last executing test programs:

6m8.590794207s ago: executing program 4 (id=149):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xdb, &(0x7f0000000000), &(0x7f0000000040)=0x4)

6m8.370356136s ago: executing program 4 (id=153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x8000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0)
sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @mcast2, 0x0, 0x4}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r2, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$unix(r5, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
socket$packet(0x11, 0xa, 0x300)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c000180"], 0x24}}, 0x0)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000040)="0d000000010001", 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

6m7.623094734s ago: executing program 4 (id=158):
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x5a8}}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=ANY=[], 0xe00f, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000"], 0x48)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRESHEX], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='sys_exit\x00', r1}, 0x18)
faccessat(0xffffffffffffffff, 0x0, 0x70)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
socket$alg(0x26, 0x5, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

6m6.456505673s ago: executing program 4 (id=169):
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[], 0x0)
r0 = socket(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x18, 0x21}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0)

6m5.832590517s ago: executing program 4 (id=175):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@i_version}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ")
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000240)={[{@nls={'nls', 0x3d, 'cp857'}}, {@nobarrier}, {@type={'type', 0x3d, "a02593f0"}}, {@force}, {@force}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x4, 0x6bf, &(0x7f0000003480)="$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")
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$netlink(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)

6m5.122745209s ago: executing program 4 (id=180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x5, 0x5, 0x3, 0x400}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8000)

6m4.594485057s ago: executing program 32 (id=180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x2, {0x5, 0x5, 0x3, 0x400}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8000)

6m0.723726322s ago: executing program 3 (id=207):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c000000100001002d8a5a32ec00000000000000", @ANYRES32=0x0, @ANYBLOB="02210000c80f0600140003006e657464657673696d3000000000000068001680640001800c00040009000000fef5ffff1000020000000000830f0000faffffff100006004000000005000000080000002800010005000000aaaaaaaaaabb00000000000000000000000000000000000000000000000000000c"], 0x9c}}, 0x0)

6m0.262655825s ago: executing program 3 (id=211):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
clock_adjtime(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000100)='./mnt\x00', 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r5, 0x0, 0x0, 0x240080e4)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

5m57.458723246s ago: executing program 3 (id=231):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0xe, 0x4)

5m56.933822089s ago: executing program 3 (id=232):
syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[], 0x0)
r0 = socket(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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")
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x18, 0x21}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)

5m56.358351862s ago: executing program 3 (id=234):
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a216825ca211ee375c1efbb6566f63f067fbc45ff810540010000000058000b480400945f64009400050038", 0x3c}], 0x1)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000301010400000000000000000a0000044c00028006000340000000001400018008"], 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

5m54.92504601s ago: executing program 3 (id=242):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0)

5m54.458224206s ago: executing program 33 (id=242):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
pwritev2(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0)

5m45.045392066s ago: executing program 5 (id=288):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

5m44.799366836s ago: executing program 5 (id=290):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000b98600850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x21}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0)

5m43.309826829s ago: executing program 5 (id=297):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008000380040005"], 0x44}}, 0x0)

5m42.955574826s ago: executing program 5 (id=300):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

5m42.6492745s ago: executing program 5 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)

5m40.042818575s ago: executing program 5 (id=319):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

5m24.040770996s ago: executing program 34 (id=319):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

1m32.193100615s ago: executing program 6 (id=2255):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8", 0x0, 0x147, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m31.942882908s ago: executing program 6 (id=2257):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0042"], 0xb8}}, 0x0)

1m30.705966796s ago: executing program 6 (id=2262):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0xff, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000"], 0x48)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000800000000000009040000000000000000000001050000000800000000000000000000030000000002000000020000000000000000009c9f28871c20512c3880ca6aa9f66641b0be3536fe72a967ccb63ba3c1ece94047653e18b9a51194b062be556dedd7b7280fbd5c2c44466051b178b4195af98498a5779f9cd6f5ab35938fca973c505dddcd47190bbc3d407f281b"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x63b2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)

1m29.353705486s ago: executing program 6 (id=2269):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e0c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1m29.055500178s ago: executing program 6 (id=2273):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)='_', 0x1}], 0x1}}], 0x1, 0x24008094)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m27.240119059s ago: executing program 6 (id=2278):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)="893c5b0838450972c229f07a09d843c95d64e91c934fe0a0405a60dbfba0de195178f553d0a57c08cfab65380f629a0b8bab65ab8dda504421437120dd3d28d015c08125c5b1e7457ee7bbdfa9aa93ba706d69b458fe1364280a44e2ef68253397c9cd25acff90d2206d8ceabcb5208be3", &(0x7f0000000900)="ed585f4246840a329517313f5b426669011bcd07d28892f77d46e32445", 0x2, r3}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1m11.983852923s ago: executing program 35 (id=2278):
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000ac0)="893c5b0838450972c229f07a09d843c95d64e91c934fe0a0405a60dbfba0de195178f553d0a57c08cfab65380f629a0b8bab65ab8dda504421437120dd3d28d015c08125c5b1e7457ee7bbdfa9aa93ba706d69b458fe1364280a44e2ef68253397c9cd25acff90d2206d8ceabcb5208be3", &(0x7f0000000900)="ed585f4246840a329517313f5b426669011bcd07d28892f77d46e32445", 0x2, r3}, 0x38)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

21.562800511s ago: executing program 0 (id=2640):
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000500"/45], 0x78)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

18.492245739s ago: executing program 2 (id=2646):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000ac0)={{0x1, 0x1, 0x80000000, 0x7fffffff, 0x1d, 0x6}, 0x30f, [0x8, 0x7, 0x3, 0xc95, 0x7866, 0x7, 0x3ff, 0x6, 0x7f, 0x7fff, 0x6067c5ea, 0x3, 0x7ff, 0x2, 0x4a, 0x6, 0x3, 0x59f9, 0x6, 0x5cfe05bb, 0xd, 0xb28, 0xb, 0x10001, 0x18c4, 0x382, 0x80000000, 0x46, 0x80000000, 0x1, 0x10, 0x5, 0x0, 0x6, 0x0, 0x10001, 0x608, 0x5, 0x617, 0x43, 0xd460, 0x4, 0x6, 0x9cc, 0x1, 0x8, 0x9, 0x9, 0xbe39, 0x1, 0x7, 0x0, 0x9, 0x1, 0xfffffffd, 0xfffffffd, 0xa, 0x8, 0x0, 0x800, 0x4, 0x4, 0x7, 0x0, 0x7f, 0x1, 0x9, 0x2, 0xe7, 0x75d, 0xbda, 0x652b17a3, 0x3, 0x7, 0x3000000, 0x7, 0x9, 0x3, 0x9, 0xffffc259, 0x80, 0x0, 0xb, 0x1, 0x3, 0x9, 0x4, 0x9, 0x2, 0xe216, 0xff, 0x0, 0x80, 0x618b7166, 0x3, 0x10001, 0x2, 0x80000000, 0x7, 0x80000000, 0x8, 0x8, 0x2, 0x2, 0x7, 0x4, 0xfffffff8, 0x5, 0x1000, 0x3cc2, 0x5, 0x2, 0x75d9, 0x72c1, 0x9, 0x5, 0x656, 0x5, 0x7, 0xc0000000, 0x3f5b, 0x8, 0x4, 0x7, 0x1, 0x8aa, 0x7f, 0x0, 0x0, 0x5, 0x40b16250, 0xc9a, 0xffff, 0xd7e30000, 0xff, 0x9, 0x2, 0x0, 0x1, 0x400, 0x4, 0x0, 0x10001, 0xd869, 0x5, 0x1, 0x3, 0x6, 0xa, 0x5, 0x2, 0x1ff, 0x1, 0x8, 0x2, 0x1, 0xb69, 0x10001, 0x5, 0x5, 0x2, 0x0, 0x32, 0x80, 0x100, 0xf15, 0x9, 0x4, 0x8000, 0x0, 0x1, 0x8, 0x8, 0xfffeffff, 0x5, 0x3, 0xfffffff8, 0x40, 0x4, 0x1ee, 0xa55b, 0x9, 0x5, 0x70, 0x4, 0x7, 0x0, 0x80000000, 0x3b59, 0x4, 0x4, 0x0, 0x2, 0x1, 0x8001, 0x9, 0x7fff, 0xfffffffa, 0x10001, 0x3ff, 0xec, 0x7, 0x45, 0x18, 0x7, 0x400, 0x8865, 0x9, 0x9, 0xc0, 0x7f, 0x1df5fd2a, 0x3, 0x558d, 0x9, 0x1, 0x3, 0x7, 0x3, 0x4e600, 0x1, 0x1, 0x2, 0x0, 0x7664, 0x5, 0x1, 0x1ff, 0x6, 0xe1, 0x6, 0x7, 0x9, 0x7, 0x10, 0x3, 0x52, 0x5, 0x5, 0x2, 0xe901, 0x8, 0xa, 0xfffffffe, 0x5, 0x20000, 0x2, 0x0, 0x2, 0x41fd, 0x9, 0x7f, 0x2, 0x80000001, 0x7f, 0x34d, 0x10, 0x8, 0x5, 0x7, 0x18000, 0x3, 0x6, 0x200000, 0x76, 0x1, 0xa, 0x4, 0xfffff2f4, 0x1, 0x5, 0x0, 0x7, 0x9, 0x9, 0x29e, 0x8, 0x0, 0x9, 0xf2, 0xb1, 0x800, 0xc87d, 0x1ff, 0x9c8, 0x8, 0x9, 0x800, 0x1, 0x1, 0xc, 0x5, 0x80000000, 0x1, 0x6, 0x5, 0x2, 0x3, 0x76a, 0x0, 0x2, 0x7, 0x7fc000, 0x0, 0x230, 0x1, 0x2, 0x6, 0x6, 0xffffff00, 0x114, 0x2, 0x8, 0x7, 0x6, 0x4, 0x20000001, 0x9, 0xfff, 0xfd89, 0x9, 0xd, 0x0, 0x0, 0x8, 0x311, 0x9, 0x10001, 0xc6, 0x80, 0x6, 0x6, 0x81, 0x8000, 0xfa9, 0x3, 0x8995, 0x5, 0x1, 0x401, 0x7fffffff, 0x1, 0xffffffff, 0x3, 0x4, 0x6, 0x400, 0x3f8e221f, 0x3ff, 0x9838, 0x7fffffff, 0xba, 0xfffffffc, 0x80000001, 0x3, 0x0, 0x6, 0x3fed, 0x400, 0x9, 0xd7, 0x0, 0x6, 0x0, 0x8, 0x1cb0, 0x40, 0x4, 0x3, 0x8, 0x5, 0x4ff, 0x5, 0xffff, 0x8, 0x4, 0xf, 0x4, 0x7f, 0xfe, 0x401, 0x100, 0x5c, 0x5, 0x4, 0x8, 0x8, 0x0, 0x2, 0x9, 0x6, 0xffffffff, 0x0, 0x4, 0x5, 0x3, 0xa, 0x0, 0x1, 0x6, 0x4, 0x4, 0x1, 0x1, 0xa, 0x100, 0x9, 0x4, 0x0, 0x6, 0x1, 0x49, 0x6, 0x8, 0xfffffffb, 0xa, 0x81, 0x7fffffff, 0x7fffffff, 0x6a2, 0x1, 0xfffffffd, 0x8000, 0xc24d, 0x8fad, 0x4, 0x0, 0x1, 0xfffffffa, 0x0, 0x7f, 0x8001, 0x3ff, 0xa, 0x31c3021b, 0x1ff, 0x80, 0x3, 0x1000, 0x72, 0x200, 0x2, 0x6, 0x6, 0x9, 0x1, 0x9, 0x1, 0xfffffffc, 0x6, 0x7, 0x87, 0x5, 0x2, 0x7, 0x2, 0x8, 0x2, 0x6, 0xfffffff9, 0x800, 0x5, 0x1, 0x10001, 0x1, 0x81, 0x5, 0x1020000, 0xa, 0x8, 0xfffffffd, 0x1973, 0x16, 0x1, 0xb30b, 0x9, 0x5, 0x9, 0x9a, 0x5, 0xfffffffb, 0x9, 0x1, 0x800, 0x4, 0xdc, 0x7, 0x4, 0x8, 0x5, 0x7, 0xc6, 0x54a1, 0x39, 0x3ff, 0x0, 0x9, 0x100, 0xe, 0x7a, 0x6, 0x68, 0x800004, 0xfffffffb, 0x4, 0x0, 0x9, 0xe, 0x9, 0xfffffffa, 0x8, 0xdd0, 0x4, 0x80d, 0x9, 0x88c5, 0x0, 0x1, 0x698, 0x9, 0x6, 0x6, 0x10001, 0x4, 0x5c4, 0x2000, 0x3, 0x5a, 0xfffffffb, 0xa, 0x3, 0x2e39, 0x81, 0x5, 0x5478, 0x9, 0x7, 0x7, 0x9, 0x7fff, 0x9, 0xb0, 0x1, 0x15a, 0x4, 0x0, 0x7f, 0x400005, 0x0, 0xa, 0x3, 0x384c, 0x7ff, 0x5, 0x1, 0x1, 0x8a, 0x5, 0x0, 0x10000, 0xade6, 0x80000000, 0x57eb, 0x7, 0x4, 0x2, 0x8, 0x8, 0x65, 0xbbd7, 0x60000, 0xfff, 0x1, 0x1768, 0x800, 0x1, 0x6, 0x94, 0xf70, 0x8, 0xe, 0x123, 0x8000, 0x3, 0x81, 0x7fffffff, 0x6, 0xd48, 0x2, 0xe2b, 0x0, 0x1f4, 0x2, 0x96e, 0x66a, 0x9, 0xba6, 0x401, 0x7, 0x6, 0x1, 0x4, 0x3, 0xac, 0x3, 0xfffffffa, 0x1, 0x1, 0x3, 0x7, 0x0, 0x10001, 0xfffffbff, 0x9, 0xf71400, 0x5, 0x5, 0x8, 0x7, 0x80000000, 0x0, 0x8, 0x5, 0x2, 0x4, 0x1, 0x7, 0xfffffffa, 0xaee1, 0x401, 0x7fff, 0x400, 0x8000, 0x5, 0x101, 0x9, 0xf, 0x0, 0xfffffffc, 0xf, 0x4, 0x88, 0x2, 0x2, 0x10000, 0x5, 0x7b, 0x5, 0x7, 0x810, 0x8000, 0x0, 0x280, 0x4, 0x80000001, 0x8, 0x2, 0x2, 0x0, 0x8, 0x2, 0x400, 0x2000000, 0x2, 0x0, 0x2, 0x4, 0x4, 0xf3e, 0x1, 0x2, 0x1, 0xb, 0x2e4, 0x9, 0x0, 0x3c09, 0xfffffff7, 0x5, 0x9, 0x9, 0xb7, 0x8, 0x5, 0x4, 0x9, 0x1, 0x40000, 0x7, 0x1ff, 0xd73c, 0x7, 0x7, 0x5, 0x400, 0x3, 0x9, 0x3, 0xffffffff, 0x8, 0x0, 0xffff, 0x3, 0x4, 0xa706, 0x9, 0x180, 0x1, 0xed9, 0x8, 0xfffff800, 0x1, 0xd, 0xcbda, 0x1, 0x3459, 0x3, 0x1, 0x4, 0xd, 0x5, 0xffff, 0x4833d6d8, 0xe, 0x8, 0x6, 0x0, 0xf00, 0xfffffe00, 0x7, 0xa, 0x5e, 0x7fff, 0x1c00000, 0x3a23, 0x8, 0x1, 0x47, 0x8, 0x9, 0x7, 0x3, 0x9, 0x0, 0x5d1, 0x4c9, 0xfffff020, 0x0, 0x1, 0x6, 0x4, 0xffff, 0x5, 0x85c, 0x52e, 0x10000, 0x0, 0x7, 0xd053, 0x80000001, 0xffffd70e, 0x100, 0x6, 0xe, 0x8, 0x7f, 0x80, 0x3, 0x6, 0x0, 0x8, 0x1010, 0x9, 0xfffffff7, 0x1000, 0x0, 0x8, 0x1a0772ed, 0x96d, 0x1, 0x8, 0x5, 0x7, 0x8001, 0x7fff, 0x8, 0x5, 0x9, 0xb, 0x9, 0x4, 0x80000000, 0x2, 0x8, 0x6, 0x8, 0xf0, 0x4, 0x6, 0x1000, 0x1, 0x2, 0x8, 0x3ff, 0x8, 0x3, 0x7d, 0x2, 0x1, 0x8, 0x39d1, 0x9, 0x6, 0xa78, 0x216, 0x9, 0x7, 0x6, 0xff, 0xc, 0xd, 0x7, 0xffff, 0x2, 0x5, 0x5, 0x6, 0x7fffffff, 0x1, 0x0, 0x8, 0x100, 0x2, 0xd, 0x1, 0xe, 0x9, 0x3, 0x9, 0x2, 0x0, 0x6, 0x5, 0x2, 0x8001, 0x100, 0x9, 0x2, 0x8001, 0x7, 0x2, 0x2, 0x3, 0x1000, 0x4, 0x4, 0x80c, 0x7, 0x84, 0x8, 0x10000, 0xe9e2, 0x7, 0x5, 0xe, 0xc, 0x5, 0x8, 0x1, 0x9, 0x5, 0x0, 0x5, 0x2, 0x4, 0x8001, 0x400, 0xffffffff, 0x401, 0x7e8b6cfb, 0x0, 0xf, 0x3, 0x5, 0xffffffff, 0xf6, 0x0, 0x1ff, 0xfffffff9, 0x4, 0x3, 0x1000, 0xa79, 0xd, 0x4, 0x93, 0xff, 0x6, 0x0, 0x5, 0x8, 0x9, 0x8, 0x4, 0x7ff, 0x80000000, 0x4, 0x1, 0x7, 0x140f, 0xffff, 0x4, 0x2, 0x8, 0xfffffffb, 0x9, 0x728, 0x100, 0x8, 0x5, 0x7, 0xc, 0x8, 0x7, 0x3, 0x8, 0x1, 0x9, 0x0, 0x7, 0x6, 0x0, 0x3, 0x0, 0x9, 0xb32, 0x7, 0x7, 0xd22a, 0x6, 0x0, 0x6, 0xc348, 0xe, 0x9, 0x4, 0x9, 0x8, 0xa0, 0xfffffffd, 0x4, 0x7, 0x85c3, 0xd00f, 0x3, 0xc47b, 0xfd0f, 0xffff, 0x5, 0x3, 0xffff215d, 0x100, 0x8c, 0x2, 0x8001, 0x801, 0xe7d, 0x8, 0x0, 0xa64, 0x8, 0xfffffffb, 0x2, 0x7, 0x430, 0x3, 0x4, 0x2, 0xfffffff6, 0x6, 0x3, 0x10000, 0x497a0fa8, 0x4, 0xe0b, 0x800, 0x2, 0xc7b, 0x2, 0x6d6b, 0xdd02, 0xe0, 0x4, 0xffffffff, 0x0, 0x1, 0x8, 0xfffffffb, 0x200, 0x7ffd, 0x9, 0x6, 0x400, 0x24fd, 0x80, 0x400, 0x2, 0x81, 0xbc, 0x80000000, 0x6, 0xfffffc01, 0xf, 0x9, 0x7, 0x7fff, 0x7, 0x9, 0x7f4, 0x10000, 0x9, 0x9, 0x9, 0x1]})

14.958659515s ago: executing program 2 (id=2661):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @private=0xa010101}, {0x6, @random="9f44441d4302"}, 0xffffff5d, {0x2, 0x4e23, @empty}})
write(0xffffffffffffffff, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24)

12.292032299s ago: executing program 8 (id=2664):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000280)="a2f188fc", 0x4, r0)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, 0x0)

12.233774248s ago: executing program 2 (id=2665):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000140)=ANY=[], 0x8)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000000c0)=0xc4, 0x4)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x76, &(0x7f0000000300)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x50, 0x0, @opaque="d83f3f2540d86d9700e4d9e352b2e4ca103f60f21e9ff1ddcafdb8f6a73362ac21b66b3dc0d8aebdc2537cbde3dce51f0b345d57d123506ffa69e50e480756098210de7f00052d44"}}}}}, 0x0)
recvmmsg(r5, &(0x7f0000003100), 0x35, 0x2, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(0x0, 0x14d0be, 0x48)
syz_emit_ethernet(0x3b, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x65, 0x0, 0x0, 0x88, 0x0, @rand_addr, @broadcast}, {0x0, 0x0, 0x19, 0x0, @opaque="8a6aff8a02653209000000000000009f40"}}}}}, 0x0)

11.751032556s ago: executing program 8 (id=2668):
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x992c1000)
socket$inet_dccp(0x2, 0x6, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0xa, 0x801, 0x84)
epoll_create1(0x0)
socket(0x1, 0x80802, 0x0)
epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0xba01}, 0x0)

10.811072844s ago: executing program 2 (id=2670):
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0})

10.650700021s ago: executing program 0 (id=2671):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r0, 0x0, 0x0)

10.048852185s ago: executing program 2 (id=2673):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x9}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xff, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0xb, @private0, 0x6}, @in6={0xa, 0x4e23, 0x8, @remote, 0x1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x3}], 0x80)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0xf79ee000)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008020"], 0x26}, 0x1, 0x0, 0x0, 0xa1}, 0x0)
unshare(0x68060200)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
accept4(r4, &(0x7f0000000380)=@tipc, &(0x7f0000000240)=0x80, 0x800)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000d4cd6ec7aa9020cdd4a3a2e7822b3db56e44cbcd426cf3df0941ad9f97a41c3a83e847811c286ad27ebac85319fbc8f43c96ba733259bd9f4383e0bcd80f0cf6d35a571c45f92d818a940f64b19bbb10bdb1908a26fa68588212f6a88ca21bdd09ebf5228fce10d9e10f760c5f1f12449afa79dd43f8660000000000000006ed6819f7d491f0c523deafd39fd5e9bf3c38bd00"/218], 0x48)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x4)

9.954439705s ago: executing program 0 (id=2674):
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x2, &(0x7f000092e000/0x2000)=nil)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1}, &(0x7f0000000700), &(0x7f0000000740)='%+9llu \x00'}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x70000, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

8.543731571s ago: executing program 0 (id=2676):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0xb0c, 0xfffffffd, 0x1, 0x1000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x7, 0x23}, 0x90)

7.731146175s ago: executing program 8 (id=2679):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@p={0x18, 0x0}, {0x3, 0x0}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x8}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0xffffffffffffffff)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$nl_generic(0x10, 0x3, 0x10)

6.613169682s ago: executing program 7 (id=2683):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="010000007bd184f09fa1df22eeafef600a5950586cd5a04d325f146baf49016bdd527ece5383f05f030adbce4382792eb47fce1483b4900fa0bb8f5503cc44e12b8cab64a3f355"])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
preadv(r4, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x1000000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00'}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x68)

6.435408609s ago: executing program 0 (id=2684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c29e670", @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
brk(0x400000ffc020)
syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200090507000000000000092401"], 0x0)

6.434599531s ago: executing program 8 (id=2685):
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0})

6.225975355s ago: executing program 7 (id=2687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

5.417309576s ago: executing program 9 (id=2688):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
setrlimit(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbef3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

5.334835768s ago: executing program 8 (id=2689):
r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340), &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1)

4.256660165s ago: executing program 0 (id=2690):
socket(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)='4', 0x1})
io_uring_enter(r3, 0x7f5f, 0x0, 0x0, 0x0, 0x0)
shutdown(r6, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)

3.998398073s ago: executing program 8 (id=2692):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0)

2.874802048s ago: executing program 9 (id=2693):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000004c0)="243c42e8680d85ffff03762f88a8", 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.849204332s ago: executing program 1 (id=2694):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800e7ff00000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

2.718268654s ago: executing program 1 (id=2695):
syz_io_uring_setup(0x243, &(0x7f0000000300)={0x0, 0xabb3, 0x80, 0x3, 0x130}, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x80)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000262000/0x1000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68)

2.606556014s ago: executing program 9 (id=2696):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5], 0x84}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0)

2.279070305s ago: executing program 1 (id=2697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000006640)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f00000002c0)=""/255, 0xff}], 0x3}, 0x7fffffff}], 0x1, 0x0, 0x0)

1.960486837s ago: executing program 7 (id=2698):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
write$6lowpan_enable(r0, &(0x7f00000000c0)='0', 0x1)
r5 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc})
r6 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1)
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20)
read$eventfd(r6, &(0x7f0000000040), 0x8)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)
ioperm(0x9fda, 0x85, 0x6)
lstat(0x0, 0x0)

1.854688954s ago: executing program 1 (id=2699):
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$int_in(r0, 0x5421, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0xffff, @private0, 0x7}], 0x1c)

645.974613ms ago: executing program 7 (id=2700):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}}, 0x0, 0x0, 0x28, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x101, @empty, 0x3}}, 0x0, 0x0, 0x25, 0x0, "c5f65240804cf699aebcd14ba5a53d274103cfff74bc62226e61d5e8759e25f07b8ea81651741f7db8fa549850f596eab9bb56272b4cbddcdb736a5b18b0aa0b6583d6d8f2b6d14af3d91f65e0d68166"}, 0xd8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
listen(r3, 0x71e4)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

639.123403ms ago: executing program 1 (id=2701):
ptrace(0x10, 0x0)
ptrace$setregs(0xd, 0x0, 0x2, &(0x7f00000003c0))
ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={0x0})

498.070919ms ago: executing program 9 (id=2702):
socket$nl_route(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)

302.407874ms ago: executing program 1 (id=2703):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes128, 0x241fc7b68b43ab99, '\x00', @auto="410d8af0ff000008de00"})
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000340)='./bus\x00', r4, 0x0)
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r4, &(0x7f0000000180))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
unlink(0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', <r7=>0x0, 0x3c20, 0x8049, 0x1, 0x91, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@ra={0x94, 0x4}]}}}}})
bind(r0, &(0x7f0000000400)=@xdp={0x2c, 0x9, r7, 0x1e}, 0x80)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a300000000008000340"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xe}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0)

301.554079ms ago: executing program 7 (id=2704):
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_dccp(0x2, 0x6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
accept4(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x0, 0x80000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'})
listen(r3, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18200000000000000000000000000000b7080000000000007baa00fe00000000b5080000000000007b8af0ff00000000bfa100000000000004010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0xa, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

162.803662ms ago: executing program 9 (id=2705):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000089120e000000000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94)

131.917899ms ago: executing program 2 (id=2706):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
setrlimit(0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbef3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f8, 0x0, 0xffffff80, 0x178, 0x3c0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3c0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000), 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

48.149139ms ago: executing program 7 (id=2707):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x3, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x8, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x20ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x4, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
clock_settime(0x0, &(0x7f00000002c0)={0x77359400})
r6 = socket(0x1e, 0x1, 0x0)
shutdown(r6, 0x2)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000000007afc064cd04d00000000000000bb3ddcb2cfb64e67b657b276e0b54c9318b6b2ca537e4ac8d4c702c4d7ff68f88ade29cc6440e3f47d550d"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b509000000003fa87baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r7, @ANYBLOB="0000000069a6baf0cd4e3a5600000000b7050000080000004600f0ff76000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280))
io_uring_enter(r10, 0x3516, 0x0, 0x0, 0x0, 0x0)
accept4$ax25(r6, &(0x7f0000001200)={{0x3, @bcast}, [@remote, @remote, @bcast, @null, @bcast, @default, @rose, @null]}, &(0x7f0000001280)=0x48, 0x80800)
socket$pppoe(0x18, 0x1, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000012c0), 0xa40, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000000000000110000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="3000000000000000010000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r8, @ANYRES32=r1], 0x70, 0x20044000}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f00)="46da7b06982cd25113b12f6fcb653b41a0a0338f60f50f6dbf7cc74edfb684d1e657773593b338991966a07edcad599ae96364ab7d03628c206d9952f773f79986f9d49cca40e1259afe5bcbe3797f19ab7b6dcf10ffd66ea451b3829ab3c4bdc74cdf78ec34f11b682c939218cdff548d00b6b8ea98388159c09964f9b8daf9140537fc36712138abf6373db1eeb095effeb7b25247c312d4db6af3a338d30625c6957b3a1e5c1b928036ae96d285fb3f6ee67632b598705b9143cf451005e0f05dc55a38e24b4c0f0d", 0xca}, {&(0x7f0000001000)="a6dbec53177ecb45f4cd716c23cd", 0xe}], 0x2, &(0x7f0000001300)=ANY=[], 0xe8, 0x4040044}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001480)="44fafdfdb4c2a6dfb5e590efe9d4bdcd393edbb4f46d7b5aecddd0e7e52d5b096233802458a03e4aba4faade64ea88285f19a697d25ac8b36e67e8c94aef30aaea6781fc577ee36314bf8eba59ef0d5db947cc1da120c63db70c2363a925cc232da84138b25b48016f", 0x69}], 0x1, 0x0, 0x0, 0x40000}}], 0x3, 0x800)

0s ago: executing program 9 (id=2708):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="84"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x2800)

kernel console output (not intermixed with test programs):

S (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.804864][ T6866] XFS (loop0): Ending clean mount
[  135.826864][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  135.826884][   T29] audit: type=1326 audit(1740813767.906:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  135.867558][ T6501] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  135.908761][   T29] audit: type=1326 audit(1740813767.936:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  135.940726][   T29] audit: type=1326 audit(1740813767.936:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  135.951749][ T5833] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.972574][   T29] audit: type=1326 audit(1740813767.936:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.026099][ T6501] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  136.046307][   T29] audit: type=1326 audit(1740813767.936:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.078807][   T29] audit: type=1326 audit(1740813767.936:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.103040][   T29] audit: type=1326 audit(1740813767.936:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.125900][   T29] audit: type=1326 audit(1740813767.936:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.131071][ T6501] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  136.157295][   T29] audit: type=1326 audit(1740813767.936:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.218249][   T29] audit: type=1326 audit(1740813767.936:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6865 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  136.330190][ T6690] chnl_net:caif_netlink_parms(): no params data found
[  137.187431][ T6690] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.227240][ T6690] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.007135][ T6690] bridge_slave_0: entered allmulticast mode
[  138.014478][ T6690] bridge_slave_0: entered promiscuous mode
[  138.023094][ T6690] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.030393][ T6690] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.037613][ T6690] bridge_slave_1: entered allmulticast mode
[  138.051223][ T6690] bridge_slave_1: entered promiscuous mode
[  138.356424][ T6501] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.392755][ T6690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.445447][ T6690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.703996][ T6690] team0: Port device team_slave_0 added
[  138.744807][ T6930] loop2: detected capacity change from 0 to 1024
[  138.756027][ T6501] 8021q: adding VLAN 0 to HW filter on device team0
[  138.827108][ T6690] team0: Port device team_slave_1 added
[  139.149658][ T6939] netlink: 63 bytes leftover after parsing attributes in process `syz.2.316'.
[  139.182079][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.199324][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.315230][ T6690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.367417][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.374650][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.443773][ T6690] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.473585][ T6690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.590108][ T6690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.755054][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.762311][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.152250][ T6690] hsr_slave_0: entered promiscuous mode
[  140.175626][ T6690] hsr_slave_1: entered promiscuous mode
[  140.199488][ T6690] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.214508][ T6690] Cannot create hsr debugfs directory
[  140.313439][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.320859][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.544289][ T6965] loop2: detected capacity change from 0 to 1024
[  140.567945][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.624177][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.898245][ T6961] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.939821][ T6961] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.952433][ T6961] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.970006][ T6961] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.631075][ T6979] netlink: 'syz.1.332': attribute type 10 has an invalid length.
[  141.669921][ T6979] netlink: 2 bytes leftover after parsing attributes in process `syz.1.332'.
[  141.719648][ T6979] team0: entered promiscuous mode
[  141.724718][ T6979] team_slave_0: entered promiscuous mode
[  141.754220][ T6979] team_slave_1: entered promiscuous mode
[  141.805179][ T6979] 8021q: adding VLAN 0 to HW filter on device team0
[  141.900353][ T6979] bridge0: port 3(team0) entered blocking state
[  141.934217][ T6979] bridge0: port 3(team0) entered disabled state
[  141.964475][ T6979] team0: entered allmulticast mode
[  141.971777][ T6979] team_slave_0: entered allmulticast mode
[  141.977612][ T6979] team_slave_1: entered allmulticast mode
[  142.051053][ T6988] macsec1: entered allmulticast mode
[  142.068930][ T6988] macvlan0: entered allmulticast mode
[  142.113856][ T6988] macvlan0: left allmulticast mode
[  142.463997][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.635408][ T6690] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  142.730304][ T6690] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  142.805858][ T6690] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  142.861122][ T6690] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  143.071380][ T7009] loop1: detected capacity change from 0 to 256
[  143.345249][ T6690] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.512535][ T6690] 8021q: adding VLAN 0 to HW filter on device team0
[  143.582332][   T79] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.589438][   T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.681827][   T79] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.689026][   T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.292591][ T6501] veth0_vlan: entered promiscuous mode
[  144.373874][ T6501] veth1_vlan: entered promiscuous mode
[  144.485097][ T6501] veth0_macvtap: entered promiscuous mode
[  144.531677][ T6501] veth1_macvtap: entered promiscuous mode
[  144.629295][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.689727][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.730215][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  144.792377][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.851477][ T7038] Illegal XDP return value 3099508522 on prog  (id 139) dev N/A, expect packet loss!
[  144.864118][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.926514][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.995017][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.060418][ T6501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  145.119751][ T6501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.170888][ T6501] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.271771][ T6501] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.314905][ T6501] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.390311][ T6501] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.399089][ T6501] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.537293][ T6690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.623329][ T7057] syz.1.345 uses obsolete (PF_INET,SOCK_PACKET)
[  145.923288][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.958227][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.103650][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.160865][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.542532][ T7076] loop0: detected capacity change from 0 to 128
[  146.600300][ T7076] ext4: Unknown parameter 'fowner>00000000000000060928'
[  146.709155][ T7079] loop1: detected capacity change from 0 to 256
[  146.744772][ T6690] veth0_vlan: entered promiscuous mode
[  146.755027][ T7076] loop0: detected capacity change from 0 to 2048
[  146.825557][ T6690] veth1_vlan: entered promiscuous mode
[  146.897794][ T7076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.932579][ T6690] veth0_macvtap: entered promiscuous mode
[  146.977950][ T6690] veth1_macvtap: entered promiscuous mode
[  147.100035][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.160259][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.211110][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.262788][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.299653][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.340246][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.376904][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.514788][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.569707][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.621087][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.668074][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.712588][ T6690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.839881][ T6690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.937356][ T6690] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.032304][ T6690] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.064108][ T6690] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.112682][ T6690] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.208682][ T6690] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.564226][ T6365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.614831][ T6365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.709785][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.753812][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.241433][ T7133] loop6: detected capacity change from 0 to 2048
[  149.337543][ T7133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.074676][ T7158] loop6: detected capacity change from 0 to 2048
[  150.144800][ T7158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.641057][ T7173] loop1: detected capacity change from 0 to 1024
[  151.648064][ T7173] hfsplus: Unknown parameter 'hfsplus'
[  151.850318][ T7177] loop7: detected capacity change from 0 to 512
[  151.947165][ T7177] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.378: casefold flag without casefold feature
[  152.331907][ T7177] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.378: couldn't read orphan inode 15 (err -117)
[  152.411292][ T7177] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.444254][ T7195] loop6: detected capacity change from 0 to 256
[  153.461167][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.619841][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  153.619863][   T29] audit: type=1326 audit(1740813785.696:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  153.759740][   T29] audit: type=1326 audit(1740813785.696:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  153.879715][   T29] audit: type=1326 audit(1740813785.696:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  154.069658][   T29] audit: type=1326 audit(1740813785.696:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  154.092918][ T7210] loop0: detected capacity change from 0 to 2048
[  154.138721][ T7210] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.199669][   T29] audit: type=1326 audit(1740813785.706:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  154.440574][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.621202][   T29] audit: type=1326 audit(1740813785.706:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  155.314078][   T29] audit: type=1326 audit(1740813785.706:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  155.450009][   T29] audit: type=1326 audit(1740813785.706:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  155.599672][   T29] audit: type=1326 audit(1740813785.706:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  155.726497][   T29] audit: type=1326 audit(1740813785.706:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.6.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  156.017633][ T7243] loop7: detected capacity change from 0 to 256
[  156.607496][ T7256] loop7: detected capacity change from 0 to 512
[  156.730196][ T7256] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.403: casefold flag without casefold feature
[  156.789322][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  156.798421][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  156.806326][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  156.820286][ T5838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  156.827932][ T5838] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  156.835370][ T5838] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  156.842499][ T7256] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.403: couldn't read orphan inode 15 (err -117)
[  156.886523][ T7260] loop2: detected capacity change from 0 to 2048
[  156.990721][ T7256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.034826][ T7260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.595522][ T7289] loop1: detected capacity change from 0 to 128
[  158.663955][ T7289] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.747246][ T7289] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.851721][ T7263] chnl_net:caif_netlink_parms(): no params data found
[  158.901985][ T5848] Bluetooth: hci6: command tx timeout
[  159.846489][ T5830] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.365612][ T7305] loop0: detected capacity change from 0 to 256
[  160.460404][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.467598][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.490371][ T7263] bridge_slave_0: entered allmulticast mode
[  160.511110][ T7263] bridge_slave_0: entered promiscuous mode
[  160.562402][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.626689][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.668923][ T7263] bridge_slave_1: entered allmulticast mode
[  160.692741][ T7263] bridge_slave_1: entered promiscuous mode
[  160.933879][ T7311] loop0: detected capacity change from 0 to 256
[  160.981244][ T5848] Bluetooth: hci6: command tx timeout
[  161.077823][ T7263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.100833][   T29] kauditd_printk_skb: 21 callbacks suppressed
[  161.100853][   T29] audit: type=1326 audit(1740813793.176:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.112493][ T7263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.210862][   T29] audit: type=1326 audit(1740813793.176:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.330256][   T29] audit: type=1326 audit(1740813793.176:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.479951][   T29] audit: type=1326 audit(1740813793.176:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.643488][ T7263] team0: Port device team_slave_0 added
[  161.672311][   T29] audit: type=1326 audit(1740813793.176:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.701753][ T7263] team0: Port device team_slave_1 added
[  161.788980][   T29] audit: type=1326 audit(1740813793.216:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.889712][   T29] audit: type=1326 audit(1740813793.246:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  161.935124][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.039424][   T29] audit: type=1326 audit(1740813793.246:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  162.074159][ T7332] loop1: detected capacity change from 0 to 1024
[  162.100597][ T7332] hfsplus: Unknown parameter 'hfsplus'
[  162.153013][   T29] audit: type=1326 audit(1740813793.246:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  162.233852][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'.
[  162.263442][   T29] audit: type=1326 audit(1740813793.246:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  162.353268][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.379723][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.452272][ T7340] loop6: detected capacity change from 0 to 2048
[  162.540033][ T7263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.550787][ T7340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.585488][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.629841][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.665848][ T7351] loop2: detected capacity change from 0 to 256
[  162.768915][ T7263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.061881][ T5848] Bluetooth: hci6: command tx timeout
[  163.136171][ T7263] hsr_slave_0: entered promiscuous mode
[  163.170507][ T7263] hsr_slave_1: entered promiscuous mode
[  163.190247][ T7263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.229801][ T7263] Cannot create hsr debugfs directory
[  163.394459][ T6952] syz_tun: left allmulticast mode
[  163.423023][ T6952] syz_tun: left promiscuous mode
[  163.429351][ T7369] loop2: detected capacity change from 0 to 512
[  163.470890][ T6952] bridge0: port 3(vlan2) entered disabled state
[  163.536829][ T7369] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.434: casefold flag without casefold feature
[  163.558033][ T7369] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.434: couldn't read orphan inode 15 (err -117)
[  163.576401][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.583946][ T6952] vlan2 (unregistering): left allmulticast mode
[  163.654014][ T6952] vlan2 (unregistering): left promiscuous mode
[  163.660493][ T6952] bridge0: port 3(vlan2) entered disabled state
[  164.329225][ T7383] loop1: detected capacity change from 0 to 1024
[  164.411360][ T7383] hfsplus: Unknown parameter 'hfsplus'
[  164.455226][   T33] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.576309][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'.
[  164.861997][   T33] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.998750][ T7400] loop7: detected capacity change from 0 to 256
[  165.139769][ T5848] Bluetooth: hci6: command tx timeout
[  165.243223][   T33] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.336820][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.7.445'.
[  165.425925][   T33] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.596957][ T7263] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  165.681517][ T7263] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  165.837673][ T7263] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  165.907814][ T7263] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  166.249395][   T33] bridge_slave_1: left allmulticast mode
[  166.312862][   T33] bridge_slave_1: left promiscuous mode
[  166.378450][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.529266][   T33] bridge_slave_0: left allmulticast mode
[  166.584704][   T33] bridge_slave_0: left promiscuous mode
[  166.640366][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.757724][ T7434] loop7: detected capacity change from 0 to 1024
[  166.775789][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.784725][ T7434] hfsplus: Unknown parameter 'hfsplus'
[  166.968676][ T7437] loop1: detected capacity change from 0 to 256
[  167.033828][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  167.033848][   T29] audit: type=1326 audit(1740813799.116:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.144307][   T29] audit: type=1326 audit(1740813799.146:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.237011][   T29] audit: type=1326 audit(1740813799.146:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.321620][   T29] audit: type=1326 audit(1740813799.156:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.372021][   T29] audit: type=1326 audit(1740813799.156:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.423995][ T7454] loop1: detected capacity change from 0 to 512
[  167.455994][ T7454] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.460: casefold flag without casefold feature
[  167.479915][   T29] audit: type=1326 audit(1740813799.156:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.497904][ T7454] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.460: couldn't read orphan inode 15 (err -117)
[  167.578469][   T29] audit: type=1326 audit(1740813799.156:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.585530][ T7454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.621996][   T29] audit: type=1326 audit(1740813799.166:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.692479][   T29] audit: type=1326 audit(1740813799.166:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  167.737154][   T29] audit: type=1326 audit(1740813799.166:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f260118d169 code=0x7ffc0000
[  168.331643][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.355611][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.375390][   T33] bond0 (unregistering): Released all slaves
[  168.691316][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.848999][ T7470] loop0: detected capacity change from 0 to 1024
[  168.856540][ T7470] hfsplus: Unknown parameter 'hfsplus'
[  168.936999][ T7467] loop6: detected capacity change from 0 to 512
[  168.946939][ T7474] loop1: detected capacity change from 0 to 128
[  168.963775][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.030089][ T7474] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.058503][ T7467] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.464: casefold flag without casefold feature
[  169.146384][ T7263] 8021q: adding VLAN 0 to HW filter on device team0
[  169.162597][ T7467] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.464: couldn't read orphan inode 15 (err -117)
[  169.194613][ T7474] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  169.230960][ T7467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.611682][ T5830] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  169.897106][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.904364][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.007371][ T7492] loop1: detected capacity change from 0 to 256
[  170.079871][ T7493] loop7: detected capacity change from 0 to 1024
[  170.420072][   T33] hsr_slave_0: left promiscuous mode
[  170.480062][   T33] hsr_slave_1: left promiscuous mode
[  170.543972][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.874310][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.371260][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.400802][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.509831][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.467'.
[  171.529261][   T33] veth1_macvtap: left promiscuous mode
[  171.550732][   T33] veth0_macvtap: left promiscuous mode
[  171.556829][   T33] veth1_vlan: left promiscuous mode
[  171.581867][   T33] veth0_vlan: left promiscuous mode
[  171.666514][    T8] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1
[  171.754060][    T8] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22
[  172.586859][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.630905][   T33] team0 (unregistering): Port device team_slave_1 removed
[  172.712982][   T33] team0 (unregistering): Port device team_slave_0 removed
[  172.900932][ T7527] loop6: detected capacity change from 0 to 256
[  173.107467][ T7529] loop6: detected capacity change from 0 to 1024
[  174.007824][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.015003][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.618935][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.496'.
[  174.754045][ T7555] netlink: 'syz.7.496': attribute type 1 has an invalid length.
[  174.774394][ T7555] netlink: 'syz.7.496': attribute type 2 has an invalid length.
[  174.889886][ T7566] loop0: detected capacity change from 0 to 1024
[  174.948940][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.095458][ T7598] netlink: 'syz.7.507': attribute type 10 has an invalid length.
[  176.148851][ T7601] netlink: 'syz.7.507': attribute type 10 has an invalid length.
[  176.161067][ T7263] veth0_vlan: entered promiscuous mode
[  176.169854][ T7601] netlink: 2 bytes leftover after parsing attributes in process `syz.7.507'.
[  176.195429][ T7601] team0: entered promiscuous mode
[  176.210742][ T7601] team_slave_0: entered promiscuous mode
[  176.218430][ T7601] team_slave_1: entered promiscuous mode
[  176.237686][ T7601] bridge0: port 3(team0) entered blocking state
[  176.257336][ T7601] bridge0: port 3(team0) entered disabled state
[  176.333329][ T7601] team0: entered allmulticast mode
[  176.349375][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'.
[  176.391308][ T7601] team_slave_0: entered allmulticast mode
[  176.422941][ T7601] team_slave_1: entered allmulticast mode
[  176.478650][ T7601] bridge0: port 3(team0) entered blocking state
[  176.485039][ T7601] bridge0: port 3(team0) entered forwarding state
[  176.512383][ T7598] bridge0: port 3(team0) entered disabled state
[  176.538887][ T7598] team0: left allmulticast mode
[  176.558501][ T7598] team_slave_0: left allmulticast mode
[  176.569952][ T7598] team_slave_1: left allmulticast mode
[  176.598713][ T7598] team0: left promiscuous mode
[  176.604890][ T7598] team_slave_0: left promiscuous mode
[  176.613748][ T7598] team_slave_1: left promiscuous mode
[  176.621122][ T7598] bridge0: port 3(team0) entered disabled state
[  176.642301][ T7598] batman_adv: batadv0: Adding interface: team0
[  176.668819][ T7598] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.697114][ T7598] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  176.759818][ T7263] veth1_vlan: entered promiscuous mode
[  176.872041][ T7616] loop6: detected capacity change from 0 to 2048
[  176.895864][ T7263] veth0_macvtap: entered promiscuous mode
[  176.940568][ T7616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.974305][ T7263] veth1_macvtap: entered promiscuous mode
[  177.073668][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.136118][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.191341][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.238599][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.269214][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.300342][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.337819][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.412452][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.465672][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.531798][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.604079][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.640144][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.667398][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.726572][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.851888][ T7263] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.896416][ T7263] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.923438][ T7263] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.934042][ T7263] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.325873][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.361744][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.401282][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'.
[  178.452287][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.513133][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.046142][ T7677] loop0: detected capacity change from 0 to 2048
[  179.083321][ T7677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.340708][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.348195][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.659390][ T7696] loop0: detected capacity change from 0 to 512
[  179.717072][ T7696] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.533: casefold flag without casefold feature
[  179.739439][ T7703] loop2: detected capacity change from 0 to 1024
[  179.808903][ T7696] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.533: couldn't read orphan inode 15 (err -117)
[  179.891349][ T7696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.901699][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.957108][ T7712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.540'.
[  180.262112][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.464448][ T7714] loop6: detected capacity change from 0 to 2048
[  180.508762][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.543993][ T7714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.721161][ T7685] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.760013][ T7685] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.796899][ T7685] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.809179][ T7685] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.386232][ T7728] loop1: detected capacity change from 0 to 2048
[  181.457266][ T7728] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.771912][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'.
[  183.120102][ T7756] netlink: set zone limit has 4 unknown bytes
[  183.367974][ T7767] netlink: 36 bytes leftover after parsing attributes in process `syz.7.557'.
[  184.217134][ T7795] loop2: detected capacity change from 0 to 2048
[  184.271776][ T7795] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.640725][ T7810] netlink: 63 bytes leftover after parsing attributes in process `syz.1.572'.
[  184.761801][ T7812] netlink: 36 bytes leftover after parsing attributes in process `syz.7.574'.
[  184.834752][ T7814] loop2: detected capacity change from 0 to 1024
[  184.866984][ T7814] hfsplus: Unknown parameter 'hfsplus'
[  185.114423][ T7821] loop1: detected capacity change from 0 to 1024
[  186.400367][ T7850] netlink: 'syz.0.584': attribute type 10 has an invalid length.
[  186.427570][ T7850] batman_adv: batadv0: Adding interface: team0
[  186.476803][ T7853] netlink: 'syz.0.584': attribute type 10 has an invalid length.
[  186.490075][ T7850] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.539913][ T7853] netlink: 2 bytes leftover after parsing attributes in process `syz.0.584'.
[  186.561505][ T7854] loop1: detected capacity change from 0 to 2048
[  186.595015][ T7850] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  186.626468][ T7854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.780079][ T7853] team0: entered promiscuous mode
[  186.790895][ T7853] 8021q: adding VLAN 0 to HW filter on device team0
[  186.798911][ T7853] batman_adv: batadv0: Interface activated: team0
[  186.805577][ T7853] batman_adv: batadv0: Interface deactivated: team0
[  186.816487][ T7853] batman_adv: batadv0: Removing interface: team0
[  186.861540][ T7853] bridge0: port 1(team0) entered blocking state
[  186.867885][ T7853] bridge0: port 1(team0) entered disabled state
[  186.915212][ T7853] team0: entered allmulticast mode
[  186.979399][ T7864] netlink: 36 bytes leftover after parsing attributes in process `syz.8.590'.
[  187.355257][ T7871] loop6: detected capacity change from 0 to 1024
[  187.372410][ T7871] hfsplus: Unknown parameter 'hfsplus'
[  187.705375][ T7840] loop7: detected capacity change from 0 to 32768
[  187.767285][ T7887] loop8: detected capacity change from 0 to 1024
[  187.789380][ T7840] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.491199][ T7840] XFS (loop7): Ending clean mount
[  188.579852][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  188.579874][   T29] audit: type=1326 audit(1740813820.656:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  188.775823][   T29] audit: type=1326 audit(1740813820.656:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  188.824782][ T7913] loop1: detected capacity change from 0 to 2048
[  188.868283][   T29] audit: type=1326 audit(1740813820.656:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  188.929777][ T6690] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.963083][ T7913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.030012][   T29] audit: type=1326 audit(1740813820.666:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.066387][   T29] audit: type=1326 audit(1740813820.666:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.159894][   T29] audit: type=1326 audit(1740813820.666:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.191498][   T29] audit: type=1326 audit(1740813820.666:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.229974][   T29] audit: type=1326 audit(1740813820.666:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.262581][ T7921] netlink: 'syz.8.605': attribute type 10 has an invalid length.
[  189.270596][ T7921] netlink: 2 bytes leftover after parsing attributes in process `syz.8.605'.
[  189.279397][ T7921] team0: entered promiscuous mode
[  189.326662][ T7921] team_slave_0: entered promiscuous mode
[  189.370304][ T7921] team_slave_1: entered promiscuous mode
[  189.389807][   T29] audit: type=1326 audit(1740813820.666:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.410806][ T7921] bridge0: port 3(team0) entered blocking state
[  189.471628][ T7921] bridge0: port 3(team0) entered disabled state
[  189.517376][ T7921] team0: entered allmulticast mode
[  189.534795][   T29] audit: type=1326 audit(1740813820.666:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.7.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84ab38d169 code=0x7ffc0000
[  189.579743][ T7921] team_slave_0: entered allmulticast mode
[  189.589864][ T7921] team_slave_1: entered allmulticast mode
[  189.598404][ T7921] bridge0: port 3(team0) entered blocking state
[  189.604778][ T7921] bridge0: port 3(team0) entered forwarding state
[  189.643504][ T7930] loop6: detected capacity change from 0 to 1024
[  189.681733][ T7930] hfsplus: Unknown parameter 'hfsplus'
[  190.050335][ T7942] netlink: 'syz.7.607': attribute type 10 has an invalid length.
[  190.076487][ T7942] netlink: 'syz.7.607': attribute type 10 has an invalid length.
[  190.087253][ T7942] netlink: 2 bytes leftover after parsing attributes in process `syz.7.607'.
[  190.098525][ T7942] team0: entered promiscuous mode
[  190.104696][ T7942] team_slave_0: entered promiscuous mode
[  190.111310][ T7942] team_slave_1: entered promiscuous mode
[  190.118348][ T7942] 8021q: adding VLAN 0 to HW filter on device team0
[  190.126299][ T7942] batman_adv: batadv0: Interface activated: team0
[  190.133432][ T7942] batman_adv: batadv0: Interface deactivated: team0
[  190.155630][ T7942] batman_adv: batadv0: Removing interface: team0
[  190.171071][ T7942] bridge0: port 3(team0) entered blocking state
[  190.178909][ T7942] bridge0: port 3(team0) entered disabled state
[  190.189901][ T7942] team0: entered allmulticast mode
[  190.209377][ T7942] team_slave_0: entered allmulticast mode
[  190.244176][ T7942] team_slave_1: entered allmulticast mode
[  190.314965][ T7951] netlink: 52 bytes leftover after parsing attributes in process `syz.1.619'.
[  190.383943][ T7957] ip6gretap0: entered promiscuous mode
[  190.415144][ T7957] batadv_slave_0: entered promiscuous mode
[  190.648890][ T7969] loop1: detected capacity change from 0 to 2048
[  190.666207][ T7969] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.221230][ T7988] loop1: detected capacity change from 0 to 1024
[  191.260888][ T7988] hfsplus: Unknown parameter 'hfsplus'
[  192.734219][ T8049] loop8: detected capacity change from 0 to 512
[  192.849997][ T8049] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.650: casefold flag without casefold feature
[  192.891998][ T8049] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.650: couldn't read orphan inode 15 (err -117)
[  192.914259][ T8049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.084981][ T8058] loop6: detected capacity change from 0 to 1024
[  193.107989][ T8056] loop0: detected capacity change from 0 to 512
[  193.150458][ T8058] EXT4-fs: Ignoring removed i_version option
[  193.177308][ T8058] EXT4-fs: Ignoring removed bh option
[  193.229418][ T8056] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.652: casefold flag without casefold feature
[  193.264257][ T8058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.282339][ T8056] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.652: couldn't read orphan inode 15 (err -117)
[  193.382624][ T8056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.780904][ T7263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.799109][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  193.827761][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.438241][ T8081] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  194.502965][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.378827][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  198.010920][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.740879][ T8185] netlink: 'syz.6.692': attribute type 4 has an invalid length.
[  199.163197][ T8200] loop1: detected capacity change from 0 to 512
[  199.381365][ T8200] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.697: casefold flag without casefold feature
[  199.733274][ T8200] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.697: couldn't read orphan inode 15 (err -117)
[  199.819788][ T8200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.338641][ T8220] loop7: detected capacity change from 0 to 1024
[  200.378108][ T8220] EXT4-fs: Ignoring removed i_version option
[  200.418797][ T8220] EXT4-fs: Ignoring removed bh option
[  200.509211][ T8220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.991103][ T5849] Bluetooth: hci4: command 0x0406 tx timeout
[  200.991135][ T5857] Bluetooth: hci3: command 0x0406 tx timeout
[  200.998011][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  201.950182][ T8258] team0: Unable to change to the same mode the team is in
[  203.982408][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.548619][ T8307] team0: Unable to change to the same mode the team is in
[  204.631420][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.464799][ T8326] netlink: set zone limit has 4 unknown bytes
[  207.047357][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.8.739'.
[  207.498508][ T8371] team0: No ports can be present during mode change
[  208.803100][ T8388] loop0: detected capacity change from 0 to 1024
[  208.873801][ T8388] hfsplus: Unknown parameter 'hfsplus'
[  209.866895][ T8422] team0: No ports can be present during mode change
[  211.498966][ T8465] loop8: detected capacity change from 0 to 512
[  211.552989][ T8465] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.773: casefold flag without casefold feature
[  211.577161][ T8465] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.773: couldn't read orphan inode 15 (err -117)
[  211.646431][ T8465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.738181][ T8471] loop7: detected capacity change from 0 to 128
[  211.753151][ T7263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.843192][ T8471] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.863623][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.872169][ T8471] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.931426][ T8456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.689846][ T6690] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.842367][ T8456] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.865873][ T8456] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.880813][ T8456] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.918194][ T8456] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.958721][ T8459] netlink: 52 bytes leftover after parsing attributes in process `syz.0.771'.
[  212.997565][ T8473] team0: No ports can be present during mode change
[  214.853943][ T8538] netlink: 63 bytes leftover after parsing attributes in process `syz.6.798'.
[  215.067182][ T8547] netlink: 52 bytes leftover after parsing attributes in process `syz.1.800'.
[  215.166490][ T8551] loop2: detected capacity change from 0 to 1024
[  215.210819][ T8551] EXT4-fs: Ignoring removed i_version option
[  215.249240][ T8551] EXT4-fs: Ignoring removed bh option
[  215.261532][ T8554] team0: No ports can be present during mode change
[  215.392751][ T8551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.200331][ T8574] netlink: 'syz.6.807': attribute type 10 has an invalid length.
[  217.248927][ T8574] batman_adv: batadv0: Adding interface: team0
[  217.310758][ T8574] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.400168][ T8574] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  217.699860][ T8591] netlink: 48 bytes leftover after parsing attributes in process `syz.1.812'.
[  218.111087][ T8598] netlink: 63 bytes leftover after parsing attributes in process `syz.6.814'.
[  218.379942][ T8601] netlink: 52 bytes leftover after parsing attributes in process `syz.6.815'.
[  218.626482][ T8604] team0: No ports can be present during mode change
[  218.954728][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.361647][ T8623] netlink: 'syz.6.822': attribute type 4 has an invalid length.
[  220.749933][ T8639] netlink: 63 bytes leftover after parsing attributes in process `syz.6.827'.
[  221.258912][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.8.835'.
[  221.289249][ T8653] team0: No ports can be present during mode change
[  222.218163][ T8675] netlink: 'syz.2.838': attribute type 4 has an invalid length.
[  222.250552][ T8678] bridge0: port 4(vlan2) entered blocking state
[  222.270217][ T8678] bridge0: port 4(vlan2) entered disabled state
[  222.300168][ T8678] vlan2: entered allmulticast mode
[  222.318609][ T8678] vlan2: entered promiscuous mode
[  222.615621][ T8696] netlink: 63 bytes leftover after parsing attributes in process `syz.8.844'.
[  222.905676][ T8709] loop7: detected capacity change from 0 to 128
[  223.013278][ T8709] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  223.081977][ T8709] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  223.975549][ T6690] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.271457][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.857'.
[  225.835581][ T8764] team0: No ports can be present during mode change
[  228.224531][ T8815] netlink: 'syz.2.876': attribute type 4 has an invalid length.
[  228.639840][ T8826] team0: Unable to change to the same mode the team is in
[  229.639050][ T8841] netlink: set zone limit has 4 unknown bytes
[  230.825532][ T8884] team0: No ports can be present during mode change
[  231.644383][ T8905] netlink: set zone limit has 4 unknown bytes
[  231.964717][ T8924] netlink: 'syz.2.910': attribute type 4 has an invalid length.
[  232.351012][ T8937] team0: No ports can be present during mode change
[  233.084984][ T8961] netlink: 24 bytes leftover after parsing attributes in process `syz.8.922'.
[  233.319506][ T8959] netlink: set zone limit has 4 unknown bytes
[  233.799233][ T8979] netlink: 'syz.1.926': attribute type 4 has an invalid length.
[  234.122970][ T8991] netlink: 'syz.6.927': attribute type 2 has an invalid length.
[  234.312934][ T8992] team0: No ports can be present during mode change
[  234.388331][ T9002] fuse: Bad value for 'fd'
[  234.625723][ T9008] netlink: 'syz.7.933': attribute type 13 has an invalid length.
[  234.670612][ T9008] openvswitch: netlink: Multiple metadata blocks provided
[  234.728747][ T9008] bridge0: port 3(team0) entered disabled state
[  234.814017][ T9012] netlink: 144 bytes leftover after parsing attributes in process `syz.2.935'.
[  234.841431][ T9008] bridge_slave_0: left allmulticast mode
[  234.847102][ T9008] bridge_slave_0: left promiscuous mode
[  234.893902][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.969470][ T9008] bridge_slave_1: left allmulticast mode
[  235.005909][ T9008] bridge_slave_1: left promiscuous mode
[  235.035251][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.074584][ T9008] bond0: (slave bond_slave_0): Releasing backup interface
[  235.084998][ T9008] bond0: (slave bond_slave_1): Releasing backup interface
[  235.126813][ T9008] team_slave_0: left promiscuous mode
[  235.133612][ T9008] team_slave_0: left allmulticast mode
[  235.176048][ T9008] team0: Port device team_slave_0 removed
[  235.303642][ T9008] team_slave_1: left promiscuous mode
[  235.326656][ T9008] team_slave_1: left allmulticast mode
[  235.349213][ T9008] team0: Port device team_slave_1 removed
[  235.358185][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0
[  235.373977][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1
[  235.388414][ T9008] vlan2: left allmulticast mode
[  235.394302][ T9008] team0: left allmulticast mode
[  235.401329][ T9008] vlan2: left promiscuous mode
[  235.411007][ T9008] bridge0: port 4(vlan2) entered disabled state
[  236.138019][ T9034] netlink: 'syz.6.942': attribute type 4 has an invalid length.
[  236.516612][ T9039] team0: No ports can be present during mode change
[  236.711235][ T9043] loop1: detected capacity change from 0 to 256
[  237.547987][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'.
[  237.609505][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'.
[  237.660297][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'.
[  237.714945][ T9063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'.
[  238.213761][ T9032] netlink: 28 bytes leftover after parsing attributes in process `syz.7.940'.
[  239.050417][ T9089] netlink: 'syz.8.958': attribute type 4 has an invalid length.
[  239.501041][ T9101] team0: left allmulticast mode
[  239.536870][ T9101] team_slave_0: left allmulticast mode
[  239.544261][ T9103] loop2: detected capacity change from 0 to 1024
[  239.561147][ T9101] team_slave_1: left allmulticast mode
[  239.566824][ T9101] bridge0: port 3(team0) entered disabled state
[  239.590568][ T9103] EXT4-fs: Ignoring removed i_version option
[  239.609492][ T9103] EXT4-fs: Ignoring removed bh option
[  239.686050][ T9101] bridge_slave_0: left allmulticast mode
[  239.700888][ T9103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.748654][ T9101] bridge_slave_0: left promiscuous mode
[  239.779874][ T9101] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.856565][ T9124] loop6: detected capacity change from 0 to 256
[  239.954393][ T9101] bridge_slave_1: left allmulticast mode
[  239.964326][ T9101] bridge_slave_1: left promiscuous mode
[  240.002435][ T9101] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.138618][ T9101] bond0: (slave bond_slave_0): Releasing backup interface
[  240.204372][ T9101] bond0: (slave bond_slave_1): Releasing backup interface
[  240.253185][ T9101] team_slave_0: left promiscuous mode
[  240.371347][ T9101] team0: Port device team_slave_0 removed
[  240.394170][ T9101] team_slave_1: left promiscuous mode
[  240.455748][ T9141] netlink: 'syz.1.975': attribute type 4 has an invalid length.
[  240.578564][ T9101] team0: Port device team_slave_1 removed
[  240.619976][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.651437][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.773196][ T9101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.801825][ T9101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.842631][ T9106] vlan0: entered allmulticast mode
[  240.864397][ T9106] veth0_to_batadv: entered allmulticast mode
[  240.956472][ T9106] bridge0: port 1(vlan0) entered blocking state
[  241.039529][ T9106] bridge0: port 1(vlan0) entered disabled state
[  241.067154][ T9106] vlan0: entered promiscuous mode
[  241.093375][ T9106] veth0_to_batadv: entered promiscuous mode
[  241.136256][ T9106] bridge0: port 1(vlan0) entered blocking state
[  241.142682][ T9106] bridge0: port 1(vlan0) entered forwarding state
[  241.942792][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  242.894722][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.374228][ T9197] netlink: 'syz.6.990': attribute type 4 has an invalid length.
[  245.575775][ T9204] loop2: detected capacity change from 0 to 512
[  245.698283][ T9204] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.991: casefold flag without casefold feature
[  245.826318][ T9204] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.991: couldn't read orphan inode 15 (err -117)
[  245.881137][ T9204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.390747][ T5940] IPVS: starting estimator thread 0...
[  246.603959][ T9229] IPVS: using max 19 ests per chain, 45600 per kthread
[  246.792256][ T9241] netlink: 'syz.0.1006': attribute type 4 has an invalid length.
[  248.444049][ T9280] sctp: [Deprecated]: syz.6.1014 (pid 9280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  248.444049][ T9280] Use struct sctp_sack_info instead
[  248.810640][ T9290] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  249.175313][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.648596][ T9305] netlink: 'syz.1.1021': attribute type 4 has an invalid length.
[  250.534824][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1025'.
[  250.752291][ T9329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'.
[  251.138295][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1031'.
[  252.185660][ T5848] Bluetooth: hci5: command 0x0406 tx timeout
[  253.247643][ T9376] netlink: 'syz.6.1039': attribute type 4 has an invalid length.
[  253.644666][ T9385] team0: Mode changed to "broadcast"
[  254.430646][ T9413] netlink: 'syz.7.1051': attribute type 13 has an invalid length.
[  254.466673][ T9413] openvswitch: netlink: Multiple metadata blocks provided
[  255.112575][ T9430] netlink: set zone limit has 4 unknown bytes
[  255.153717][ T9435] team0: Unable to change to the same mode the team is in
[  255.223182][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  255.229522][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  255.746494][ T9453] loop2: detected capacity change from 0 to 1024
[  255.775380][ T9453] hfsplus: Unknown parameter 'hfsplus'
[  257.360999][ T9492] team0: Unable to change to the same mode the team is in
[  257.556920][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1075'.
[  257.934503][ T9509] loop2: detected capacity change from 0 to 1024
[  257.980480][ T9509] hfsplus: Unknown parameter 'hfsplus'
[  258.679872][ T9532] syzkaller0: entered promiscuous mode
[  258.706354][ T9532] syzkaller0: entered allmulticast mode
[  259.045487][ T9540] loop0: detected capacity change from 0 to 2048
[  259.189037][ T9540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.340945][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'.
[  262.191942][ T9585] loop6: detected capacity change from 0 to 2048
[  262.226315][ T9585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.611643][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'.
[  264.412212][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'.
[  264.450866][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1115'.
[  265.983260][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1133'.
[  268.072265][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1148'.
[  268.123350][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1148'.
[  268.654947][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'.
[  268.932792][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1157'.
[  268.986303][ T9754] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.038448][ T9757] netlink: 'syz.0.1157': attribute type 10 has an invalid length.
[  269.060598][ T9756] loop7: detected capacity change from 0 to 256
[  269.069964][ T9754] bond0: entered promiscuous mode
[  269.080104][ T9754] bond0: entered allmulticast mode
[  269.085627][ T9754] team0: Port device bond0 added
[  269.126043][ T9757] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  269.151715][ T9759] netlink: 'syz.2.1159': attribute type 2 has an invalid length.
[  269.180810][ T9757] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  269.224304][ T9757] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  269.840599][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  269.869849][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'.
[  270.317974][ T9795] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1171'.
[  270.429152][ T9795] ip6gretap0: entered promiscuous mode
[  270.480416][ T9795] batadv_slave_0: entered promiscuous mode
[  270.497910][ T9795] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  270.501043][ T9801] loop2: detected capacity change from 0 to 256
[  270.566589][ T9795] Cannot create hsr debugfs directory
[  274.640240][ T9912] netlink: set zone limit has 4 unknown bytes
[  275.195388][ T9923] warn_alloc: 1 callbacks suppressed
[  275.195412][ T9923] syz.0.1208: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  275.276733][ T9946] No such timeout policy "syz0"
[  275.292977][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.0.1208 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0
[  275.293008][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  275.293024][ T9923] Call Trace:
[  275.293033][ T9923]  <TASK>
[  275.293043][ T9923]  dump_stack_lvl+0x241/0x360
[  275.293081][ T9923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.293108][ T9923]  ? __pfx__printk+0x10/0x10
[  275.293140][ T9923]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  275.293181][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293221][ T9923]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  275.293256][ T9923]  warn_alloc+0x278/0x410
[  275.293288][ T9923]  ? __pfx_warn_alloc+0x10/0x10
[  275.293321][ T9923]  ? xp_create_and_assign_umem+0x17b/0xc50
[  275.293354][ T9923]  ? __get_vm_area_node+0x1c8/0x2d0
[  275.293390][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293427][ T9923]  ? __get_vm_area_node+0x25c/0x2d0
[  275.293472][ T9923]  __vmalloc_node_range_noprof+0x62f/0x1380
[  275.293514][ T9923]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  275.293568][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293607][ T9923]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  275.293649][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293687][ T9923]  ? rcu_is_watching+0x15/0xb0
[  275.293716][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293753][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.293790][ T9923]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  275.293825][ T9923]  ? __kvmalloc_node_noprof+0x72/0x190
[  275.293867][ T9923]  __kvmalloc_node_noprof+0x142/0x190
[  275.293906][ T9923]  ? xp_create_and_assign_umem+0x17b/0xc50
[  275.293939][ T9923]  xp_create_and_assign_umem+0x17b/0xc50
[  275.293984][ T9923]  ? dev_get_by_index+0x23/0x2d0
[  275.294017][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.294060][ T9923]  xsk_bind+0x388/0xfe0
[  275.294089][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.294132][ T9923]  __sys_bind+0x1e6/0x290
[  275.294176][ T9923]  ? __pfx___sys_bind+0x10/0x10
[  275.294225][ T9923]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  275.294265][ T9923]  ? exc_page_fault+0x590/0x8b0
[  275.294296][ T9923]  ? srso_alias_return_thunk+0x5/0xfbef5
[  275.294340][ T9923]  __x64_sys_bind+0x7a/0x90
[  275.294374][ T9923]  do_syscall_64+0xf3/0x230
[  275.294415][ T9923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.294448][ T9923] RIP: 0033:0x7fad4418d169
[  275.294470][ T9923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.294491][ T9923] RSP: 002b:00007fad41bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  275.294517][ T9923] RAX: ffffffffffffffda RBX: 00007fad443a6240 RCX: 00007fad4418d169
[  275.294536][ T9923] RDX: 0000000000000010 RSI: 0000400000000100 RDI: 0000000000000003
[  275.294552][ T9923] RBP: 00007fad4420e2a0 R08: 0000000000000000 R09: 0000000000000000
[  275.294568][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.294583][ T9923] R13: 0000000000000001 R14: 00007fad443a6240 R15: 00007fff13496018
[  275.294620][ T9923]  </TASK>
[  275.613897][ T9923] Mem-Info:
[  275.617091][ T9923] active_anon:12409 inactive_anon:0 isolated_anon:0
[  275.617091][ T9923]  active_file:15391 inactive_file:38399 isolated_file:0
[  275.617091][ T9923]  unevictable:768 dirty:213 writeback:0
[  275.617091][ T9923]  slab_reclaimable:10689 slab_unreclaimable:106239
[  275.617091][ T9923]  mapped:40064 shmem:6060 pagetables:1463
[  275.617091][ T9923]  sec_pagetables:0 bounce:0
[  275.617091][ T9923]  kernel_misc_reclaimable:0
[  275.617091][ T9923]  free:1287976 free_pcp:702 free_cma:0
[  275.662674][ T9923] Node 0 active_anon:50736kB inactive_anon:0kB active_file:61564kB inactive_file:153524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161356kB dirty:852kB writeback:0kB shmem:23804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12508kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no
[  275.695726][ T9923] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  275.729070][ T9923] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  275.756236][ T9923] lowmem_reserve[]: 0 2490 2490 0 0
[  275.761620][ T9923] Node 0 DMA32 free:1225296kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:50096kB inactive_anon:0kB active_file:61564kB inactive_file:153200kB unevictable:1536kB writepending:852kB present:3129332kB managed:2549860kB mlocked:0kB bounce:0kB free_pcp:2024kB local_pcp:468kB free_cma:0kB
[  275.793078][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  275.797858][ T9923] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  275.826526][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  275.831381][ T9923] Node 1 Normal free:3911328kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  275.860252][ T9923] lowmem_reserve[]: 0 0 0 0 0
[  275.865493][ T9923] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  275.880928][ T9923] Node 0 DMA32: 12*4kB (UE) 740*8kB (UME) 823*16kB (ME) 350*32kB (UME) 137*64kB (UME) 111*128kB (ME) 45*256kB (ME) 18*512kB (UM) 25*1024kB (UME) 4*2048kB (U) 273*4096kB (UM) = 1226048kB
[  275.899686][ T9923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  275.911355][ T9923] Node 1 Normal: 216*4kB (UE) 58*8kB (UME) 41*16kB (UME) 189*32kB (UME) 91*64kB (UME) 29*128kB (UME) 22*256kB (UME) 8*512kB (UME) 3*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3911328kB
[  275.943677][ T9923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  276.016944][ T9923] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.080235][ T9923] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  276.148347][ T9923] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  276.242327][ T9923] 59569 total pagecache pages
[  276.257329][ T9923] 0 pages in swap cache
[  276.277548][ T9923] Free swap  = 124996kB
[  276.287900][ T9923] Total swap = 124996kB
[  276.299686][ T9923] 2097051 pages RAM
[  276.314377][ T9923] 0 pages HighMem/MovableOnly
[  276.337075][ T9923] 427864 pages reserved
[  276.360543][ T9923] 0 pages cma reserved
[  276.522073][ T9970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1224'.
[  276.591041][ T9969] geneve2: left allmulticast mode
[  277.169248][ T9980] netlink: set zone limit has 4 unknown bytes
[  279.164093][T10040] netlink: set zone limit has 4 unknown bytes
[  279.711689][T10064] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1252'.
[  279.980794][T10048] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  281.068382][T10102] netlink: set zone limit has 4 unknown bytes
[  281.309605][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[  281.419960][T10116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'.
[  281.429087][T10116] unsupported nlmsg_type 40
[  281.502765][T10122] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1269'.
[  283.070922][T10181] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1287'.
[  284.577128][T10212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1296'.
[  285.451558][T10235] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1304'.
[  286.208290][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1313'.
[  287.323788][T10291] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1323'.
[  288.876845][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'.
[  289.152494][T10304] loop8: detected capacity change from 0 to 32768
[  289.311959][T10304] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  289.592771][T10304] XFS (loop8): Ending clean mount
[  290.310338][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  290.310361][   T29] audit: type=1326 audit(1740813922.386:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.8.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30f8d169 code=0x7ffc0000
[  290.471898][   T29] audit: type=1326 audit(1740813922.396:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.8.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f8c30f8d169 code=0x7ffc0000
[  290.528204][   T29] audit: type=1326 audit(1740813922.606:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.8.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30f8d169 code=0x7ffc0000
[  290.606282][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  290.654870][   T29] audit: type=1326 audit(1740813922.606:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.8.1330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c30f8d169 code=0x7ffc0000
[  290.859708][ T7263] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  291.610326][T10377] team0: No ports can be present during mode change
[  292.884156][T10410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1365'.
[  293.295250][T10418] vlan0: left promiscuous mode
[  293.327942][T10418] veth0_to_batadv: left promiscuous mode
[  293.363055][T10418] bridge0: port 1(vlan0) entered disabled state
[  293.468832][T10423] team0: Mode changed to "broadcast"
[  293.511600][T10431] team0: No ports can be present during mode change
[  295.309938][T10456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1381'.
[  296.010460][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'.
[  296.019435][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'.
[  296.974579][T10489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1391'.
[  298.631112][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1402'.
[  298.649842][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1402'.
[  298.735282][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1398'.
[  299.580741][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1409'.
[  300.827778][T10555] bridge0: port 3(vlan2) entered blocking state
[  301.030685][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1420'.
[  301.049864][T10555] bridge0: port 3(vlan2) entered disabled state
[  301.317716][T10581] loop7: detected capacity change from 0 to 256
[  302.016329][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'.
[  303.380137][ T5848] Bluetooth: hci6: command 0x0406 tx timeout
[  303.986199][T10641] loop7: detected capacity change from 0 to 256
[  304.550863][T10656] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.558483][T10656] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.056309][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.097703][T10656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.344647][T10656] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.399796][T10656] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.408731][T10656] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.446846][T10656] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.477681][T10680] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1454'.
[  305.569668][T10658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1444'.
[  306.871409][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1462'.
[  307.887537][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1468'.
[  307.944443][T10730] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1469'.
[  309.238230][T10753] team0: left allmulticast mode
[  309.247251][T10753] team_slave_0: left allmulticast mode
[  309.299481][T10753] team_slave_1: left allmulticast mode
[  309.305383][T10753] team0: left promiscuous mode
[  309.357434][T10753] team_slave_0: left promiscuous mode
[  309.441788][T10753] team_slave_1: left promiscuous mode
[  309.447576][T10753] bridge0: port 3(team0) entered disabled state
[  309.526337][T10753] bridge_slave_0: left allmulticast mode
[  309.560172][T10753] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.608843][T10753] bridge_slave_1: left allmulticast mode
[  309.628528][T10753] bridge_slave_1: left promiscuous mode
[  309.648743][T10753] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.786967][T10753] bond0: (slave bond_slave_0): Releasing backup interface
[  309.812154][T10753] bond0: (slave bond_slave_1): Releasing backup interface
[  309.873621][T10753] team0: Port device team_slave_0 removed
[  309.931368][T10753] team0: Port device team_slave_1 removed
[  309.937412][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.981973][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.982957][T10786] netlink: 'syz.8.1486': attribute type 20 has an invalid length.
[  310.027818][T10786] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1486'.
[  310.037587][T10762] team0: Mode changed to "broadcast"
[  310.060781][T10777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1484'.
[  310.153146][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1487'.
[  311.424600][T10831] team0: Unable to change to the same mode the team is in
[  311.909757][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  312.209683][ T5899] usb 9-1: Using ep0 maxpacket: 8
[  312.369491][ T5899] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  312.381606][ T5899] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  312.392108][ T5899] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  312.403460][ T5899] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  312.416989][ T5899] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  312.441770][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.686070][ T5899] usb 9-1: GET_CAPABILITIES returned 0
[  312.716913][ T5899] usbtmc 9-1:16.0: can't read capabilities
[  312.941154][ T5899] usb 9-1: USB disconnect, device number 2
[  313.080713][T10867] capability: warning: `syz.1.1515' uses deprecated v2 capabilities in a way that may be insecure
[  313.274296][T10873] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1518'.
[  313.303894][T10870] bond0: (slave bond_slave_0): Releasing backup interface
[  313.331782][T10870] bond0: (slave bond_slave_1): Releasing backup interface
[  313.402021][T10870] team0: Port device team_slave_0 removed
[  313.445801][T10870] team0: Port device team_slave_1 removed
[  313.446581][T10878] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1522'.
[  313.506789][T10870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.538769][T10870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.609996][T10875] team0: Mode changed to "broadcast"
[  314.686628][T10916] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1536'.
[  314.812711][T10920] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1538'.
[  315.473752][T10945] loop8: detected capacity change from 0 to 256
[  315.578233][T10949] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1552'.
[  315.821290][T10955] netlink: 'syz.6.1556': attribute type 1 has an invalid length.
[  315.853742][T10955] netlink: 'syz.6.1556': attribute type 2 has an invalid length.
[  315.870785][T10955] netlink: 16154 bytes leftover after parsing attributes in process `syz.6.1556'.
[  315.884229][T10957] netlink: 160 bytes leftover after parsing attributes in process `syz.8.1554'.
[  316.207446][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1563'.
[  316.297725][T10977] loop2: detected capacity change from 0 to 256
[  316.432912][T10979] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1567'.
[  316.662964][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  317.624182][T11032] vlan2: entered promiscuous mode
[  317.638664][T11032] vlan2: entered allmulticast mode
[  317.685739][T11039] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  318.905809][T11092] team0: Unable to change to the same mode the team is in
[  319.332570][T11109] process 'syz.6.1626' launched './file1' with NULL argv: empty string added
[  319.417984][T11114] loop7: detected capacity change from 0 to 512
[  319.477754][T11114] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.1627: casefold flag without casefold feature
[  319.562838][T11114] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1627: couldn't read orphan inode 15 (err -117)
[  319.589084][T11124] netlink: set zone limit has 4 unknown bytes
[  319.648371][T11114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.896342][T11133] batman_adv: batadv0: Removing interface: team0
[  320.646966][T11133] bridge_slave_0: left allmulticast mode
[  320.654409][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.674107][T11133] bridge_slave_0: left promiscuous mode
[  320.680067][T11133] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.770438][T11133] bridge_slave_1: left allmulticast mode
[  320.781843][T11133] bridge_slave_1: left promiscuous mode
[  320.787606][T11133] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.858101][T11133] bond0: (slave bond_slave_0): Releasing backup interface
[  320.884959][T11133] bond0: (slave bond_slave_1): Releasing backup interface
[  320.905750][T11133] team0: Port device team_slave_0 removed
[  320.926567][T11133] team0: Port device team_slave_1 removed
[  320.940239][T11133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  320.965939][T11133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  321.001000][T11137] team0: Mode changed to "broadcast"
[  321.721114][T11174] netlink: set zone limit has 4 unknown bytes
[  322.288193][T11193] team0: Unable to change to the same mode the team is in
[  322.950259][T11209] team0: Unable to change to the same mode the team is in
[  323.928072][   T29] audit: type=1326 audit(1740813956.006:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.002761][   T29] audit: type=1326 audit(1740813956.006:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.059419][   T29] audit: type=1326 audit(1740813956.006:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.119243][   T29] audit: type=1326 audit(1740813956.006:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.229690][   T29] audit: type=1326 audit(1740813956.006:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.324490][   T29] audit: type=1326 audit(1740813956.006:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.426644][   T29] audit: type=1326 audit(1740813956.006:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  324.539687][   T29] audit: type=1326 audit(1740813956.036:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11201 comm="syz.0.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad4418d169 code=0x7ffc0000
[  325.245565][T11269] veth0_to_batadv: left allmulticast mode
[  325.318280][T11269] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.328674][T11269] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.349511][T11269] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.358848][T11281] loop7: detected capacity change from 0 to 256
[  325.360280][T11269] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.529797][T11271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1687'.
[  326.580583][ T5899] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  326.648775][   T29] audit: type=1326 audit(1740813958.726:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.6.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  326.733649][   T29] audit: type=1326 audit(1740813958.726:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.6.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaa18d169 code=0x7ffc0000
[  326.816382][ T5899] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  326.833393][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.859660][ T5899] usb 3-1: Product: syz
[  326.863846][ T5899] usb 3-1: Manufacturer: syz
[  326.899227][ T5899] usb 3-1: SerialNumber: syz
[  326.952928][ T5899] usb 3-1: config 0 descriptor??
[  327.016600][ T5899] ch341 3-1:0.0: ch341-uart converter detected
[  327.218926][ T5899] usb 3-1: failed to receive control message: -71
[  327.247341][ T5899] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  327.339845][ T5899] usb 3-1: USB disconnect, device number 3
[  327.362077][ T5899] ch341 3-1:0.0: device disconnected
[  328.387556][T11348] loop2: detected capacity change from 0 to 256
[  328.388074][T11349] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  330.800368][T11383] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  331.521619][T11392] ALSA: seq fatal error: cannot create timer (-19)
[  331.659830][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1741'.
[  333.210226][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  333.805666][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'.
[  333.860427][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'.
[  335.328532][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1772'.
[  335.605653][T11481] team0: Unable to change to the same mode the team is in
[  336.093814][T11497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1781'.
[  336.416189][T11503] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1784'.
[  336.757508][T11507] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1786'.
[  336.788425][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  337.106778][T11517] team0: Unable to change to the same mode the team is in
[  337.180871][T11495] loop7: detected capacity change from 0 to 32768
[  337.212659][T11495] XFS: ikeep mount option is deprecated.
[  337.276789][T11495] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  337.385209][T11495] XFS (loop7): Ending clean mount
[  337.411278][T11495] XFS (loop7): Quotacheck needed: Please wait.
[  337.454312][T11495] XFS (loop7): Quotacheck: Done.
[  337.638274][ T6690] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  337.723066][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'.
[  337.781309][T11540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'.
[  338.138887][T11553] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1801'.
[  338.330707][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'.
[  338.935593][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'.
[  338.977452][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1812'.
[  339.141695][T11585] sctp: [Deprecated]: syz.2.1814 (pid 11585) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.141695][T11585] Use struct sctp_sack_info instead
[  340.134363][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1819'.
[  341.661865][ T5899] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  341.819875][ T5899] usb 8-1: Using ep0 maxpacket: 8
[  341.845002][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  341.901241][ T5899] usb 8-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[  341.925752][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.966687][ T5899] usb 8-1: config 0 descriptor??
[  342.602173][ T5899] usbhid 8-1:0.0: can't add hid device: -71
[  342.823219][ T5899] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  342.853619][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'.
[  343.042301][ T5899] usb 8-1: USB disconnect, device number 2
[  343.062725][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1837'.
[  345.254265][T11705] netlink: set zone limit has 4 unknown bytes
[  348.408704][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1883'.
[  348.435616][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'.
[  348.994905][T11787] netlink: 'syz.8.1891': attribute type 13 has an invalid length.
[  349.025707][T11787] openvswitch: netlink: Multiple metadata blocks provided
[  349.347699][T11801] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1900'.
[  350.040302][T11826] netlink: 'syz.2.1910': attribute type 13 has an invalid length.
[  350.070094][T11826] openvswitch: netlink: Multiple metadata blocks provided
[  350.449723][ T5897] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  350.510013][T11839] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1915'.
[  350.619895][ T5897] usb 8-1: Using ep0 maxpacket: 32
[  350.626806][ T5897] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  350.643770][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.662728][ T5897] usb 8-1: config 0 descriptor??
[  350.685493][ T5897] gspca_main: nw80x-2.14.0 probing 055f:d001
[  351.097449][ T5897] gspca_nw80x: reg_r err -71
[  351.115290][ T5897] nw80x 8-1:0.0: probe with driver nw80x failed with error -71
[  351.167186][ T5897] usb 8-1: USB disconnect, device number 3
[  351.554754][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1926'.
[  351.575367][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1926'.
[  351.619771][T11873] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1929'.
[  352.512405][T11889] team0: Unable to change to the same mode the team is in
[  353.124757][T11912] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1942'.
[  353.631460][T11927] team0: Unable to change to the same mode the team is in
[  354.110885][T11946] netlink: 124 bytes leftover after parsing attributes in process `syz.8.1957'.
[  354.145600][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  354.329730][ T5899] usb 3-1: Using ep0 maxpacket: 32
[  354.351909][ T5899] usb 3-1: config 3 has an invalid interface number: 171 but max is 0
[  354.406969][ T5899] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  354.427700][ T5899] usb 3-1: config 3 has no interface number 0
[  354.457611][ T5899] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice= c.e5
[  354.480667][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3
[  354.519710][ T5899] usb 3-1: Product: syz
[  354.523904][ T5899] usb 3-1: Manufacturer: syz
[  354.549599][ T5899] usb 3-1: SerialNumber: syz
[  354.781098][ T5899] as10x_usb: device has been detected
[  354.794358][ T5899] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  354.904146][ T5899] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  355.011429][T11979] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1973'.
[  355.022847][ T5899] as10x_usb: error during firmware upload part1
[  355.030292][ T5899] Registered device Sky IT Digital Key (green led)
[  355.040237][ T5899] usb 3-1: USB disconnect, device number 4
[  355.117259][ T5899] Unregistered device Sky IT Digital Key (green led)
[  355.125883][ T5899] as10x_usb: device has been disconnected
[  355.675022][T12000] team0: Unable to change to the same mode the team is in
[  355.693330][T11999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1981'.
[  355.719747][   T52] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  355.930437][   T52] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  355.983247][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.013548][   T52] usb 3-1: Product: syz
[  356.039576][   T52] usb 3-1: Manufacturer: syz
[  356.059567][   T52] usb 3-1: SerialNumber: syz
[  356.083349][   T52] usb 3-1: config 0 descriptor??
[  356.155008][T12012] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1988'.
[  356.332808][ T5840] Bluetooth: hci4: unexpected event for opcode 0x1804
[  356.350265][   T52] usb 3-1: Firmware version (0.0) predates our first public release.
[  356.358380][   T52] usb 3-1: Please update to version 0.2 or newer
[  356.469462][   T52] usb 3-1: USB disconnect, device number 5
[  356.570929][T12032] team0: Unable to change to the same mode the team is in
[  356.708547][T12037] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1999'.
[  357.078387][T12053] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2005'.
[  358.574870][T12076] team0: Unable to change to the same mode the team is in
[  358.854724][T12082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2014'.
[  359.461106][T12100] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2020'.
[  360.342515][ T5840] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  360.351054][ T5840] Bluetooth: hci4: Injecting HCI hardware error event
[  360.360257][ T5840] Bluetooth: hci4: hardware error 0x00
[  360.868283][T12140] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2036'.
[  361.579230][T12168] netlink: 'syz.0.2046': attribute type 1 has an invalid length.
[  361.614712][T12172] netlink: 'syz.6.2049': attribute type 1 has an invalid length.
[  361.633017][T12172] netlink: 'syz.6.2049': attribute type 2 has an invalid length.
[  361.812027][T12179] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2052'.
[  362.072588][T12184] xt_hashlimit: size too large, truncated to 1048576
[  362.203089][T12190] 
: renamed from bond0
[  362.321884][T12196] netlink: 'syz.7.2058': attribute type 10 has an invalid length.
[  362.332340][T12196] syz_tun: entered promiscuous mode
[  362.348835][T12196] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  362.429755][ T5840] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  362.872664][T12216] netlink: 'syz.2.2064': attribute type 1 has an invalid length.
[  362.900206][T12216] netlink: 'syz.2.2064': attribute type 2 has an invalid length.
[  363.015247][T12220] bond0: option mode: unable to set because the bond device has slaves
[  363.041281][T12219] bond0: left promiscuous mode
[  363.055479][T12219] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  363.093705][T12219] bond0: left allmulticast mode
[  363.098618][T12219] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  363.161906][T12219] team0: Port device bond0 removed
[  363.232969][T12219] team0: left allmulticast mode
[  363.265435][T12219] bridge0: port 1(team0) entered disabled state
[  363.365933][T12219] bond0: (slave wlan1): Releasing backup interface
[  363.457409][T12223] team0: Unable to change to the same mode the team is in
[  363.804729][T12246] ucma_write: process 669 (syz.7.2077) changed security contexts after opening file descriptor, this is not allowed.
[  364.399916][T12224] loop2: detected capacity change from 0 to 32768
[  364.430448][T12224] XFS: ikeep mount option is deprecated.
[  364.549179][T12224] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  364.694662][T12224] XFS (loop2): Ending clean mount
[  364.759833][T12224] XFS (loop2): Quotacheck needed: Please wait.
[  364.942612][T12224] XFS (loop2): Quotacheck: Done.
[  365.100115][ T5845] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  365.555160][   T52] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  365.798880][   T52] usb 8-1: unable to get BOS descriptor or descriptor too short
[  365.829577][   T52] usb 8-1: unable to read config index 0 descriptor/start: -71
[  365.837178][   T52] usb 8-1: can't read configurations, error -71
[  366.257192][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2111'.
[  366.295552][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2111'.
[  366.338576][T12336] gtp0: entered promiscuous mode
[  366.369311][T12336] gtp0: entered allmulticast mode
[  369.521428][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2138'.
[  369.559787][    T8] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  369.741538][ T5840] Bluetooth: hci0: unexpected event for opcode 0x1804
[  369.783090][    T8] usb 8-1: unable to get BOS descriptor or descriptor too short
[  369.800044][    T8] usb 8-1: unable to read config index 0 descriptor/start: -71
[  369.811455][    T8] usb 8-1: can't read configurations, error -71
[  371.287141][T12446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2156'.
[  371.440794][T12452] trusted_key: syz.1.2159 sent an empty control message without MSG_MORE.
[  372.369681][    T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  372.547830][    T8] usb 8-1: config index 0 descriptor too short (expected 62519, got 36)
[  372.558519][    T8] usb 8-1: config 42 has too many interfaces: 153, using maximum allowed: 32
[  372.643079][    T8] usb 8-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config
[  372.659914][   T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  372.694053][    T8] usb 8-1: config 42 has 0 interfaces, different from the descriptor's value: 153
[  372.724394][    T8] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  372.773896][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.841597][   T52] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  372.869701][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.905813][   T52] usb 3-1: Product: syz
[  372.915952][   T52] usb 3-1: Manufacturer: syz
[  372.926304][   T52] usb 3-1: SerialNumber: syz
[  372.938252][   T52] usb 3-1: config 0 descriptor??
[  373.041422][    T8] usb 8-1: string descriptor 0 read error: -71
[  373.068042][    T8] usb 8-1: USB disconnect, device number 7
[  373.190228][   T52] usb 3-1: Firmware version (0.0) predates our first public release.
[  373.234164][   T52] usb 3-1: Please update to version 0.2 or newer
[  373.327726][   T52] usb 3-1: USB disconnect, device number 6
[  373.485545][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2172'.
[  373.780204][ T5840] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  373.788880][ T5840] Bluetooth: hci0: Injecting HCI hardware error event
[  373.798968][ T5840] Bluetooth: hci0: hardware error 0x00
[  374.896625][T12506] openvswitch: netlink: Multiple metadata blocks provided
[  375.970523][T12520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2183'.
[  376.035404][T12520] vlan2: entered promiscuous mode
[  376.463084][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'.
[  376.484170][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'.
[  376.828017][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  377.696575][T12548] loop7: detected capacity change from 0 to 32768
[  377.729465][T12548] XFS: ikeep mount option is deprecated.
[  377.796079][T12548] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  377.849181][T12548] XFS (loop7): Ending clean mount
[  377.866539][T12548] XFS (loop7): Quotacheck needed: Please wait.
[  377.900485][ T5897] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  377.971947][T12548] XFS (loop7): Quotacheck: Done.
[  378.068927][ T6690] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  378.092856][ T5897] usb 9-1: config 0 has an invalid interface number: 74 but max is 0
[  378.104182][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  378.118113][ T5897] usb 9-1: config 0 has no interface number 0
[  378.188027][ T5897] usb 9-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db
[  378.218292][ T5897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.259574][ T5897] usb 9-1: Product: syz
[  378.263771][ T5897] usb 9-1: Manufacturer: syz
[  378.268383][ T5897] usb 9-1: SerialNumber: syz
[  378.318881][ T5897] usb 9-1: config 0 descriptor??
[  378.539856][ T5897] usb 9-1: USB disconnect, device number 3
[  379.114363][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2209'.
[  379.156810][T12592] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2209'.
[  379.323676][T12596] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2210'.
[  380.454273][T12619] team0: Unable to change to the same mode the team is in
[  381.170282][T12632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2226'.
[  382.428615][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2234'.
[  382.682278][T12643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.754968][T12662] team0: Unable to change to the same mode the team is in
[  383.241198][T12672] loop7: detected capacity change from 0 to 512
[  383.250888][T12672] EXT4-fs: Ignoring removed bh option
[  384.104006][T12672] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  384.200228][T12672] EXT4-fs (loop7): 1 truncate cleaned up
[  384.206928][T12672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.028944][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.182218][T12749] team0: Unable to change to the same mode the team is in
[  390.191292][T12789] team0: Unable to change to the same mode the team is in
[  390.633038][T12801] loop8: detected capacity change from 0 to 512
[  390.642671][T12801] EXT4-fs: Ignoring removed bh option
[  390.674891][T12801] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  390.746653][T12801] EXT4-fs (loop8): 1 truncate cleaned up
[  390.757087][T12801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.366227][ T7263] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.326082][T12815] bond0: (slave syz_tun): Releasing backup interface
[  392.398558][T12822] team0: Unable to change to the same mode the team is in
[  393.691331][T12840] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  393.699111][T12840] netlink: 'syz.0.2286': attribute type 2 has an invalid length.
[  393.710338][T12840] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.2286'.
[  396.723554][T12889] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  398.278781][T12907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  400.432880][T12943] xt_CONNSECMARK: invalid mode: 0
[  401.348821][T12951] team0: Unable to change to the same mode the team is in
[  404.382233][T12998] team0: Unable to change to the same mode the team is in
[  404.848755][T13015] openvswitch: netlink: Multiple metadata blocks provided
[  405.300605][T13028] delete_channel: no stack
[  405.306029][T13028] delete_channel: no stack
[  406.935124][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'.
[  407.886853][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2366'.
[  408.576624][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2370'.
[  408.986623][T13076] netlink: 'syz.1.2371': attribute type 1 has an invalid length.
[  409.183562][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  409.194367][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  409.202761][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  409.211335][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  409.315510][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  409.323278][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  409.368312][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'.
[  409.517661][T13076] 8021q: adding VLAN 0 to HW filter on device bond2
[  409.626900][T13077] bond2: (slave gretap1): making interface the new active one
[  409.708497][T13077] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  410.971275][T13069] chnl_net:caif_netlink_parms(): no params data found
[  411.163624][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'.
[  411.283027][T13069] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.304216][T13069] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.318823][T13069] bridge_slave_0: entered allmulticast mode
[  411.328804][T13069] bridge_slave_0: entered promiscuous mode
[  411.394729][T13069] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.402156][ T5840] Bluetooth: hci1: command tx timeout
[  411.459276][T13069] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.488758][T13069] bridge_slave_1: entered allmulticast mode
[  411.534407][T13069] bridge_slave_1: entered promiscuous mode
[  411.738261][T13069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.793214][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'.
[  411.806430][T13069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.910735][T13069] team0: Port device team_slave_0 added
[  411.936423][T13069] team0: Port device team_slave_1 added
[  412.056557][T13069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  412.194128][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.222304][T13069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  412.258466][T13069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  412.284796][T13069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  412.334178][T13069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  412.438114][T13069] hsr_slave_0: entered promiscuous mode
[  412.451462][T13069] hsr_slave_1: entered promiscuous mode
[  412.519709][   T52] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  412.693142][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2398'.
[  412.706010][   T52] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  412.734082][   T52] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.771839][   T52] usb 8-1: Product: syz
[  412.786671][   T52] usb 8-1: Manufacturer: syz
[  412.794469][   T52] usb 8-1: SerialNumber: syz
[  412.804675][   T52] usb 8-1: config 0 descriptor??
[  412.860365][T13069] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  412.880900][T13069] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  412.889034][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  412.952571][T13069] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  412.980269][T13069] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  413.023351][ T5840] Bluetooth: hci5: unexpected event for opcode 0x1804
[  413.032677][   T52] usb 8-1: Firmware version (0.0) predates our first public release.
[  413.079652][   T52] usb 8-1: Please update to version 0.2 or newer
[  413.205208][   T52] usb 8-1: USB disconnect, device number 8
[  413.314585][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'.
[  413.386074][T13069] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.454339][T13069] 8021q: adding VLAN 0 to HW filter on device team0
[  413.470357][ T5840] Bluetooth: hci1: command tx timeout
[  413.488004][T12715] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.495150][T12715] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.512786][T12715] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.519978][T12715] bridge0: port 2(bridge_slave_1) entered forwarding state
[  413.925779][T13069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  413.956168][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2411'.
[  414.149970][T13216] batadv_slave_1: entered promiscuous mode
[  414.157055][T13215] batadv_slave_1: left promiscuous mode
[  414.412241][T13069] veth0_vlan: entered promiscuous mode
[  414.425867][T13069] veth1_vlan: entered promiscuous mode
[  414.473843][T13069] veth0_macvtap: entered promiscuous mode
[  414.490051][T13069] veth1_macvtap: entered promiscuous mode
[  414.552246][T13069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.571263][T13069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.597298][T13069] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.607574][T13069] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.617422][T13069] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.626505][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2418'.
[  414.643262][T13069] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.839432][T12705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.889342][T12705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.005959][T12711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.014381][T12711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.539656][ T5840] Bluetooth: hci1: command tx timeout
[  415.819760][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'.
[  415.837007][T13252] ip6gretap0: entered promiscuous mode
[  415.893913][T13252] batadv_slave_0: entered promiscuous mode
[  415.911126][T13252] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  415.918740][T13252] Cannot create hsr debugfs directory
[  417.376837][ T5840] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  417.385948][ T5840] Bluetooth: hci5: Injecting HCI hardware error event
[  417.395531][ T5840] Bluetooth: hci5: hardware error 0x00
[  417.490581][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'.
[  417.621896][ T5848] Bluetooth: hci1: command tx timeout
[  418.739623][T13296] gfs2: gfs2 mount does not exist
[  419.428508][T13305] loop9: detected capacity change from 0 to 512
[  419.546357][T13305] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.2447: casefold flag without casefold feature
[  419.650854][T13305] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2447: couldn't read orphan inode 15 (err -117)
[  419.714980][T13305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.908219][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  420.659659][T13069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  420.951739][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2455'.
[  421.680230][T13347] vlan0: entered promiscuous mode
[  422.651334][T13370] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  423.481184][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'.
[  424.279655][   T29] kauditd_printk_skb: 9 callbacks suppressed
[  424.279676][   T29] audit: type=1326 audit(1740814056.346:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13368 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260118d169 code=0x7fc00000
[  424.620337][    T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  424.821938][    T8] usb 8-1: config 0 has no interfaces?
[  424.830497][    T8] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  424.853824][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.885803][    T8] usb 8-1: Product: syz
[  424.913288][    T8] usb 8-1: Manufacturer: syz
[  424.940927][    T8] usb 8-1: SerialNumber: syz
[  424.969258][    T8] usb 8-1: config 0 descriptor??
[  425.186829][T13421] x_tables: ip6_tables: mh match: only valid for protocol 135
[  425.877335][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.900171][T13424] openvswitch: netlink: Multiple metadata blocks provided
[  425.936956][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.292789][    T8] usb 8-1: USB disconnect, device number 9
[  426.531353][T13438] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2495'.
[  427.230007][    T8] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  427.598141][    T8] usb 10-1: Using ep0 maxpacket: 32
[  427.685911][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.836174][    T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.875616][    T8] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  427.923631][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.453081][    T8] usb 10-1: config 0 descriptor??
[  428.475074][    T8] hub 10-1:0.0: USB hub found
[  428.683927][    T8] hub 10-1:0.0: 1 port detected
[  428.896041][    T8] hub 10-1:0.0: hub_hub_status failed (err = -71)
[  428.912702][T13480] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2511'.
[  428.914834][    T8] hub 10-1:0.0: config failed, can't get hub status (err -71)
[  428.960866][    T8] usbhid 10-1:0.0: can't add hid device: -71
[  428.994001][    T8] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  429.053549][    T8] usb 10-1: USB disconnect, device number 2
[  430.635163][T13492] overlayfs: failed to clone upperpath
[  433.021084][T13523] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2527'.
[  433.289988][T13540] netlink: zone id is out of range
[  433.295384][T13540] netlink: del zone limit has 8 unknown bytes
[  433.530559][T13544] netlink: 34 bytes leftover after parsing attributes in process `syz.7.2533'.
[  436.819242][T13576] : entered promiscuous mode
[  437.778716][T13586] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  437.787786][T13578] loop9: detected capacity change from 0 to 512
[  437.820553][T13578] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.2548: casefold flag without casefold feature
[  437.836446][T13578] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2548: couldn't read orphan inode 15 (err -117)
[  437.929921][T13578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.891392][T13069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.399714][T13636] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2558'.
[  439.608687][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  442.306607][T13674] netlink: 'syz.0.2572': attribute type 8 has an invalid length.
[  442.351688][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'.
[  442.457739][T13674] xt_time: invalid argument - start or stop time greater than 23:59:59
[  442.768726][T13662] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2567'.
[  442.892726][    T8] hid-generic 0005:07C0:06E6.0003: item fetching failed at offset 0/1
[  442.910340][    T8] hid-generic 0005:07C0:06E6.0003: probe with driver hid-generic failed with error -22
[  443.060381][T13696] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000
[  447.777386][T13735] infiniband syz1: set down
[  447.782440][T13735] infiniband syz1: added team_slave_0
[  447.915282][T13735] RDS/IB: syz1: added
[  447.919974][T13735] smc: adding ib device syz1 with port count 1
[  447.926273][T13735] smc:    ib device syz1 port 1 has pnetid 
[  448.409828][ T5940] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  448.796681][T13748] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  448.967650][T13749] loop7: detected capacity change from 0 to 512
[  449.052956][T13749] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #15: comm syz.7.2588: casefold flag without casefold feature
[  449.160150][T13749] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.2588: couldn't read orphan inode 15 (err -117)
[  449.310746][T13749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.888385][T13772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2599'.
[  450.263402][ T6690] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.099283][T13769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2598'.
[  453.815213][T13820] xt_TCPMSS: Only works on TCP SYN packets
[  453.939878][T13824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2618'.
[  456.913760][T13843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2624'.
[  457.861671][T13890] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  457.893825][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'.
[  457.907373][T13892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2639'.
[  458.063730][T13892] gtp0: entered promiscuous mode
[  458.068723][T13892] gtp0: entered allmulticast mode
[  458.465960][T13897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.028482][T13908] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  461.409884][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  461.641894][ T5896] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  461.674037][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.726190][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.777218][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  461.826187][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  461.859543][ T5896] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  461.896266][ T5896] usb 3-1: Manufacturer: syz
[  461.940335][ T5896] usb 3-1: config 0 descriptor??
[  463.301249][ T5896] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[  463.320386][ T5896] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[  464.305068][ T5896] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  464.325191][ T5896] usb 3-1: USB disconnect, device number 7
[  467.021451][T13095] IPVS: starting estimator thread 0...
[  467.137884][T13952] bond2: (slave gretap1): Releasing active interface
[  467.182889][T13955] IPVS: using max 18 ests per chain, 43200 per kthread
[  467.308869][T13956] team0: Unable to change to the same mode the team is in
[  467.380694][T13967] : entered promiscuous mode
[  469.883954][T13994] xt_socket: unknown flags 0x50
[  471.346708][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2675'.
[  472.749535][ T5896] IPVS: starting estimator thread 0...
[  472.851138][T14017] IPVS: using max 18 ests per chain, 43200 per kthread
[  475.527239][T14049] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  479.252401][T14084] netlink: 'syz.1.2703': attribute type 29 has an invalid length.
[  479.262449][T14084] netlink: 'syz.1.2703': attribute type 29 has an invalid length.
[  479.271806][T14084] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2703'.
[  479.282790][T14084] unsupported nla_type 58
[  585.789448][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  585.796436][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P14088/1:b..l
[  585.805098][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=50057, q=92 ncpus=2)
[  585.812742][    C1] task:syz.1.2703      state:R  running task     stack:25552 pid:14088 tgid:14082 ppid:5830   task_flags:0x40054c flags:0x00004000
[  585.827099][    C1] Call Trace:
[  585.830385][    C1]  <TASK>
[  585.833324][    C1]  __schedule+0x190e/0x4c90
[  585.837861][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.843517][    C1]  ? lockdep_hardirqs_on+0x70/0x150
[  585.848739][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.854405][    C1]  ? __pfx___schedule+0x10/0x10
[  585.859271][    C1]  ? lock_acquire+0x264/0x550
[  585.864075][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.869736][    C1]  ? preempt_schedule+0xe1/0xf0
[  585.874724][    C1]  preempt_schedule_common+0x84/0xd0
[  585.880059][    C1]  preempt_schedule+0xe1/0xf0
[  585.884768][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  585.890163][    C1]  ? folio_mark_accessed+0x54f/0xa90
[  585.895493][    C1]  preempt_schedule_thunk+0x1a/0x30
[  585.900729][    C1]  _raw_spin_unlock+0x3e/0x50
[  585.905430][    C1]  unmap_page_range+0x3a0d/0x4510
[  585.910513][    C1]  ? validate_chain+0x11e/0x5920
[  585.915502][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  585.920898][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.926563][    C1]  ? mas_next_node+0xb99/0xe00
[  585.931355][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.937029][    C1]  ? mas_next_slot+0xdc6/0xea0
[  585.941826][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.947493][    C1]  ? uprobe_munmap+0x183/0x460
[  585.952272][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.957927][    C1]  ? unmap_single_vma+0x1bd/0x2b0
[  585.962983][    C1]  unmap_vmas+0x3cc/0x5f0
[  585.967433][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  585.972362][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.978026][    C1]  ? tlb_gather_mmu_fullmm+0x160/0x210
[  585.983504][    C1]  exit_mmap+0x283/0xd40
[  585.987758][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  585.993442][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  585.998234][    C1]  ? __pfx_exit_aio+0x10/0x10
[  586.002944][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.008603][    C1]  ? uprobe_clear_state+0x271/0x290
[  586.013812][    C1]  ? mm_update_next_owner+0xa4/0x810
[  586.019118][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  586.024341][    C1]  __mmput+0x115/0x420
[  586.028429][    C1]  exit_mm+0x220/0x310
[  586.032526][    C1]  ? __pfx_exit_mm+0x10/0x10
[  586.037144][    C1]  ? taskstats_exit+0x326/0xa60
[  586.042026][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.047690][    C1]  do_exit+0x9ad/0x28e0
[  586.051873][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.057535][    C1]  ? __pfx_do_exit+0x10/0x10
[  586.062154][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  586.067553][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.073225][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  586.079318][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  586.085683][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  586.090817][    C1]  do_group_exit+0x207/0x2c0
[  586.095433][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  586.100736][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.106436][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  586.111686][    C1]  get_signal+0x168c/0x1720
[  586.116216][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.121875][    C1]  ? __pfx_get_signal+0x10/0x10
[  586.126769][    C1]  arch_do_signal_or_restart+0x96/0x860
[  586.132337][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  586.138507][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  586.144529][    C1]  ? syscall_exit_to_user_mode+0xa3/0x340
[  586.151067][    C1]  syscall_exit_to_user_mode+0xce/0x340
[  586.156647][    C1]  do_syscall_64+0x100/0x230
[  586.161270][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.167194][    C1] RIP: 0033:0x7f260118d169
[  586.171617][    C1] RSP: 002b:00007f26020560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  586.180165][    C1] RAX: fffffffffffffe00 RBX: 00007f26013a6088 RCX: 00007f260118d169
[  586.188162][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f26013a6088
[  586.196143][    C1] RBP: 00007f26013a6080 R08: 0000000000000000 R09: 0000000000000000
[  586.204121][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26013a608c
[  586.212099][    C1] R13: 0000000000000000 R14: 00007ffecf9a1550 R15: 00007ffecf9a1638
[  586.220130][    C1]  </TASK>
[  586.223166][    C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g50057 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  586.234375][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  586.244353][    C1] rcu: RCU grace-period kthread stack dump:
[  586.250242][    C1] task:rcu_preempt     state:R  running task     stack:26104 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00004000
[  586.263800][    C1] Call Trace:
[  586.267296][    C1]  <TASK>
[  586.270246][    C1]  __schedule+0x190e/0x4c90
[  586.274795][    C1]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  586.280743][    C1]  ? __pfx___schedule+0x10/0x10
[  586.285614][    C1]  ? __pfx_lock_release+0x10/0x10
[  586.290672][    C1]  ? __pfx___mod_timer+0x10/0x10
[  586.295719][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  586.302073][    C1]  ? schedule+0x90/0x320
[  586.306333][    C1]  schedule+0x14b/0x320
[  586.310509][    C1]  schedule_timeout+0x15a/0x290
[  586.315370][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  586.320756][    C1]  ? __pfx_process_timeout+0x10/0x10
[  586.326065][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.331726][    C1]  ? prepare_to_swait_event+0x330/0x350
[  586.337314][    C1]  rcu_gp_fqs_loop+0x2df/0x1330
[  586.342179][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  586.347401][    C1]  ? rcu_gp_init+0x1256/0x1630
[  586.352197][    C1]  ? __pfx_rcu_gp_init+0x10/0x10
[  586.357144][    C1]  ? __pfx_rcu_watching_snap_save+0x10/0x10
[  586.363138][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  586.368520][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  586.374437][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.380096][    C1]  ? finish_swait+0xd4/0x1e0
[  586.384711][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  586.389917][    C1]  rcu_gp_kthread+0xa7/0x3b0
[  586.394522][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  586.399732][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  586.405673][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.411428][    C1]  ? __kthread_parkme+0x169/0x1d0
[  586.416494][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  586.421742][    C1]  kthread+0x7ab/0x920
[  586.425865][    C1]  ? __pfx_kthread+0x10/0x10
[  586.430496][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  586.435796][    C1]  ? __pfx_kthread+0x10/0x10
[  586.440427][    C1]  ? __pfx_kthread+0x10/0x10
[  586.445053][    C1]  ? __pfx_kthread+0x10/0x10
[  586.449674][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  586.454889][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.460546][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  586.465851][    C1]  ? __pfx_kthread+0x10/0x10
[  586.470468][    C1]  ret_from_fork+0x4d/0x80
[  586.474903][    C1]  ? __pfx_kthread+0x10/0x10
[  586.479518][    C1]  ret_from_fork_asm+0x1a/0x30
[  586.484315][    C1]  </TASK>
[  586.487366][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  586.493712][    C1] Sending NMI from CPU 1 to CPUs 0:
[  586.498943][    C0] NMI backtrace for cpu 0
[  586.498960][    C0] CPU: 0 UID: 0 PID: 14094 Comm: syz.0.2690 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0
[  586.498985][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  586.499000][    C0] RIP: 0010:advance_sched+0x950/0xca0
[  586.499035][    C0] Code: 26 37 bd f7 48 81 c3 00 01 00 00 48 89 df 48 c7 c6 20 6c 04 8a e8 80 b1 a2 f7 eb 05 e8 09 37 bd f7 48 8b 44 24 20 48 89 04 24 <49> 8d 5f 80 48 8b 7c 24 18 48 83 c7 10 48 89 f8 48 c1 e8 03 42 80
[  586.499054][    C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00000006
[  586.499075][    C0] RAX: ffffffff8a0486de RBX: 182e2fb77c000000 RCX: ffff88802979bc00
[  586.499093][    C0] RDX: 0000000000010000 RSI: 0000000004000000 RDI: 0000000000000000
[  586.499108][    C0] RBP: ffff8880128368c8 R08: ffffffff8a048453 R09: fffff52000000f7c
[  586.499126][    C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: dffffc0000000000
[  586.499143][    C0] R13: ffff888012836808 R14: ffff888012836800 R15: ffff888035917340
[  586.499164][    C0] FS:  00007fad44f296c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  586.499184][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  586.499200][    C0] CR2: 0000001b2d316ff8 CR3: 000000003ad20000 CR4: 0000000000350ef0
[  586.499218][    C0] Call Trace:
[  586.499229][    C0]  <NMI>
[  586.499240][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  586.499268][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  586.499307][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  586.499332][    C0]  ? nmi_handle+0x2a/0x5a0
[  586.499402][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  586.499433][    C0]  ? nmi_handle+0x151/0x5a0
[  586.499468][    C0]  ? nmi_handle+0x2a/0x5a0
[  586.499505][    C0]  ? advance_sched+0x950/0xca0
[  586.499531][    C0]  ? default_do_nmi+0x63/0x160
[  586.499557][    C0]  ? exc_nmi+0x123/0x1f0
[  586.499580][    C0]  ? end_repeat_nmi+0xf/0x53
[  586.499618][    C0]  ? advance_sched+0x583/0xca0
[  586.499643][    C0]  ? advance_sched+0x80e/0xca0
[  586.499671][    C0]  ? advance_sched+0x950/0xca0
[  586.499698][    C0]  ? advance_sched+0x950/0xca0
[  586.499726][    C0]  ? advance_sched+0x950/0xca0
[  586.499752][    C0]  </NMI>
[  586.499765][    C0]  <IRQ>
[  586.499783][    C0]  ? __pfx_advance_sched+0x10/0x10
[  586.499811][    C0]  __hrtimer_run_queues+0x59d/0xd30
[  586.499849][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  586.499873][    C0]  ? sched_clock+0x4a/0x70
[  586.499902][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.499938][    C0]  ? ktime_get_update_offsets_now+0x38e/0x3b0
[  586.499978][    C0]  hrtimer_interrupt+0x403/0xa40
[  586.500019][    C0]  __sysvec_apic_timer_interrupt+0x112/0x420
[  586.500059][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  586.500090][    C0]  </IRQ>
[  586.500097][    C0]  <TASK>
[  586.500107][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  586.500141][    C0] RIP: 0010:__skb_try_recv_datagram+0x194/0x6a0
[  586.500167][    C0] Code: 08 48 89 44 24 58 49 c1 ef 03 4c 89 7c 24 38 4c 89 e8 4c 89 6c 24 20 49 c1 ed 03 4c 89 6c 24 68 4c 8b 74 24 28 4c 8b 6c 24 70 <4c> 89 ef e8 54 b3 44 02 48 89 c3 48 8b 74 24 40 8b 54 24 04 48 8b
[  586.500186][    C0] RSP: 0018:ffffc9000f287600 EFLAGS: 00000212
[  586.500206][    C0] RAX: ffff88802b1732e8 RBX: ffff88802b173180 RCX: ffffffff89c22a70
[  586.500223][    C0] RDX: ffff88802979bc00 RSI: 0000000000000000 RDI: 0000000000000000
[  586.500239][    C0] RBP: ffffc9000f287710 R08: ffffffff89c66e1f R09: ffffc9000f287800
[  586.500256][    C0] R10: dffffc0000000000 R11: fffffbfff2079def R12: dffffc0000000000
[  586.500273][    C0] R13: ffff88802b173280 R14: ffffc9000f287800 R15: 1ffff92001e50ed4
[  586.500295][    C0]  ? __skb_try_recv_datagram+0x14f/0x6a0
[  586.500319][    C0]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  586.500359][    C0]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  586.500392][    C0]  ? __pfx___skb_try_recv_datagram+0x10/0x10
[  586.500416][    C0]  ? __lock_acquire+0x1397/0x2100
[  586.500457][    C0]  __unix_dgram_recvmsg+0x3c3/0x1320
[  586.500498][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.500535][    C0]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[  586.500570][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.500609][    C0]  ? iovec_from_user+0x61/0x240
[  586.500639][    C0]  ? __pfx___might_resched+0x10/0x10
[  586.500672][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.500708][    C0]  ? __import_iovec+0x3bf/0x830
[  586.500735][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.500784][    C0]  ? unix_dgram_recvmsg+0xb6/0xe0
[  586.500806][    C0]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[  586.500830][    C0]  sock_recvmsg_nosec+0x190/0x1d0
[  586.500863][    C0]  ____sys_recvmsg+0x3cd/0x480
[  586.500892][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  586.500923][    C0]  ? do_recvmmsg+0x44e/0xab0
[  586.500944][    C0]  ? __might_fault+0xaa/0x120
[  586.500971][    C0]  do_recvmmsg+0x426/0xab0
[  586.501001][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  586.501022][    C0]  ? __pfx_futex_wake_mark+0x10/0x10
[  586.501067][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.501105][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  586.501141][    C0]  ? futex_wait+0x285/0x360
[  586.501178][    C0]  ? __pfx_futex_wait+0x10/0x10
[  586.501219][    C0]  ? fd_install+0x9c/0x5d0
[  586.501250][    C0]  ? __pfx_lock_release+0x10/0x10
[  586.501294][    C0]  ? __pfx_do_futex+0x10/0x10
[  586.501334][    C0]  __x64_sys_recvmmsg+0x199/0x250
[  586.501360][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  586.501384][    C0]  ? do_syscall_64+0x100/0x230
[  586.501448][    C0]  ? do_syscall_64+0xb6/0x230
[  586.501482][    C0]  do_syscall_64+0xf3/0x230
[  586.501518][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.501550][    C0] RIP: 0033:0x7fad4418d169
[  586.501570][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  586.501589][    C0] RSP: 002b:00007fad44f29038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  586.501611][    C0] RAX: ffffffffffffffda RBX: 00007fad443a6080 RCX: 00007fad4418d169
[  586.501628][    C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000006
[  586.501643][    C0] RBP: 00007fad4420e2a0 R08: 0000000000000000 R09: 0000000000000000
[  586.501658][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  586.501672][    C0] R13: 0000000000000000 R14: 00007fad443a6080 R15: 00007fff13496018
[  586.501699][    C0]  </TASK>