204] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1409.058116][T12204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1409.069973][T12204] usb 6-1: config 0 descriptor??
[ 1409.080302][T12204] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1409.089036][T12204] dvb-usb: bulk message failed: -22 (3/0)
[ 1409.102759][T12204] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1409.112933][T12204] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1409.120679][T12204] usb 6-1: media controller created
[ 1409.128701][T12204] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1409.144748][T12204] dvb-usb: bulk message failed: -22 (6/0)
[ 1409.151786][T12204] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1409.165217][T12204] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[ 1409.184263][T12204] dvb-usb: schedule remote query interval to 150 msecs.
[ 1409.192130][T12204] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1409.284253][T12204] usb 6-1: USB disconnect, device number 5
[ 1409.313840][T12204] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1409.389409][ T5966] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 1409.396772][ T5966] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 1409.403652][ T5966] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 1409.412373][ T5966] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 1409.419239][ T5966] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0
[ 1409.431321][ T5966] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[ 1409.592259][ T5966] arvo 0003:1E7D:30D4.0006: couldn't init struct arvo_device
[ 1409.612771][ T5966] arvo 0003:1E7D:30D4.0006: couldn't install keyboard
[ 1409.826672][ T5966] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -71
[ 1410.013579][ T5966] usb 4-1: USB disconnect, device number 6
[ 1410.685409][T15418] syz.5.1930 (15418): drop_caches: 2
[ 1410.692000][T15418] syz.5.1930 (15418): drop_caches: 2
[ 1410.814401][T15428] syz.8.1931 (15428): drop_caches: 2
[ 1410.829230][T15428] syz.8.1931 (15428): drop_caches: 2
[ 1411.816030][T12204] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 1412.192959][   T30] audit: type=1400 audit(2000000142.590:480): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15444 comm="syz.1.1935" daddr=ff01::1
[ 1412.227899][T12204] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[ 1412.815780][T12204] usb 4-1: config 0 has no interface number 0
[ 1412.930162][T12204] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1412.959461][T12204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.977595][T12204] usb 4-1: Product: syz
[ 1412.981805][T12204] usb 4-1: Manufacturer: syz
[ 1412.986924][T12204] usb 4-1: SerialNumber: syz
[ 1413.022278][T12204] usb 4-1: config 0 descriptor??
[ 1413.257296][T12204] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[ 1413.287250][T12204] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[ 1413.295382][T12204] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[ 1413.327811][T12204] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[ 1413.348967][T12204] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1413.455795][ T5847] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1414.064847][ T9094] usb 4-1: USB disconnect, device number 7
[ 1414.196219][ T5847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1414.210725][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.222113][ T9094] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1414.233066][ T5847] usb 6-1: Product: syz
[ 1414.238153][ T9094] keyspan 4-1:0.133: device disconnected
[ 1414.244195][ T5847] usb 6-1: Manufacturer: syz
[ 1414.250069][ T5847] usb 6-1: SerialNumber: syz
[ 1414.266590][ T5847] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1414.340817][T11195] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1414.481346][T15494] syz.8.1952 (15494): drop_caches: 2
[ 1414.487826][T15494] syz.8.1952 (15494): drop_caches: 2
[ 1414.823659][T12204] usb 6-1: USB disconnect, device number 6
[ 1415.020690][T15512] syz.8.1958 (15512): drop_caches: 2
[ 1415.028763][T15512] syz.8.1958 (15512): drop_caches: 2
[ 1415.175739][ T9094] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1415.347746][ T9094] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1415.362295][ T9094] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[ 1415.372322][ T9094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.383841][ T9094] usb 4-1: config 0 descriptor??
[ 1415.415745][T11195] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1415.423459][T11195] ath9k_htc: Failed to initialize the device
[ 1415.447471][T12204] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1415.455873][ T5847] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1415.635933][ T5847] usb 9-1: Using ep0 maxpacket: 8
[ 1415.651025][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1415.668942][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1415.681137][ T5847] usb 9-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[ 1415.693465][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.717652][ T5847] usb 9-1: config 0 descriptor??
[ 1415.800496][ T9094] zeroplus 0003:0C12:0005.0007: report_id 0 is invalid
[ 1415.807990][ T9094] zeroplus 0003:0C12:0005.0007: item 0 0 1 8 parsing failed
[ 1415.816161][ T9094] zeroplus 0003:0C12:0005.0007: parse failed
[ 1415.822826][ T9094] zeroplus 0003:0C12:0005.0007: probe with driver zeroplus failed with error -22
[ 1416.108921][ T9094] usb 4-1: USB disconnect, device number 8
[ 1416.389762][ T5847] logitech-hidpp-device 0003:046D:C343.0008: unbalanced delimiter at end of report description
[ 1416.403961][ T5847] logitech-hidpp-device 0003:046D:C343.0008: hidpp_probe:parse failed
[ 1416.420289][ T5847] logitech-hidpp-device 0003:046D:C343.0008: probe with driver logitech-hidpp-device failed with error -22
[ 1416.573189][T11501] usb 9-1: USB disconnect, device number 10
[ 1416.585976][T12204] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1416.897622][T12204] usb 6-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30
[ 1417.042898][T12204] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1417.202472][T12204] usb 6-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1417.292446][T12204] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1417.325700][T12204] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[ 1417.355831][T12204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.383565][T12204] usb 6-1: config 0 descriptor??
[ 1417.796007][T11501] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1417.836613][T12204] pantherlord 0003:0810:0001.0009: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0
[ 1417.850162][T12204] pantherlord 0003:0810:0001.0009: no output reports found
[ 1417.857534][ T5966] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1417.950566][T11501] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1417.960148][T11501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1417.968252][T11501] usb 4-1: Product: syz
[ 1417.973536][   T30] audit: type=1400 audit(2000000148.370:481): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15554 comm="syz.0.1975" daddr=ff01::1
[ 1417.985907][T11501] usb 4-1: Manufacturer: syz
[ 1417.996656][T11501] usb 4-1: SerialNumber: syz
[ 1418.007235][T11501] usb 4-1: config 0 descriptor??
[ 1418.008923][ T5966] usb 9-1: Using ep0 maxpacket: 16
[ 1418.021756][T11501] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 009
[ 1418.025501][ T5966] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1418.045521][ T5966] usb 9-1: config 0 has no interface number 0
[ 1418.052970][ T5966] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1418.068772][ T5966] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1418.082566][ T5966] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1418.092850][T12204] usb 6-1: USB disconnect, device number 7
[ 1418.095465][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1418.114097][ T5966] usb 9-1: Product: syz
[ 1418.122143][ T5966] usb 9-1: SerialNumber: syz
[ 1418.131574][ T5966] usb 9-1: config 0 descriptor??
[ 1418.142918][ T5966] cm109 9-1:0.8: invalid payload size 0, expected 4
[ 1418.159764][ T5966] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input17
[ 1418.182220][   T30] audit: type=1400 audit(2000000148.580:482): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15557 comm="syz.1.1976" daddr=ff01::1
[ 1418.364610][    C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1418.365006][T12204] usb 9-1: USB disconnect, device number 11
[ 1418.371990][    C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1418.396110][T12204] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1418.628473][T11501] i2c i2c-1: failure reading functionality
[ 1418.642359][T11501] i2c i2c-1: connected i2c-tiny-usb device
[ 1418.650477][T11501] usb 4-1: USB disconnect, device number 9
[ 1419.545745][T12204] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1419.667781][T11195] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1419.697761][T12204] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1419.710409][T12204] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.720885][T12204] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1419.727951][T12204] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[ 1419.737443][T12204] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.749961][T12204] usb 9-1: config 0 descriptor??
[ 1419.827410][T11195] usb 6-1: Using ep0 maxpacket: 32
[ 1419.834898][T11195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1419.848805][T11195] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1419.859006][T11195] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[ 1419.869112][T11195] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1419.886689][T11501] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1419.890320][T11195] usb 6-1: config 0 descriptor??
[ 1420.052872][T11501] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1420.065745][T11501] usb 4-1: config 0 has no interface number 0
[ 1420.072020][T11501] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 1420.095032][T11501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1420.107347][T11501] usb 4-1: config 0 descriptor??
[ 1420.116972][T11501] usb 4-1: selecting invalid altsetting 1
[ 1420.124974][T11501] dvb_ttusb_budget: ttusb_init_controller: error
[ 1420.133487][T11501] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1420.188371][T12204] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0
[ 1420.206643][T12204] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0
[ 1420.218487][T12204] hid-steam 0003:28DE:1102.000A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0
[ 1420.256177][T11501] DVB: Unable to find symbol cx22700_attach()
[ 1420.296877][T12204] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected
[ 1420.308540][   T30] audit: type=1400 audit(2000000150.710:483): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15589 comm="syz.1.1989" daddr=ff01::1
[ 1420.334022][T12204] input: Steam Controller as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1102.000A/input/input18
[ 1420.362028][T11195] hid_mf 0003:0079:1801.000B: item fetching failed at offset 0/2
[ 1420.380988][T11501] DVB: Unable to find symbol tda10046_attach()
[ 1420.394271][T11195] hid_mf 0003:0079:1801.000B: HID parse failed.
[ 1420.399524][T11501] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1420.403909][T11195] hid_mf 0003:0079:1801.000B: probe with driver hid_mf failed with error -22
[ 1420.414688][T12204] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0
[ 1420.437361][T11501] usb 4-1: USB disconnect, device number 10
[ 1420.443520][T12204] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0
[ 1420.491601][T12204] hid-steam 0003:28DE:1102.000C: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.8-1/input0
[ 1420.513787][T12204] usb 9-1: USB disconnect, device number 12
[ 1420.585147][ T5940] usb 6-1: USB disconnect, device number 8
[ 1420.596817][T12204] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected
[ 1420.776845][T15605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1995'.
[ 1420.789335][T15605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1995'.
[ 1421.032922][   T30] audit: type=1400 audit(2000000151.410:484): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15610 comm="syz.8.1998" daddr=ff01::1
[ 1421.971454][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1422.041344][   T30] audit: type=1400 audit(2000000152.440:485): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15627 comm="syz.3.2004" daddr=ff01::1
[ 1422.198565][T15640] vlan0: entered promiscuous mode
[ 1422.203767][T15640] macvlan1: entered promiscuous mode
[ 1422.375788][ T5966] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1422.393943][T15646] netlink: 'syz.0.2013': attribute type 4 has an invalid length.
[ 1422.697531][ T5966] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1422.712131][ T5966] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1422.719424][ T5966] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[ 1422.731401][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.328109][ T5966] usb 4-1: config 0 descriptor??
[ 1423.481086][   T30] audit: type=1400 audit(2000000153.880:486): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15664 comm="syz.0.2020" daddr=ff01::1
[ 1423.535778][T11195] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1423.552641][   T30] audit: type=1400 audit(2000000153.950:487): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15666 comm="syz.1.2022" daddr=fe80::aa dest=20002
[ 1423.600678][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2021'.
[ 1423.686590][T11195] usb 6-1: Using ep0 maxpacket: 32
[ 1423.704927][T11195] usb 6-1: config 0 has an invalid interface number: 153 but max is 0
[ 1423.743831][T11195] usb 6-1: config 0 has no interface number 0
[ 1423.756136][T11195] usb 6-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[ 1423.785782][T11195] usb 6-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[ 1423.928822][ T5966] nti 0003:0757:0A00.000D: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0
[ 1423.945370][T11195] usb 6-1: Product: syz
[ 1423.955207][T11195] usb 6-1: Manufacturer: syz
[ 1424.098321][T11195] usb 6-1: SerialNumber: syz
[ 1424.553058][T11195] usb 6-1: config 0 descriptor??
[ 1424.558611][ T5966] usb 4-1: USB disconnect, device number 11
[ 1424.819820][T11195] sierra 6-1:0.153: Sierra USB modem converter detected
[ 1424.830052][T11195] usb 6-1: USB disconnect, device number 9
[ 1424.848117][T11195] sierra 6-1:0.153: device disconnected
[ 1425.046187][ T5966] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1425.345986][ T5966] usb 4-1: Using ep0 maxpacket: 32
[ 1425.405166][ T5966] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1425.433784][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1425.620950][ T5966] usb 4-1: config 0 descriptor??
[ 1426.040842][ T5966] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1426.222670][ T5966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1426.281956][T15689] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[ 1426.357266][ T5966] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1426.388151][ T5966] usb 4-1: media controller created
[ 1426.480811][ T5966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1426.719804][ T5966] az6027: usb out operation failed. (-71)
[ 1426.727245][ T5966] az6027: usb out operation failed. (-71)
[ 1426.733012][ T5966] stb0899_attach: Driver disabled by Kconfig
[ 1426.739617][ T5966] az6027: no front-end attached
[ 1426.739617][ T5966] 
[ 1426.749588][ T5966] az6027: usb out operation failed. (-71)
[ 1426.756547][ T5966] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1426.766578][ T5966] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[ 1426.867301][ T5940] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1426.956997][T11501] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1427.251340][ T5940] usb 9-1: Using ep0 maxpacket: 16
[ 1427.319442][ T5966] dvb-usb: schedule remote query interval to 400 msecs.
[ 1427.326574][ T5966] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1427.340741][T11501] usb 6-1: Using ep0 maxpacket: 16
[ 1427.343572][ T5966] usb 4-1: USB disconnect, device number 12
[ 1427.360274][ T5940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1427.381705][ T5940] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[ 1427.402687][T11501] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1427.422496][T11501] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1427.431807][ T5940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.445808][T11501] usb 6-1: Product: syz
[ 1427.450102][T11501] usb 6-1: Manufacturer: syz
[ 1427.464416][T11501] usb 6-1: SerialNumber: syz
[ 1427.487377][ T5940] usb 9-1: config 0 descriptor??
[ 1427.503585][T11501] usb 6-1: config 0 descriptor??
[ 1427.552978][ T5966] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1427.775686][T11501] usb 6-1: USB disconnect, device number 10
[ 1427.976399][ T5966] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1428.316205][ T5966] usb 4-1: Using ep0 maxpacket: 8
[ 1428.380991][ T5966] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1428.426602][ T5940] logitech-djreceiver 0003:046D:C513.000E: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.8-1/input0
[ 1428.446945][ T5966] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1428.453986][ T5966] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1428.483817][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.555890][ T5966] usb 4-1: config 0 descriptor??
[ 1428.628668][ T5940] usb 9-1: USB disconnect, device number 13
[ 1428.793241][   T30] audit: type=1400 audit(2000000159.190:488): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15738 comm="syz.5.2052" daddr=ff01::1
[ 1429.005181][ T5966] hid-u2fzero 0003:20A0:4287.000F: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0
[ 1429.045485][ T5966] hid-u2fzero 0003:20A0:4287.000F: NitroKey U2F LED initialised
[ 1429.066752][ T5966] hid-u2fzero 0003:20A0:4287.000F: NitroKey U2F RNG initialised
[ 1429.281519][ T5966] usb 4-1: USB disconnect, device number 13
[ 1429.502110][T15757] random: crng reseeded on system resumption
[ 1430.967982][   T30] audit: type=1400 audit(2000000161.360:489): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=15818 comm="syz.8.2081" daddr=fe80::
[ 1435.604882][   T30] audit: type=1400 audit(2000000166.000:490): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=15920 comm="syz.8.2115" dest=20004
[ 1437.808986][T15979] input: syz0 as /devices/virtual/input/input20
[ 1437.847696][T15980] syz.5.2133 (15980): drop_caches: 2
[ 1437.853363][T15980] syz.5.2133 (15980): drop_caches: 2
[ 1438.157214][T15992] dvmrp1: tun_chr_ioctl cmd 1074025677
[ 1438.178327][T15992] dvmrp1: linktype set to 776
[ 1438.825745][T11195] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1438.996134][T11195] usb 9-1: Using ep0 maxpacket: 8
[ 1439.008026][T11195] usb 9-1: config 0 has an invalid interface number: 186 but max is 0
[ 1439.028489][T11195] usb 9-1: config 0 has no interface number 0
[ 1439.035272][T11195] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1439.095833][T11195] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 1439.130247][T11195] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1439.165151][T11195] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1439.209437][T11195] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 1439.223238][T11195] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.242020][T11195] usb 9-1: Product: syz
[ 1439.398326][T11195] usb 9-1: Manufacturer: syz
[ 1439.403170][T11195] usb 9-1: SerialNumber: syz
[ 1439.501084][T11195] usb 9-1: config 0 descriptor??
[ 1439.786763][T11195] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[ 1440.011645][ T5939] usb 9-1: USB disconnect, device number 14
[ 1440.280369][T16066] 
[ 1440.282753][T16066] ======================================================
[ 1440.289779][T16066] WARNING: possible circular locking dependency detected
[ 1440.296817][T16066] 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 Not tainted
[ 1440.303947][T16066] ------------------------------------------------------
[ 1440.310973][T16066] syz.5.2169/16066 is trying to acquire lock:
[ 1440.317057][T16066] ffff88805cd4b2f0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 1440.325446][T16066] 
[ 1440.325446][T16066] but task is already holding lock:
[ 1440.332829][T16066] ffff88807cdce868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440
[ 1440.342079][T16066] 
[ 1440.342079][T16066] which lock already depends on the new lock.
[ 1440.342079][T16066] 
[ 1440.352502][T16066] 
[ 1440.352502][T16066] the existing dependency chain (in reverse order) is:
[ 1440.361520][T16066] 
[ 1440.361520][T16066] -> #3 (&pipe->mutex){+.+.}-{4:4}:
[ 1440.368912][T16066]        lock_acquire+0x120/0x360
[ 1440.373948][T16066]        __mutex_lock+0x182/0xe80
[ 1440.379065][T16066]        anon_pipe_write+0x16a/0x1360
[ 1440.384448][T16066]        __kernel_write_iter+0x3e9/0x860
[ 1440.390184][T16066]        __kernel_write+0xef/0x150
[ 1440.395351][T16066]        autofs_notify_daemon+0x748/0xe50
[ 1440.401085][T16066]        autofs_wait+0x11dc/0x1870
[ 1440.406200][T16066]        autofs_mount_wait+0x16b/0x330
[ 1440.411661][T16066]        autofs_d_automount+0x393/0x720
[ 1440.417218][T16066]        __traverse_mounts+0x305/0x5b0
[ 1440.423468][T16066]        step_into+0x534/0xf30
[ 1440.428241][T16066]        link_path_walk+0x77b/0xea0
[ 1440.433442][T16066]        path_lookupat+0x97/0x430
[ 1440.438474][T16066]        filename_lookup+0x212/0x570
[ 1440.443765][T16066]        user_path_at+0x3a/0x60
[ 1440.448650][T16066]        bpf_obj_get_user+0xa9/0x430
[ 1440.453953][T16066]        __sys_bpf+0x71e/0x860
[ 1440.458737][T16066]        __x64_sys_bpf+0x7c/0x90
[ 1440.463688][T16066]        do_syscall_64+0xfa/0x3b0
[ 1440.468735][T16066]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.475155][T16066] 
[ 1440.475155][T16066] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 1440.482922][T16066]        lock_acquire+0x120/0x360
[ 1440.487946][T16066]        __mutex_lock+0x182/0xe80
[ 1440.492970][T16066]        autofs_notify_daemon+0x735/0xe50
[ 1440.498696][T16066]        autofs_wait+0x11dc/0x1870
[ 1440.503814][T16066]        autofs_mount_wait+0x16b/0x330
[ 1440.509276][T16066]        autofs_d_automount+0x393/0x720
[ 1440.514840][T16066]        __traverse_mounts+0x305/0x5b0
[ 1440.520305][T16066]        step_into+0x534/0xf30
[ 1440.525077][T16066]        path_lookupat+0x163/0x430
[ 1440.530209][T16066]        filename_lookup+0x212/0x570
[ 1440.535509][T16066]        kern_path+0x35/0x50
[ 1440.540104][T16066]        lookup_bdev+0xc0/0x280
[ 1440.544961][T16066]        resume_store+0x169/0x460
[ 1440.549996][T16066]        kernfs_fop_write_iter+0x375/0x4f0
[ 1440.555834][T16066]        vfs_write+0x548/0xa90
[ 1440.560622][T16066]        ksys_write+0x145/0x250
[ 1440.565494][T16066]        do_syscall_64+0xfa/0x3b0
[ 1440.570528][T16066]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.576961][T16066] 
[ 1440.576961][T16066] -> #1 (&of->mutex){+.+.}-{4:4}:
[ 1440.584191][T16066]        lock_acquire+0x120/0x360
[ 1440.589224][T16066]        __mutex_lock+0x182/0xe80
[ 1440.594258][T16066]        kernfs_seq_start+0x55/0x3c0
[ 1440.599561][T16066]        seq_read_iter+0x3f2/0xe10
[ 1440.604697][T16066]        vfs_read+0x4cd/0x980
[ 1440.609402][T16066]        ksys_read+0x145/0x250
[ 1440.614197][T16066]        do_syscall_64+0xfa/0x3b0
[ 1440.619235][T16066]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.625669][T16066] 
[ 1440.625669][T16066] -> #0 (&p->lock){+.+.}-{4:4}:
[ 1440.632752][T16066]        validate_chain+0xb9b/0x2140
[ 1440.638150][T16066]        __lock_acquire+0xab9/0xd20
[ 1440.643354][T16066]        lock_acquire+0x120/0x360
[ 1440.648382][T16066]        __mutex_lock+0x182/0xe80
[ 1440.653412][T16066]        seq_read_iter+0xb7/0xe10
[ 1440.658446][T16066]        proc_reg_read_iter+0x1b7/0x280
[ 1440.664021][T16066]        copy_splice_read+0x552/0x9b0
[ 1440.669401][T16066]        splice_file_to_pipe+0x270/0x440
[ 1440.675041][T16066]        do_sendfile+0x475/0x7e0
[ 1440.680005][T16066]        __se_sys_sendfile64+0x13e/0x190
[ 1440.685669][T16066]        do_syscall_64+0xfa/0x3b0
[ 1440.690710][T16066]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.697135][T16066] 
[ 1440.697135][T16066] other info that might help us debug this:
[ 1440.697135][T16066] 
[ 1440.707374][T16066] Chain exists of:
[ 1440.707374][T16066]   &p->lock --> &sbi->pipe_mutex --> &pipe->mutex
[ 1440.707374][T16066] 
[ 1440.719655][T16066]  Possible unsafe locking scenario:
[ 1440.719655][T16066] 
[ 1440.727118][T16066]        CPU0                    CPU1
[ 1440.732496][T16066]        ----                    ----
[ 1440.737869][T16066]   lock(&pipe->mutex);
[ 1440.742048][T16066]                                lock(&sbi->pipe_mutex);
[ 1440.749083][T16066]                                lock(&pipe->mutex);
[ 1440.755772][T16066]   lock(&p->lock);
[ 1440.759596][T16066] 
[ 1440.759596][T16066]  *** DEADLOCK ***
[ 1440.759596][T16066] 
[ 1440.767746][T16066] 1 lock held by syz.5.2169/16066:
[ 1440.772860][T16066]  #0: ffff88807cdce868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440
[ 1440.782546][T16066] 
[ 1440.782546][T16066] stack backtrace:
[ 1440.788442][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.5.2169 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) 
[ 1440.788463][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1440.788475][T16066] Call Trace:
[ 1440.788482][T16066]  <TASK>
[ 1440.788491][T16066]  dump_stack_lvl+0x189/0x250
[ 1440.788512][T16066]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1440.788529][T16066]  ? __pfx__printk+0x10/0x10
[ 1440.788551][T16066]  ? print_lock_name+0xde/0x100
[ 1440.788572][T16066]  print_circular_bug+0x2ee/0x310
[ 1440.788593][T16066]  check_noncircular+0x134/0x160
[ 1440.788616][T16066]  validate_chain+0xb9b/0x2140
[ 1440.788635][T16066]  ? __page_table_check_zero+0x406/0x530
[ 1440.788652][T16066]  ? __page_table_check_zero+0xba/0x530
[ 1440.788669][T16066]  ? look_up_lock_class+0x74/0x170
[ 1440.788687][T16066]  ? register_lock_class+0x51/0x320
[ 1440.788713][T16066]  __lock_acquire+0xab9/0xd20
[ 1440.788730][T16066]  ? seq_read_iter+0xb7/0xe10
[ 1440.788752][T16066]  lock_acquire+0x120/0x360
[ 1440.788765][T16066]  ? seq_read_iter+0xb7/0xe10
[ 1440.788794][T16066]  __mutex_lock+0x182/0xe80
[ 1440.788810][T16066]  ? seq_read_iter+0xb7/0xe10
[ 1440.788837][T16066]  ? __pfx_get_page_from_freelist+0x10/0x10
[ 1440.788857][T16066]  ? seq_read_iter+0xb7/0xe10
[ 1440.788880][T16066]  ? __pfx___mutex_lock+0x10/0x10
[ 1440.788899][T16066]  ? __alloc_frozen_pages_noprof+0x1d6/0x370
[ 1440.788927][T16066]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1440.788950][T16066]  seq_read_iter+0xb7/0xe10
[ 1440.788975][T16066]  ? set_page_refcounted+0x76/0x160
[ 1440.788993][T16066]  ? alloc_pages_bulk_noprof+0x570/0x710
[ 1440.789016][T16066]  proc_reg_read_iter+0x1b7/0x280
[ 1440.789039][T16066]  copy_splice_read+0x552/0x9b0
[ 1440.789058][T16066]  ? splice_file_to_pipe+0x2e/0x440
[ 1440.789074][T16066]  ? __pfx_copy_splice_read+0x10/0x10
[ 1440.789097][T16066]  ? __pfx_copy_splice_read+0x10/0x10
[ 1440.789112][T16066]  splice_file_to_pipe+0x270/0x440
[ 1440.789131][T16066]  do_sendfile+0x475/0x7e0
[ 1440.789150][T16066]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1440.789168][T16066]  ? __pfx_do_sendfile+0x10/0x10
[ 1440.789189][T16066]  ? __se_sys_futex+0x36f/0x400
[ 1440.789212][T16066]  __se_sys_sendfile64+0x13e/0x190
[ 1440.789230][T16066]  ? __pfx___se_sys_futex+0x10/0x10
[ 1440.789250][T16066]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1440.789270][T16066]  ? do_syscall_64+0xbe/0x3b0
[ 1440.789288][T16066]  do_syscall_64+0xfa/0x3b0
[ 1440.789304][T16066]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1440.789319][T16066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.789334][T16066]  ? clear_bhb_loop+0x60/0xb0
[ 1440.789351][T16066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.789367][T16066] RIP: 0033:0x7fb55b78e9a9
[ 1440.789382][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1440.789395][T16066] RSP: 002b:00007fb55b5f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1440.789412][T16066] RAX: ffffffffffffffda RBX: 00007fb55b9b5fa0 RCX: 00007fb55b78e9a9
[ 1440.789423][T16066] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001
[ 1440.789433][T16066] RBP: 00007fb55b810ca1 R08: 0000000000000000 R09: 0000000000000000
[ 1440.789443][T16066] R10: 4000000000010042 R11: 0000000000000246 R12: 0000000000000000
[ 1440.789454][T16066] R13: 0000000000000000 R14: 00007fb55b9b5fa0 R15: 00007fffdd9a1758
[ 1440.789472][T16066]  </TASK>