last executing test programs:

3m46.77707409s ago: executing program 3 (id=28):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ptrace$setsig(0x4203, 0xffffffffffffffff, 0x7, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff04800000080039503230"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
semget$private(0x0, 0x0, 0x2)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0)

3m44.569736181s ago: executing program 3 (id=31):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r0=>0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
syz_emit_ethernet(0x52, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="900000001000010400000000f9ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000680012800e00010069703665727370616e0000005400028006000300060000000500160011000000040012"], 0x90}}, 0x4000000)
unshare(0x26020480)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000000880)={{}, 0xfe})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28)
timer_create(0x3, 0x0, &(0x7f0000044000))
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
ptrace$cont(0x9, r5, 0x870, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00'}, 0x10)
capget(0x0, 0x0)

3m39.795980778s ago: executing program 3 (id=36):
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000300), 0x6, 0x0)
ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0xfffffe01, 0x80, '\x00', &(0x7f0000000180)=0x5})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, 0x0, 0x0)
r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000540)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x2, r8})
syz_open_dev$radio(0x0, 0x2, 0x2)
r9 = socket(0x1e, 0x4, 0x0)
connect$tipc(r9, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0)

3m38.992810956s ago: executing program 2 (id=39):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
syz_open_dev$I2C(0x0, 0x80, 0x14000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x1c)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r8, 0x1, 0xffffffff, 0x0, {{}, {}, {0xfffffffffffffd2b, 0x19, {0xfffffffe, 0x9, 0x0, 0x20000000}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r8, 0x20, 0x1, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x16}}, ["", "", "", ""]}, 0x24}}, 0x40844)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)

3m38.740763831s ago: executing program 3 (id=40):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x41b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x400}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x10, 0x1400, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x95)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xa, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7020000142bdc9ca02c000000b7030000000000008500000008000000bf090000000000004509b4532d9c00009500000000000000bf91000000000000b70c31000000000085000000b5000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x7, 0x0, 0x4}]}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'wlan1\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007"], 0x48)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
r7 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00')
preadv(r7, &(0x7f0000002180)=[{&(0x7f0000001180)=""/4076, 0xfec}, {0x0}], 0x2, 0x29d1, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3m37.373130219s ago: executing program 2 (id=42):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x0, 0x80, 0xffffffff, 0x3a6}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040000})
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
listen(0xffffffffffffffff, 0x8001)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000300)={0x800000, 0x80, 0xffffffb9, 0x7, 0xfffffffd, 0x4})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000500)={0x800080, 0x858, 0x8, 0x100, 0x43, 0x20055c})

3m34.723805354s ago: executing program 3 (id=45):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x9, 0xfb, 0x8, 0x501}, 0xc)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
pipe2$watch_queue(&(0x7f0000001180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80)
r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r6, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r7, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r2}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d6163000000000500050000000000140007800800124000050000050015000c000000090002"], 0x5c}}, 0x0)

3m32.487668294s ago: executing program 2 (id=47):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = inotify_init()
fcntl$addseals(r0, 0x409, 0x2)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r4, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffffffffc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x06'}]}}}]}]}], {0x14}}, 0x58}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

3m29.116867955s ago: executing program 2 (id=51):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000140))
syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01)
openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000204000000000000000000000002040100000004d10000fe0200000000"], 0x20}, 0x1, 0x7}, 0x0)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x918)
r3 = socket$inet6(0xa, 0xa, 0x8000)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x18}, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff020400", 0x4)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x800, 0x0, @loopback, 0x3}, 0x1c)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaa", @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

3m27.186394947s ago: executing program 3 (id=55):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000510000/0x800000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x31)
syz_usb_connect$uac1(0x3, 0xb1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x4, 0x113, &(0x7f0000001880)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1009}}, {0x2, &(0x7f0000000240)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1801}}]})

3m25.431427479s ago: executing program 2 (id=57):
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000500)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioprio_set$pid(0x2, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000001f00)={0x14, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfd, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

3m11.84158847s ago: executing program 32 (id=55):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000510000/0x800000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x31)
syz_usb_connect$uac1(0x3, 0xb1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x4, 0x113, &(0x7f0000001880)=ANY=[], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1009}}, {0x2, &(0x7f0000000240)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1801}}]})

3m11.23552082s ago: executing program 2 (id=67):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[<r4=>0x0], &(0x7f00000000c0), 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000000)={0x4, r4})
r5 = fanotify_init(0x8, 0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
fanotify_mark(r7, 0x21, 0x8000008, r7, 0x0)
connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff03142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x8, @loopback, 0x11f8}}, 0x0, 0x0, 0x2f, 0x0, "a1f35018226cdb2658884337cdaf7391320e690075f6b2036fc299fc0df35662e864905cd13fd5a916cca7a8ba1efadbb6a36bc085e37ca7e66d2571bc84df875b1cd20539daf6158aa52f84342d1159"}, 0xd8)
write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[], 0x9cf)

2m55.67491423s ago: executing program 33 (id=67):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000240), 0x36, 0xcc800)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[<r4=>0x0], &(0x7f00000000c0), 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000000)={0x4, r4})
r5 = fanotify_init(0x8, 0x0)
r6 = epoll_create1(0x0)
r7 = fcntl$dupfd(r5, 0x0, r6)
fanotify_mark(r7, 0x21, 0x8000008, r7, 0x0)
connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff03142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x8, @loopback, 0x11f8}}, 0x0, 0x0, 0x2f, 0x0, "a1f35018226cdb2658884337cdaf7391320e690075f6b2036fc299fc0df35662e864905cd13fd5a916cca7a8ba1efadbb6a36bc085e37ca7e66d2571bc84df875b1cd20539daf6158aa52f84342d1159"}, 0xd8)
write$binfmt_aout(r9, &(0x7f0000000480)=ANY=[], 0x9cf)

2m31.238828937s ago: executing program 1 (id=102):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})
sendto$packet(r0, &(0x7f00000008c0)="0f", 0x1, 0x800, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, "00769aff95595915303d74ffdeffff000400"})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCFLSH(r2, 0x80045440, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000002e40)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x24044044}}], 0x1, 0x0)
fcntl$lock(r5, 0x4794f7b0036c1bca, &(0x7f0000000540)={0x2, 0x2, 0xfffffffffffffffd, 0x350})
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x38011, r7, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x800, r8}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000000), 0x20008, r8}, 0x38)
r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0)
fcntl$lock(r6, 0x20, &(0x7f0000000580)={0x2, 0x2, 0xf7, 0x8})
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io$hid(r9, &(0x7f0000000100)={0x24, &(0x7f0000000640)={0x40, 0x4, 0x59, {0x59, 0x6, "b6d8aab2b2eebcb1d14adc01a98ce88d42477ea3d529ab28a284e6cb897fb0880c3b832cba5b36bbd91cb67b0ea2bbc5c3791db83049e5bd15d5b8238c8cee4e612e7150fab793021455df61e151c9a4c126edacd7b04e"}}, &(0x7f0000000180)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "08fe240d908f80b4703822ab8315036986a1d5345f804709fd83b02dcaf42c484053776c819c7645aa65986938765a06a65075f54a1ff4ffafb5115f0074323dee50aba5b27ebbac34265b989097978c8193ac1bb853bc9ac490f9eca342b0bca4a1d121b9ce69a38c1f71f102dc4bed8cb6f52a81aa0cdf66e5b99c8ad082fd6530e7cfe3108ab944b5cab37ca699ee854ada7a71864c2d6ee2cbd5a5dd30773d5f1c5847fd8d611f80f8ed3263954f2971b74d433e0e21ee6831d6b9cad644c1284eee9c53950e5b65c0aba9e0d0ebf587f73faaa8ff2a89a18fa8ca311ad836954301520c0ea2293206b42006375e"}}, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@local, @local=@item_4={0x3, 0x2, 0x9, "ab53bce6"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3f93, 0x53, 0x1, {0x22, 0xf71}}}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r10)

2m27.13816648s ago: executing program 1 (id=106):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
socket(0x25, 0x5, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
lsm_set_self_attr(0x64, &(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00o\x00\x00\x00\x00\x00\x00\x00 \x00'/27], 0x20, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = syz_open_procfs(0x0, 0x0)
pread64(r1, &(0x7f0000000000)=""/15, 0xf, 0x7fff)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1be)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r3, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)={0x1, [0x1]}, 0x6)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x2, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0x4, 0x0, 0x7, 0x4, 0x0, 0x1, 0x3, 0x4b, 0x0, 0xa}, {0x10000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x7}, {0xeeee8000, 0x1, 0x8, 0x0, 0xff, 0x7, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff, 0x80}, {0x8080000, 0xeeee0000, 0xa, 0x6, 0x5, 0x0, 0x68, 0x0, 0x1, 0xf9}, {0x0, 0xdddd0000, 0x0, 0x2, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x1}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x0, 0xb, 0x7801, 0x0, [0x0, 0x0, 0x401]})
ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4})

2m20.973632596s ago: executing program 1 (id=119):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioperm(0x0, 0x7, 0x7)
unshare(0x400)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0))
r3 = syz_open_procfs(0x0, 0x0)
lseek(r3, 0x100000000, 0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x1800000000000000, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x110)
ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)

2m18.074486292s ago: executing program 1 (id=112):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000000c0)=0x32)
r8 = syz_open_dev$cec(0x0, 0x0, 0x401)
ioctl$CEC_S_MODE(r8, 0xc05c6104, &(0x7f00000000c0)=0xa)
sendto$packet(r2, &(0x7f0000000240)="f2435f010008800000000085", 0xc, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x305, 0x0, 0x4, 0x0, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

2m12.533482209s ago: executing program 1 (id=121):
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getresgid(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
getrusage(0x1, &(0x7f0000000300))
sendmsg$inet6(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x169}], 0x1}, 0x20000044)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmsg$alg(r6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/36, 0x24}], 0x1}, 0x0)
shutdown(r4, 0x0)

2m9.268560345s ago: executing program 1 (id=124):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0xfc83, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x4)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}, {&(0x7f0000000b80)}], 0x3}}], 0x1, 0xc0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf24010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$inet(r4, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7)

1m54.062244975s ago: executing program 34 (id=124):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4)
sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0xfc83, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x4)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005)
sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}, {&(0x7f0000000b80)}], 0x3}}], 0x1, 0xc0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf24010000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendto$inet(r4, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7)

26.924534314s ago: executing program 4 (id=241):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="058d669520f986c7bda6913b040986c91b7dc55aff90aba708ad003eb3662a90fac98efb600b3f91f6a77553c097dde1ed521e81aaa10a27515dc8a67413b3aa663268d9682378c0973c8d8a03c01490e75fa11dd1254ad59495d6df8e73286d601170fef94e989b92088ad235e8afaea5608606d9111d9b2d68f22430d065a02f1b2ebe37fd6797bf19a3088915a5e7836cb9f090de82", @ANYRES16=r5, @ANYBLOB, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040), &(0x7f0000000600))

25.383278553s ago: executing program 4 (id=245):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)

19.743852309s ago: executing program 5 (id=253):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'erspan0\x00'})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)

17.440833582s ago: executing program 4 (id=255):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000002"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r5, &(0x7f0000000000), 0xd)
sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x2011, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

16.262169824s ago: executing program 6 (id=256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}, 0x24)
sendmsg$inet(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
recvfrom$rxrpc(r2, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r1, 0x0, 0x417}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x9}}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)

15.048834917s ago: executing program 6 (id=257):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x28, 0x0, 0x18, 0x0, @wg=@data={0x3a}}}}}}}, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
futex(0x0, 0x4, 0x1, 0x0, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bind$bt_rfcomm(r3, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0xc0002, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="697bb55abf8e23d7"}, 0x21, 0x0, '\x00', @c})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r1})
ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$FIONCLEX(r1, 0x5450)

13.279124614s ago: executing program 0 (id=258):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000240)={<r7=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x9f)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff)
r8 = getuid()
keyctl$chown(0x4, r6, r8, 0xee01)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0)

13.277660513s ago: executing program 5 (id=259):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x4, 0x4)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x2)
r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_change_rule(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5d202b40273a207203206074"], 0xd)
fchdir(r3)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0xc010)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1ff, 0x8, 0x34424752, 0x9, 0xb, [{0x0, 0x103}, {0x0, 0x7fff}, {}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {}, {0xffff61b9}], 0x0, 0x0, 0x0, 0x0, 0x6}})
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x51f081, 0x488)
ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0)

13.276723272s ago: executing program 4 (id=260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup2(r0, r0)
eventfd(0x0)
r4 = socket(0x2, 0x3, 0x6)
bind$inet(r4, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b402000000000000611173000000000085000000000000009500000000000000895b1e032297a3b413bb4391ac8ea6da97ba636389b133d4743799cf66383dbd121f70043e58f0b9164b4a62edc5c68ebcc5dc6744c119ef05c29f5230c9cb828d1709c4ebd6d4b96ea77d0fcf51a4e9bab774db4d91efb48871188000836df059f2ed7a7205a971777f22ca0214aa9a9fab993e600d5b3ae8dcbc0d4880a9c708e4cc0c"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000))
r5 = getpid()
r6 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
setns(r6, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
r7 = getpid()
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94)
r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRESOCT=r10, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

12.772726383s ago: executing program 6 (id=261):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000510000/0x800000)=nil)
mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil)
mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x31)
syz_usb_connect$uac1(0x3, 0xb1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000e00)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x4, 0x113, &(0x7f0000001880)=ANY=[@ANYBLOB="12010102020000ff2505a1a440000102030109020101010103800f0904005c020206000808240600005d7d7d052400ff400d240f01e882000000000300100c241b0063ae00067900044096241305a0e121c2df624f7f72d8648599df48e69c1f16e7d5f5a995c132619915e501f62d2adb298d198929792559a6fce624e01f1f5723aee3d25fa58b49f8ad95f49ca549caebd4deb1f057a578342ab9523229c25a291d82ca0660cf78018fdcd1e4d4eb091db84b2a0e91e6c6a80ed79182410528d9e59beb088a1110b64175d88df9a3b0be884883eda52da32a203d06d2f2bf07240a0680af5b045e4f01a607c0ffcb7e392a09058202200007030a09050302ff03050904ed9becd67c3200a1a919be0291feac10156fdc50613d07a9e011fd7623ce479b4a2cd7cdded3aa304b80fd5a6f690c9ed621a7536a9b7c454fa3bf0f875363f6"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1009}}, {0x2, &(0x7f0000000240)=ANY=[@ANYBLOB]}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1801}}]})

12.158267751s ago: executing program 4 (id=262):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
socket$inet6(0xa, 0x3, 0x9)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_netdev_private(r8, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, 0x0)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e01e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60008890}, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x0, 0x0, 0x7, 0xd580}, 0x20)

11.499160604s ago: executing program 0 (id=263):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x130, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x2e59}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000180)=0x6, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x81}], 0x2, 0x0, 0x0, 0x8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0xcf, 0xfffffff9, 0x5, 0x1, 0x2, r2})
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r5)
write(r1, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0x3}, 0x1c)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='yeah\x00', 0x5)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x100000001, 0x640302)

11.332463865s ago: executing program 5 (id=264):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)

8.23600918s ago: executing program 5 (id=265):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000080)=0x2, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x80, &(0x7f0000001300)={0x10, 0x2}, 0x10)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x20001000)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040))
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$inet6(r6, 0x0, &(0x7f0000000080))
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
socket(0x2, 0x640cf1b9336d5466, 0x0)
read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020)

8.035976006s ago: executing program 6 (id=266):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r4, 0x25, 0xb, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf2, 0x0, 0x0, 0x3c}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x5e22, 0xffffffff, @local, 0xfffffffc}, 0x1c)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000, 0xe, 0x20385655, 0x1, 0x3, 0x6, 0x3, 0x4, 0x0, 0x8, 0x1, 0x4}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711214000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7.805348169s ago: executing program 0 (id=267):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x6, 0xffff, 0x1, 0x4, 0x7, <r5=>0x0}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c000000190a01020000000000000000000000000900010073797a30000000000c0006400000000000000002240005800800015a0000a23c08000140000000320800024000000007080001400000002f0900020073797a300000000020000740d07d45b2ea3eec53a10c6b79cc855cf3348d80c823b4913af25a90a908000a400000000208000a4000000000040005800900010073797a3000000000"], 0x9c}}, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, &(0x7f0000000100)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
dup(0xffffffffffffffff)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c})

5.327186768s ago: executing program 0 (id=268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2d, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100))
io_uring_enter(r5, 0xd81, 0x0, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/exec\x00')
read$FUSE(r6, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000240)={<r7=>0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r7, 0x4}, &(0x7f0000000340)=0x8)
fstat(r0, &(0x7f0000000140))
r8 = socket$inet(0x2b, 0x801, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000000", 0x1b)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x48f, &(0x7f0000000000)={0x5c, @private=0xa010100, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

5.279588577s ago: executing program 6 (id=269):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}}, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000000000000800ac1414bb0800070080000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
r4 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x1d, &(0x7f0000000140), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r6, 0x0)
connect$x25(r6, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
r7 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[<r8=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r8, <r9=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={r9, 0x5bbc, 0x5, 0x0, 0x2, [<r10=>0x0], [0x0, 0x7ff], [0x0, 0x0, 0x100, 0x2000d], [0x0, 0x0, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, <r11=>0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r5, @ANYRES16=r12, @ANYBLOB="00042dbd7000fbdbdf2502000000080001000000000008000200020000000800020002"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x13, r11, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040080)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r13 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
pwritev(r13, 0x0, 0x0, 0x6, 0xfffffff2)

4.154437955s ago: executing program 0 (id=270):
syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080), &(0x7f0000000100))
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FRA_TUN_ID={0xc, 0x14, 0x1, 0x0, 0x8000000000000001}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'pim6reg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0xc0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x50, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x4}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7759e8af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9b3680}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8567}]}]}]}, 0x50}}, 0x0)
r8 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0)
sendmmsg(r8, &(0x7f0000005c00), 0x56, 0x4040000)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000100), 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macsec0\x00', 0x497d25921bb64c42})
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')

3.978461729s ago: executing program 5 (id=271):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040)=0x4, 0x4)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x2)
r4 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_change_rule(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5d202b40273a207203206074"], 0xd)
fchdir(r3)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r7, 0x4b47, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x1ff, 0x8, 0x34424752, 0x9, 0xb, [{0x0, 0x103}, {0x0, 0x7fff}, {}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {}, {0xffff61b9}], 0x0, 0x0, 0x0, 0x0, 0x6}})
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x51f081, 0x488)
ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0)

3.94923696s ago: executing program 4 (id=272):
syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
listen(r0, 0xfffffffd)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]})
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x3}]})
close(r4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="307245880605f8", 0x7}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800)
r7 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4008, 0x3, 0x260, 0x0, 0x500b, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'lo\x00', 'team_slave_0\x00', {}, {}, 0x1, 0x3}, 0x0, 0x90, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xe, [0x0, 0x0, 0xa, 0x0, 0xfffe, 0x23, 0x1, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)

2.70490298s ago: executing program 6 (id=273):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400))
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200))
pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x9f)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff)
r6 = getuid()
keyctl$chown(0x4, r4, r6, 0xee01)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x51, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000099473089911296859980000000129023f000105002003d4d45005000000d200090506034000070e0509050700000004020309050800000404fe0709050400ff030302040905"], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0})
syz_open_procfs(0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0)

2.69661288s ago: executing program 0 (id=274):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)

0s ago: executing program 5 (id=275):
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}})
r6 = socket(0x28, 0x5, 0x0)
r7 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r7, 0x4)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
accept4$unix(r7, 0x0, 0x0, 0x800)
io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
socket(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts.
[   84.418006][ T5805] cgroup: Unknown subsys name 'net'
[   84.549783][ T5805] cgroup: Unknown subsys name 'cpuset'
[   84.558796][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   86.148387][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   88.828403][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.836752][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.846371][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.854019][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.862772][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.870692][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.878362][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.906688][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.947287][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.963298][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.980459][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.984544][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.994669][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.995810][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.002992][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.009495][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.018044][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.024329][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.030178][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   89.037367][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.044919][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.051505][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.069120][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.085366][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.101212][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   89.709397][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   89.857429][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   89.868952][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   90.035485][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   90.071585][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   90.095432][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.103959][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.111698][ T5818] bridge_slave_0: entered allmulticast mode
[   90.119099][ T5818] bridge_slave_0: entered promiscuous mode
[   90.128096][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.135186][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.142667][ T5818] bridge_slave_1: entered allmulticast mode
[   90.150117][ T5818] bridge_slave_1: entered promiscuous mode
[   90.283967][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.291171][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.298677][ T5816] bridge_slave_0: entered allmulticast mode
[   90.306306][ T5816] bridge_slave_0: entered promiscuous mode
[   90.314390][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.321609][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.329081][ T5816] bridge_slave_1: entered allmulticast mode
[   90.336511][ T5816] bridge_slave_1: entered promiscuous mode
[   90.357157][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.364329][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.372109][ T5817] bridge_slave_0: entered allmulticast mode
[   90.379426][ T5817] bridge_slave_0: entered promiscuous mode
[   90.388654][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.396267][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.403432][ T5817] bridge_slave_1: entered allmulticast mode
[   90.411782][ T5817] bridge_slave_1: entered promiscuous mode
[   90.443717][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.457856][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.566975][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.581299][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.593698][ T5818] team0: Port device team_slave_0 added
[   90.602691][ T5818] team0: Port device team_slave_1 added
[   90.611693][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.625827][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.719044][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.726314][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.733642][ T5824] bridge_slave_0: entered allmulticast mode
[   90.741079][ T5824] bridge_slave_0: entered promiscuous mode
[   90.748999][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.756728][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.763920][ T5819] bridge_slave_0: entered allmulticast mode
[   90.772515][ T5819] bridge_slave_0: entered promiscuous mode
[   90.796384][ T5816] team0: Port device team_slave_0 added
[   90.817791][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.824777][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.851737][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.880020][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.887568][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.894675][ T5824] bridge_slave_1: entered allmulticast mode
[   90.902163][ T5824] bridge_slave_1: entered promiscuous mode
[   90.924599][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.932124][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.939665][ T5819] bridge_slave_1: entered allmulticast mode
[   90.947497][ T5819] bridge_slave_1: entered promiscuous mode
[   90.956099][ T5816] team0: Port device team_slave_1 added
[   90.962551][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.969763][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.995776][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.010063][ T5817] team0: Port device team_slave_0 added
[   91.062571][ T5817] team0: Port device team_slave_1 added
[   91.068239][ T5823] Bluetooth: hci1: command tx timeout
[   91.085478][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.122844][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.129980][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.155940][ T5823] Bluetooth: hci3: command tx timeout
[   91.156190][ T5823] Bluetooth: hci4: command tx timeout
[   91.156307][ T5823] Bluetooth: hci2: command tx timeout
[   91.156412][ T5823] Bluetooth: hci0: command tx timeout
[   91.179032][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.206631][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.232697][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.260384][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.267548][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.295158][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.306816][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.313771][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.340238][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.366921][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.416311][ T5818] hsr_slave_0: entered promiscuous mode
[   91.423032][ T5818] hsr_slave_1: entered promiscuous mode
[   91.430404][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.437653][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.463736][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.484209][ T5824] team0: Port device team_slave_0 added
[   91.508887][ T5819] team0: Port device team_slave_0 added
[   91.519413][ T5824] team0: Port device team_slave_1 added
[   91.527200][ T5819] team0: Port device team_slave_1 added
[   91.638296][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.645375][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.671448][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.692097][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.699587][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.725699][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.738563][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.745949][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.771999][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.802014][ T5816] hsr_slave_0: entered promiscuous mode
[   91.808486][ T5816] hsr_slave_1: entered promiscuous mode
[   91.814587][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.822398][ T5816] Cannot create hsr debugfs directory
[   91.834917][ T5817] hsr_slave_0: entered promiscuous mode
[   91.842007][ T5817] hsr_slave_1: entered promiscuous mode
[   91.849082][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   91.856725][ T5817] Cannot create hsr debugfs directory
[   91.863025][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.870697][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.877526][   T43] cfg80211: failed to load regulatory.db
[   91.902423][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.046591][ T5819] hsr_slave_0: entered promiscuous mode
[   92.053083][ T5819] hsr_slave_1: entered promiscuous mode
[   92.062703][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.070488][ T5819] Cannot create hsr debugfs directory
[   92.157595][ T5824] hsr_slave_0: entered promiscuous mode
[   92.163956][ T5824] hsr_slave_1: entered promiscuous mode
[   92.170778][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.178612][ T5824] Cannot create hsr debugfs directory
[   92.660473][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.681274][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.708257][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   92.727599][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.773001][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.784662][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.808074][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.834526][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.881966][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.903519][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.935049][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.959316][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.052666][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.089775][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.127341][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.138914][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.156639][ T5827] Bluetooth: hci1: command tx timeout
[   93.209428][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.219989][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.236001][ T5827] Bluetooth: hci0: command tx timeout
[   93.241549][ T5827] Bluetooth: hci2: command tx timeout
[   93.245831][ T5823] Bluetooth: hci4: command tx timeout
[   93.247314][ T5827] Bluetooth: hci3: command tx timeout
[   93.263011][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.273878][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.298670][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.364403][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.407409][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   93.421167][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   93.471378][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.478635][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.491166][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.498298][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.509270][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.516444][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.544966][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.552133][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.611110][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.671471][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   93.691819][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.699068][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.728423][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.744746][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.751927][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.764041][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.823240][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   93.860938][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   93.896689][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.904050][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.941734][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.948968][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.969553][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.976752][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.012298][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.051567][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.058761][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.481111][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.550840][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.684346][ T5816] veth0_vlan: entered promiscuous mode
[   94.701831][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.724407][ T5818] veth0_vlan: entered promiscuous mode
[   94.745156][ T5816] veth1_vlan: entered promiscuous mode
[   94.763520][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.794720][ T5818] veth1_vlan: entered promiscuous mode
[   94.814279][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.889788][ T5816] veth0_macvtap: entered promiscuous mode
[   94.931996][ T5816] veth1_macvtap: entered promiscuous mode
[   94.961994][ T5818] veth0_macvtap: entered promiscuous mode
[   95.003700][ T5819] veth0_vlan: entered promiscuous mode
[   95.021926][ T5818] veth1_macvtap: entered promiscuous mode
[   95.072403][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.096409][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.104381][ T5819] veth1_vlan: entered promiscuous mode
[   95.143277][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.158761][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.167521][ T5824] veth0_vlan: entered promiscuous mode
[   95.194960][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.204878][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.214535][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.223700][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.233096][ T5827] Bluetooth: hci1: command tx timeout
[   95.257587][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.267443][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.276679][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.286344][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.306290][ T5827] Bluetooth: hci4: command tx timeout
[   95.306305][ T5835] Bluetooth: hci2: command tx timeout
[   95.306342][ T5835] Bluetooth: hci0: command tx timeout
[   95.316162][ T5823] Bluetooth: hci3: command tx timeout
[   95.341197][ T5824] veth1_vlan: entered promiscuous mode
[   95.361806][ T5819] veth0_macvtap: entered promiscuous mode
[   95.391596][ T5819] veth1_macvtap: entered promiscuous mode
[   95.500393][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.523812][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.531280][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.562845][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.608302][ T5824] veth0_macvtap: entered promiscuous mode
[   95.631452][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.640840][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.643293][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.658095][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.658603][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.674712][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.691012][ T5817] veth0_vlan: entered promiscuous mode
[   95.722930][ T5824] veth1_macvtap: entered promiscuous mode
[   95.738563][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.756398][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.768020][ T5817] veth1_vlan: entered promiscuous mode
[   95.818607][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   95.838573][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.860525][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.917687][ T5817] veth0_macvtap: entered promiscuous mode
[   95.945124][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.974448][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.018284][ T5817] veth1_macvtap: entered promiscuous mode
[   96.040901][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.049914][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.058869][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.068357][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.186718][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.236208][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.257397][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.502366][ T5914] Zero length message leads to an empty skb
[   96.810320][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.851570][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.921019][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.955153][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.964372][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.978585][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.041509][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.064079][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.084728][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.104688][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.316856][ T5823] Bluetooth: hci1: command tx timeout
[   97.386099][ T5827] Bluetooth: hci3: command tx timeout
[   97.391755][ T5827] Bluetooth: hci4: command tx timeout
[   97.391765][ T5835] Bluetooth: hci2: command tx timeout
[   97.397377][ T5823] Bluetooth: hci0: command tx timeout
[   97.566809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   97.922025][ T5921] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   97.936941][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.944979][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.661118][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.746497][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.290396][ T5943] process 'syz.1.9' launched './file1' with NULL argv: empty string added
[  100.930153][ T5943] Falling back ldisc for ptm0.
[  100.951657][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.092254][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.517765][ T5949] loop7: detected capacity change from 0 to 16384
[  102.098427][ T5948] sctp: [Deprecated]: syz.3.4 (pid 5948) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.098427][ T5948] Use struct sctp_sack_info instead
[  102.449912][ T5950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.486321][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.592730][ T5966] mmap: syz.0.11 (5966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  103.916255][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  104.325861][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  104.523896][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  104.531129][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  104.736082][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  104.902200][ T5968] ubi31: attaching mtd0
[  105.116329][ T5968] __kmem_cache_create_args(ubi_aeb_slab_cache) failed with error -22
[  105.124601][ T5968] CPU: 0 UID: 0 PID: 5968 Comm: syz.2.13 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) 
[  105.124633][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  105.124651][ T5968] Call Trace:
[  105.124660][ T5968]  <TASK>
[  105.124673][ T5968]  dump_stack_lvl+0x189/0x250
[  105.124723][ T5968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.124757][ T5968]  ? __pfx__printk+0x10/0x10
[  105.124800][ T5968]  ? __kmem_cache_create_args+0x1d8/0x320
[  105.124834][ T5968]  ? kmem_cache_free+0x18f/0x400
[  105.124873][ T5968]  __kmem_cache_create_args+0x237/0x320
[  105.124911][ T5968]  ubi_attach+0x2de/0x5be0
[  105.124996][ T5968]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  105.125037][ T5968]  ? __pfx_ubi_attach+0x10/0x10
[  105.125079][ T5968]  ? vmalloc_noprof+0xb2/0xf0
[  105.125120][ T5968]  ubi_attach_mtd_dev+0x1b75/0x37e0
[  105.125187][ T5968]  ctrl_cdev_ioctl+0x28b/0x3e0
[  105.125226][ T5968]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  105.125259][ T5968]  ? __fget_files+0x2a/0x420
[  105.125294][ T5968]  ? __fget_files+0x2a/0x420
[  105.125332][ T5968]  ? bpf_lsm_file_ioctl+0x9/0x20
[  105.125357][ T5968]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  105.125393][ T5968]  __se_sys_ioctl+0xf9/0x170
[  105.125424][ T5968]  do_syscall_64+0xfa/0x3b0
[  105.125461][ T5968]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.125493][ T5968]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.125514][ T5968]  ? clear_bhb_loop+0x60/0xb0
[  105.125541][ T5968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.125562][ T5968] RIP: 0033:0x7fc59018e969
[  105.125590][ T5968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.125609][ T5968] RSP: 002b:00007fc590ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  105.125633][ T5968] RAX: ffffffffffffffda RBX: 00007fc5903b6160 RCX: 00007fc59018e969
[  105.125650][ T5968] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003
[  105.125665][ T5968] RBP: 00007fc590210ab1 R08: 0000000000000000 R09: 0000000000000000
[  105.125679][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.125692][ T5968] R13: 0000000000000000 R14: 00007fc5903b6160 R15: 00007ffda6638f88
[  105.125728][ T5968]  </TASK>
[  105.351042][ T5968] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -12
[  105.625986][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  106.476421][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  106.796065][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  108.756117][ T5986] netlink: 'syz.0.14': attribute type 4 has an invalid length.
[  108.763946][ T5986] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.14'.
[  108.900052][ T5972] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.070551][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.914262][ T5995] [U] �
[  110.712267][ T5989] IPVS: length: 24 != 16106127384
[  114.606688][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.383618][ T6042] loop6: detected capacity change from 0 to 64
[  117.646589][ T6044] loop7: detected capacity change from 0 to 16384
[  120.204693][ T6075] QAT: Stopping all acceleration devices.
[  120.519888][ T6067] /dev/nullb0: Can't open blockdev
[  120.731935][ T5874] IPVS: starting estimator thread 0...
[  121.236486][ T6078] IPVS: using max 24 ests per chain, 57600 per kthread
[  121.615608][ T6086] netlink: 'syz.1.34': attribute type 1 has an invalid length.
[  122.840365][ T6092] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.671695][ T6099] tipc: Started in network mode
[  123.676831][ T6099] tipc: Node identity 4000004, cluster identity 4711
[  123.684522][ T6099] tipc: Node number set to 67108868
[  125.178086][ T6112] ubi31: attaching mtd0
[  125.216923][ T6112] ubi31: scanning is finished
[  125.221772][ T6112] ubi31: empty MTD device detected
[  125.772008][ T6103] Bluetooth: MGMT ver 1.23
[  125.817611][ T6112] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  126.087743][ T6103] Bluetooth: hci0: load_link_keys: too big key_count value 49152
[  130.990023][ T6135] sctp: failed to load transform for md5: -2
[  131.547209][ T6147] kAFS: Can only specify source 'none' with -o dyn
[  131.555339][ T6147] evm: overlay not supported
[  132.789645][ T6153] /dev/nullb0: Can't open blockdev
[  132.991361][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.998829][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.274726][ T6156] Process accounting resumed
[  133.606169][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'.
[  134.197282][ T6169] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  134.206471][ T6169] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  136.792776][ T6181] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  139.025906][ T6192] nfs4: Unknown parameter 'H"㍢�����f5���X�:�d
[  139.025906][ T6192] �n�"pm-w��S�Y2�E��4�����ۡ�x\x$����Q#c�ʷhz�/hm�O>m����L�cm�^'
[  139.808972][ T6181] random: crng reseeded on system resumption
[  141.717509][ T6177] binder: 6176:6177 ioctl c0306201 200000000640 returned -22
[  143.096313][ T6201] xt_CT: You must specify a L4 protocol and not use inversions on it
[  147.743662][ T6210] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.268045][ T6214] /dev/nullb0: Can't open blockdev
[  149.362086][ T6216] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  149.401313][ T6216] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  149.904741][ T6223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.944962][ T6223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.416851][ T6229] netlink: 'syz.2.67': attribute type 3 has an invalid length.
[  153.424793][ T6229] netlink: 132 bytes leftover after parsing attributes in process `syz.2.67'.
[  154.032087][ T6234] macsec0: entered promiscuous mode
[  154.037591][ T6234] macsec0: entered allmulticast mode
[  154.042914][ T6234] veth1_macvtap: entered allmulticast mode
[  154.595701][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[  156.484802][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  156.507388][ T5835] Bluetooth: hci4: command 0x0405 tx timeout
[  156.548294][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.70'.
[  156.558375][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'.
[  156.580345][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  156.590117][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  156.794623][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  156.963036][ T6252] fuse: Unknown parameter 'fd0x00000000000000070000000000000000000600000000000000000000'
[  158.745820][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  160.197711][ T6256] syz.0.72 uses obsolete (PF_INET,SOCK_PACKET)
[  160.515794][ T6258] capability: warning: `syz.0.72' uses deprecated v2 capabilities in a way that may be insecure
[  160.545369][ T6258] netlink: 252 bytes leftover after parsing attributes in process `syz.0.72'.
[  161.445663][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'.
[  161.517260][ T6265] /dev/nullb0: Can't open blockdev
[  161.789611][ T6264] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  161.790869][ T6264] block (null): Could not allocate knbd recv work queue.
[  161.808258][ T6264] nbd: failed to add new device
[  162.245357][ T5823] Bluetooth: hci5: command tx timeout
[  163.215828][ T6267] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  163.671702][ T4512] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.266887][ T5823] Bluetooth: hci5: command tx timeout
[  164.383679][ T6279] KVM: debugfs: duplicate directory 6279-9
[  164.397647][ T6279] xt_CT: You must specify a L4 protocol and not use inversions on it
[  164.749585][ T4512] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.917522][ T6284] nbd: must specify an index to disconnect
[  166.409108][ T5894] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  166.477901][ T5827] Bluetooth: hci5: command tx timeout
[  166.658301][ T4512] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.674784][ T5894] usb 2-1: Using ep0 maxpacket: 32
[  166.696980][ T5894] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  166.735659][ T5894] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  166.744324][ T5894] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  166.841231][ T5894] usb 2-1: config 1 has no interface number 0
[  166.875953][ T5894] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 26372, setting to 1024
[  166.943274][ T5894] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  166.968423][ T4512] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.996505][ T5894] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  167.192711][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.247594][ T6294] netlink: 'syz.4.80': attribute type 1 has an invalid length.
[  167.259867][ T6288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.282234][ T6246] chnl_net:caif_netlink_parms(): no params data found
[  167.302701][ T5894] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  167.408608][ T6294] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 6294 comm: syz.4.80)
[  167.437044][ T6300] openvswitch: netlink: Actions may not be safe on all matching packets
[  167.476801][ T6282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.494310][ T5894] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  167.521609][   T30] audit: type=1800 audit(1748437263.366:2): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.80" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8953 res=0 errno=0
[  167.552169][    C1] vkms_vblank_simulate: vblank timer overrun
[  167.749701][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  167.759430][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  167.780558][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  167.788502][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  167.804190][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  167.816021][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  168.371069][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.405966][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.445776][ T6246] bridge_slave_0: entered allmulticast mode
[  168.487654][ T6246] bridge_slave_0: entered promiscuous mode
[  168.506817][ T5823] Bluetooth: hci5: command tx timeout
[  168.522965][ T5810] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  168.557233][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.774894][ T5810] usb 2-1: USB disconnect, device number 2
[  168.785129][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.792982][ T6246] bridge_slave_1: entered allmulticast mode
[  168.800895][ T6246] bridge_slave_1: entered promiscuous mode
[  168.853180][ T5810] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  168.864799][ T4512] bridge_slave_1: left allmulticast mode
[  168.872023][ T4512] bridge_slave_1: left promiscuous mode
[  168.994894][ T6319] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  169.094495][ T5894] IPVS: starting estimator thread 0...
[  169.255895][ T6321] IPVS: using max 22 ests per chain, 52800 per kthread
[  169.419320][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.555829][ T4512] bridge_slave_0: left allmulticast mode
[  169.595557][ T4512] bridge_slave_0: left promiscuous mode
[  169.601444][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.870437][ T5823] Bluetooth: hci3: command tx timeout
[  170.724202][ T6328] Bluetooth: hci0: Opcode 0x080f failed: -4
[  172.665747][ T5823] Bluetooth: hci0: command 0x080f tx timeout
[  172.671867][ T5823] Bluetooth: hci3: command tx timeout
[  172.988006][ T6342] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.633943][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.658851][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.677419][ T4512] bond0 (unregistering): Released all slaves
[  174.733339][   T30] audit: type=1804 audit(1748437270.576:3): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.89" name="/newroot/18/file0" dev="tmpfs" ino=112 res=1 errno=0
[  174.760251][ T5835] Bluetooth: hci3: command tx timeout
[  174.838323][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.859999][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.899288][ T6350] ref_ctr_offset mismatch. inode: 0x70 offset: 0x0 ref_ctr_offset(old): 0x200000000040 ref_ctr_offset(new): 0x200000000200
[  175.926478][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'.
[  176.237623][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'.
[  176.875682][ T5835] Bluetooth: hci3: command tx timeout
[  176.884639][ T6352] block nbd0: not configured, cannot reconfigure
[  179.228119][ T6246] team0: Port device team_slave_0 added
[  179.728573][ T6246] team0: Port device team_slave_1 added
[  180.098810][ T6377] overlayfs: failed to resolve './file1': -2
[  181.342817][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.354506][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.437123][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.551572][ T6393] /dev/nullb0: Can't open blockdev
[  182.162653][ T6391] netlink: 224 bytes leftover after parsing attributes in process `syz.4.95'.
[  182.240865][ T4512] hsr_slave_0: left promiscuous mode
[  182.253070][ T6396] netlink: 'syz.4.95': attribute type 4 has an invalid length.
[  182.275630][ T4512] hsr_slave_1: left promiscuous mode
[  182.281785][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.302378][ T6397] netlink: 'syz.4.95': attribute type 4 has an invalid length.
[  182.305667][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.331178][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.343914][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.397044][ T4512] veth1_macvtap: left promiscuous mode
[  182.403005][ T4512] veth0_macvtap: left promiscuous mode
[  182.408963][ T4512] veth1_vlan: left promiscuous mode
[  182.414632][ T4512] veth0_vlan: left promiscuous mode
[  182.894316][ T4512] team0 (unregistering): Port device team_slave_1 removed
[  182.930396][ T4512] team0 (unregistering): Port device team_slave_0 removed
[  183.272119][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.283923][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.310364][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.486076][ T6412] syz.1.98: attempt to access beyond end of device
[  184.486076][ T6412] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  184.499330][ T6412] FAT-fs (loop1): unable to read boot sector
[  184.520798][ T6412] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  188.591137][ T6246] hsr_slave_0: entered promiscuous mode
[  188.615475][ T6246] hsr_slave_1: entered promiscuous mode
[  188.632360][ T6246] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.641002][ T6246] Cannot create hsr debugfs directory
[  190.101868][ T6428] overlayfs: failed to resolve './file1/file0': -2
[  190.742507][   T30] audit: type=1804 audit(1748437286.576:4): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.99" name="/newroot/22/file0" dev="tmpfs" ino=133 res=1 errno=0
[  191.495786][ T5878] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  191.788405][ T5878] usb 1-1: config 5 has an invalid interface descriptor of length 4, skipping
[  191.971669][ T5878] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  193.303179][ T5878] usb 1-1: New USB device found, idVendor=1199, idProduct=6829, bcdDevice=98.59
[  193.402040][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.647192][ T6304] chnl_net:caif_netlink_parms(): no params data found
[  193.760810][ T6246] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.867786][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  193.943121][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.952072][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.269030][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.575819][ T5873] usb 2-1: Using ep0 maxpacket: 16
[  194.591065][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.612459][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.697852][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.710697][    T9] usb 1-1: USB disconnect, device number 2
[  194.748327][ T5873] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  194.773601][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.823706][ T5873] usb 2-1: config 0 descriptor??
[  194.853840][ T5873] usb 2-1: can't set config #0, error -71
[  195.046133][ T5873] usb 2-1: USB disconnect, device number 3
[  195.133735][ T6466] vivid-000: disconnect
[  195.159943][ T6466] netlink: 'syz.4.104': attribute type 13 has an invalid length.
[  195.181895][ T6466] vivid-000: reconnect
[  195.915806][ T6246] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  196.013631][ T6246] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  196.065185][ T6474] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  197.534118][ T6246] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  198.352458][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.362978][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.370514][ T6304] bridge_slave_0: entered allmulticast mode
[  198.379513][ T6304] bridge_slave_0: entered promiscuous mode
[  198.398966][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.426314][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.435271][ T6304] bridge_slave_1: entered allmulticast mode
[  198.463150][ T6304] bridge_slave_1: entered promiscuous mode
[  198.547196][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.560171][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.641346][ T6304] team0: Port device team_slave_0 added
[  198.660757][ T6304] team0: Port device team_slave_1 added
[  198.722274][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.730187][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.759658][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.773242][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.785564][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.821083][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.913836][ T6304] hsr_slave_0: entered promiscuous mode
[  198.925428][ T6304] hsr_slave_1: entered promiscuous mode
[  198.932172][ T6304] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.939821][ T6304] Cannot create hsr debugfs directory
[  198.983026][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.070119][ T6246] 8021q: adding VLAN 0 to HW filter on device team0
[  199.100008][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.107310][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.135788][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.142946][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.381059][ T6304] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  199.408990][ T6304] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  199.423472][ T6304] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  199.445209][ T6304] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  199.644315][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.683956][ T6304] 8021q: adding VLAN 0 to HW filter on device team0
[  199.703866][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.711097][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.751803][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.759031][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.890892][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.221266][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.484467][ T6246] veth0_vlan: entered promiscuous mode
[  200.508917][ T6246] veth1_vlan: entered promiscuous mode
[  200.609696][ T6246] veth0_macvtap: entered promiscuous mode
[  200.630946][ T6246] veth1_macvtap: entered promiscuous mode
[  200.673401][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.698594][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.728348][ T6246] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.742073][ T6246] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.751622][ T6246] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.760918][ T6246] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.978708][ T6304] veth0_vlan: entered promiscuous mode
[  200.992867][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.008589][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.033036][ T6304] veth1_vlan: entered promiscuous mode
[  201.110577][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.129760][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.187228][ T6304] veth0_macvtap: entered promiscuous mode
[  201.208608][ T6304] veth1_macvtap: entered promiscuous mode
[  201.266470][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.328294][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.232931][ T6304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.254631][ T6304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.378277][ T6304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.652132][ T6304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  204.630041][ T6564] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  204.638221][ T6564] overlayfs: failed to resolve './file1/file0': -2
[  209.150780][ T6571] could not allocate digest TFM handle sha224-ssse3
[  210.116335][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.116'.
[  211.753386][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  211.759520][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  211.759558][ T5838] Bluetooth: hci0: command 0x080f tx timeout
[  211.867618][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.905748][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.074260][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.256005][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.536144][ T6609] use of bytesused == 0 is deprecated and will be removed in the future,
[  213.544860][ T6609] use the actual size instead.
[  214.722777][ T6608] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  214.729003][ T6608] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  215.524074][ T6608] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  215.530193][ T6608] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  215.537402][ T6608] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  216.058089][ T6631] netlink: 'syz.0.126': attribute type 10 has an invalid length.
[  216.088331][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.817408][ T6631] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  216.829625][ T5827] Bluetooth: hci0: command 0x080f tx timeout
[  217.098807][ T6608] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  217.104784][ T6608] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  217.625700][ T5827] Bluetooth: hci2: command 0x0406 tx timeout
[  217.626260][ T5823] Bluetooth: hci1: command 0x0406 tx timeout
[  218.447359][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.79'.
[  218.967835][ T5823] Bluetooth: hci0: command 0x080f tx timeout
[  219.166876][ T6608] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  219.181279][ T6608] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  219.191120][ T6608] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  219.227679][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout
[  219.248032][ T6608] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  219.713617][ T5823] Bluetooth: hci2: command 0x0406 tx timeout
[  220.576969][ T6651] overlayfs: failed to resolve './file1/file0': -2
[  221.021195][   T30] audit: type=1326 audit(1748437316.866:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6646 comm="syz.5.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918838e969 code=0x0
[  221.041927][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.558871][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout
[  221.565121][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout
[  222.040204][ T6661] xt_hashlimit: max too large, truncated to 1048576
[  222.486063][ T6665] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[  223.316377][ T6674] overlayfs: missing 'lowerdir'
[  223.392239][ T6675] kAFS: Can only specify source 'none' with -o dyn
[  223.694955][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  223.703129][ T5835] Bluetooth: hci5: command 0x0c1a tx timeout
[  223.966012][ T5823] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  224.035777][ T5827] Bluetooth: hci0: command 0x080f tx timeout
[  224.060975][ T6677] lo speed is unknown, defaulting to 1000
[  224.067737][ T6677] lo speed is unknown, defaulting to 1000
[  224.079652][ T6677] lo speed is unknown, defaulting to 1000
[  224.179949][ T6677] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  224.774812][ T6677] lo speed is unknown, defaulting to 1000
[  224.936149][ T6677] lo speed is unknown, defaulting to 1000
[  224.943198][ T6677] lo speed is unknown, defaulting to 1000
[  224.950218][ T6677] lo speed is unknown, defaulting to 1000
[  224.959000][ T6677] lo speed is unknown, defaulting to 1000
[  224.966051][ T6677] lo speed is unknown, defaulting to 1000
[  225.477935][ T6685] x_tables: ip6_tables: tcpmss match: only valid for protocol 6
[  226.195695][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout
[  226.448206][ T6689] tipc: Started in network mode
[  226.454001][ T6689] tipc: Node identity 7, cluster identity 4711
[  226.461832][ T6689] tipc: Node number set to 7
[  227.906086][ T6699] tipc: Started in network mode
[  227.911422][ T6699] tipc: Node identity 7, cluster identity 4711
[  227.918899][ T6699] tipc: Node number set to 7
[  229.220570][ T5827] Bluetooth: hci5: unexpected event for opcode 0x041b
[  229.335881][ T5916] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  229.910966][ T5916] usb 7-1: config 5 has an invalid interface descriptor of length 4, skipping
[  230.626455][ T5916] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  230.814812][ T5916] usb 7-1: New USB device found, idVendor=1199, idProduct=6829, bcdDevice=98.59
[  231.958101][ T6716] overlayfs: failed to resolve './file1/file0': -2
[  232.356328][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.628293][ T5916] usb 7-1: can't set config #5, error -71
[  233.485632][ T5916] usb 7-1: USB disconnect, device number 2
[  233.670166][ T6724] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  233.677929][ T6724] UDF-fs: Scanning with blocksize 512 failed
[  233.688487][ T6724] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  233.696137][ T6724] UDF-fs: Scanning with blocksize 1024 failed
[  233.704905][ T6724] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  233.712789][ T6724] UDF-fs: Scanning with blocksize 2048 failed
[  233.769587][ T6724] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found
[  233.777707][ T6724] UDF-fs: Scanning with blocksize 4096 failed
[  235.672681][   T30] audit: type=1326 audit(1748437331.056:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.0.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd7338e969 code=0x0
[  235.995057][   T30] audit: type=1326 audit(1748437331.836:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  236.192799][   T30] audit: type=1326 audit(1748437331.866:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  236.262522][   T30] audit: type=1326 audit(1748437331.966:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  237.176418][ T6744] netlink: 'syz.4.147': attribute type 1 has an invalid length.
[  237.716222][   T30] audit: type=1326 audit(1748437331.966:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  237.960016][   T30] audit: type=1326 audit(1748437331.966:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  238.006115][   T30] audit: type=1326 audit(1748437331.966:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  238.275219][ T6754] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  238.284436][ T6754] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  238.293374][ T6754] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  238.302336][ T6754] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  238.313896][ T6754] geneve2: entered promiscuous mode
[  238.319268][ T6754] geneve2: entered allmulticast mode
[  238.868992][   T30] audit: type=1326 audit(1748437331.966:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  238.891827][   T30] audit: type=1326 audit(1748437331.966:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  239.652449][   T30] audit: type=1326 audit(1748437332.096:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.6.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd15738e969 code=0x7ffc0000
[  239.760244][ T6763] 9pnet_virtio: no channels available for device syz
[  241.187716][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  241.276970][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  241.285842][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  241.293889][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  241.309348][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.420433][ T6775] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  241.434120][ T6775] overlayfs: failed to resolve './file1/file0': -2
[  242.400869][ T6783] netlink: 'syz.6.154': attribute type 4 has an invalid length.
[  243.951130][ T6794] vcan0: tx drop: invalid da for name 0x0000000000000002
[  244.266715][ T5827] Bluetooth: hci1: command tx timeout
[  244.470660][ T6633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.796117][ T6633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.857702][ T6771] lo speed is unknown, defaulting to 1000
[  245.339993][ T6804] tipc: Started in network mode
[  245.340021][ T6804] tipc: Node identity 7, cluster identity 4711
[  245.340037][ T6804] tipc: Node number set to 7
[  246.385951][ T5827] Bluetooth: hci1: command tx timeout
[  247.618254][ T6633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.435753][ T5827] Bluetooth: hci1: command tx timeout
[  249.066491][ T6828] xt_CT: You must specify a L4 protocol and not use inversions on it
[  250.606805][ T5827] Bluetooth: hci1: command tx timeout
[  251.295553][ T6633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  251.638125][ T6843] netlink: 'syz.6.167': attribute type 1 has an invalid length.
[  251.705396][ T6845] KVM: debugfs: duplicate directory 6845-8
[  251.712063][ T6845] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.949149][ T6862] netlink: 596 bytes leftover after parsing attributes in process `syz.0.171'.
[  254.958382][ T5894] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  255.170710][ T5894] usb 1-1: Using ep0 maxpacket: 8
[  255.188856][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  255.215327][ T5894] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  255.266788][ T5894] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  255.274935][ T5894] usb 1-1: Product: syz
[  255.404352][ T5894] usb 1-1: Manufacturer: syz
[  255.439755][ T5894] usb 1-1: SerialNumber: syz
[  255.670880][ T6633] bridge_slave_1: left allmulticast mode
[  256.378165][ T6633] bridge_slave_1: left promiscuous mode
[  256.378384][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.382201][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  256.382311][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  256.387838][ T5894] usb 1-1: Invalid connection information received from device
[  256.503161][ T6633] bridge_slave_0: left allmulticast mode
[  256.581607][ T6633] bridge_slave_0: left promiscuous mode
[  256.589321][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.499583][ T6883] xt_CT: You must specify a L4 protocol and not use inversions on it
[  257.860441][   T24] usb 1-1: USB disconnect, device number 3
[  259.549521][ T6633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  259.645231][ T6633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  259.673641][ T6633] bond0 (unregistering): Released all slaves
[  260.025168][ T6771] chnl_net:caif_netlink_parms(): no params data found
[  261.472294][ T6901] xt_CT: You must specify a L4 protocol and not use inversions on it
[  262.204000][ T6633] tipc: Left network mode
[  263.376061][ T6919] KVM: debugfs: duplicate directory 6919-9
[  263.402310][ T6919] xt_CT: You must specify a L4 protocol and not use inversions on it
[  264.300798][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.180'.
[  264.450122][ T6930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.528376][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'.
[  264.537357][ T6932] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'.
[  266.028638][ T6932] ip6gretap0: entered promiscuous mode
[  266.129455][ T6927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'.
[  266.271476][ T6945] xt_CT: You must specify a L4 protocol and not use inversions on it
[  269.321747][ T6963] netlink: 'syz.5.186': attribute type 1 has an invalid length.
[  272.242041][ T6980] openvswitch: netlink: Actions may not be safe on all matching packets
[  273.135919][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.460047][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.524129][ T6771] bridge_slave_0: entered allmulticast mode
[  273.558239][ T6771] bridge_slave_0: entered promiscuous mode
[  273.576736][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.584137][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.607428][ T6771] bridge_slave_1: entered allmulticast mode
[  273.629040][ T6771] bridge_slave_1: entered promiscuous mode
[  274.025999][ T6990] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.989572][ T6633] hsr_slave_0: left promiscuous mode
[  277.187431][ T6633] hsr_slave_1: left promiscuous mode
[  277.193676][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.361972][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.417184][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.425191][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.513587][ T7012] xt_CT: You must specify a L4 protocol and not use inversions on it
[  277.687723][ T6633] veth1_macvtap: left allmulticast mode
[  278.521719][ T7017] ntfs3(nullb0): Primary boot signature is not NTFS.
[  278.528831][ T7017] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  278.565727][ T6633] veth1_macvtap: left promiscuous mode
[  278.576103][ T6633] veth0_macvtap: left promiscuous mode
[  278.583619][ T6633] veth1_vlan: left promiscuous mode
[  278.590312][ T6633] veth0_vlan: left promiscuous mode
[  279.355655][ T3077] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  280.854567][ T7025] netlink: 'syz.4.200': attribute type 1 has an invalid length.
[  281.686851][ T3077] usb 6-1: config 5 has an invalid interface descriptor of length 4, skipping
[  281.706537][ T3077] usb 6-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  281.721918][ T3077] usb 6-1: New USB device found, idVendor=1199, idProduct=6829, bcdDevice=98.59
[  281.731380][ T3077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.794316][ T7035] siw: device registration error -23
[  282.558400][ T5873] usb 6-1: USB disconnect, device number 2
[  283.990398][ T6633] team0 (unregistering): Port device team_slave_1 removed
[  284.032119][ T6633] team0 (unregistering): Port device team_slave_0 removed
[  284.121965][ T7050] openvswitch: netlink: Actions may not be safe on all matching packets
[  285.911914][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.912522][ T6771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.985915][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.373044][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.385613][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.405648][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.612083][ T6771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  287.804741][ T7064] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.576804][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.009770][ T7067] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.018920][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.056309][ T7066] @: renamed from vlan0 (while UP)
[  290.051829][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.440003][ T7082] ntfs3(nullb0): Primary boot signature is not NTFS.
[  290.448569][ T7082] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  290.507598][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.482241][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.358724][ T7092] netdevsim netdevsim5: Direct firmware load for �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F failed with error -2
[  292.378429][ T7092] netdevsim netdevsim5: Falling back to sysfs fallback for: �J��n���gkN��q>�*x(O�@ēƙ�a�W��fV!����_�)�AD�I��w�C7�;�gB�|h�V`f�?:Vm�UWX:SZ;�˩6h?Ae���i��m�/���S��6��_C?�F
[  292.691202][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.566736][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.709242][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.745790][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.485048][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  295.494354][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  295.531039][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  295.541386][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  295.552551][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  295.602570][ T7109] lo speed is unknown, defaulting to 1000
[  295.665582][  T915] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  295.892858][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.212259][  T915] usb 5-1: config 0 has no interfaces?
[  296.257882][  T915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  296.338122][  T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.378096][  T915] usb 5-1: Product: syz
[  296.514952][  T915] usb 5-1: Manufacturer: syz
[  296.519895][  T915] usb 5-1: SerialNumber: syz
[  296.694290][  T915] usb 5-1: config 0 descriptor??
[  296.701566][ T7129] xt_CT: You must specify a L4 protocol and not use inversions on it
[  296.703228][ T7125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.720064][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.772919][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.781575][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.911617][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.954192][ T6633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.991459][ T7109] chnl_net:caif_netlink_parms(): no params data found
[  297.626713][ T5823] Bluetooth: hci4: command tx timeout
[  298.048543][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.257622][ T6633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.386311][ T6633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.413218][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.649744][ T7152] netlink: 224 bytes leftover after parsing attributes in process `syz.5.223'.
[  299.760356][ T5823] Bluetooth: hci4: command tx timeout
[  299.795601][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.367028][ T6633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.155723][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  301.412191][ T7148] netlink: 'syz.5.223': attribute type 4 has an invalid length.
[  301.476298][ T7166] netlink: 'syz.6.224': attribute type 23 has an invalid length.
[  301.988207][ T5823] Bluetooth: hci4: command tx timeout
[  302.005670][  T915] usb 5-1: can't set config #0, error -71
[  302.055897][  T915] usb 5-1: USB disconnect, device number 2
[  302.358870][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.219488][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  303.243811][ T5894] lo speed is unknown, defaulting to 1000
[  303.265544][ T5894] syz0: Port: 1 Link DOWN
[  303.272331][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.314209][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.321545][ T7109] bridge_slave_0: entered allmulticast mode
[  303.329608][ T7109] bridge_slave_0: entered promiscuous mode
[  303.338472][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.345783][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.356943][ T7109] bridge_slave_1: entered allmulticast mode
[  303.364351][ T7109] bridge_slave_1: entered promiscuous mode
[  304.025562][ T5823] Bluetooth: hci4: command tx timeout
[  304.202178][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  304.669015][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'.
[  305.626735][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.282415][ T7201] ntfs3(nullb0): Primary boot signature is not NTFS.
[  306.289990][ T7201] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  306.948583][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.957564][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.966201][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.066545][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.230'.
[  307.328580][ T7109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.523776][ T7210] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.548930][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.565582][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.648024][ T7109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.779716][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.219978][ T7109] team0: Port device team_slave_0 added
[  309.235976][   T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  309.256660][ T7109] team0: Port device team_slave_1 added
[  309.273305][ T6633] bridge_slave_1: left allmulticast mode
[  309.292647][ T6633] bridge_slave_1: left promiscuous mode
[  309.350365][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.429886][ T6633] bridge_slave_0: left allmulticast mode
[  309.461966][ T6633] bridge_slave_0: left promiscuous mode
[  309.484750][   T43] usb 7-1: Using ep0 maxpacket: 32
[  309.495725][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.515207][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  309.555524][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  309.635821][   T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB5, changing to 0x85
[  309.688172][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  309.712830][   T43] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  309.725566][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.789883][   T43] usb 7-1: Product: syz
[  309.791270][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.794077][   T43] usb 7-1: Manufacturer: syz
[  309.892248][   T43] usb 7-1: SerialNumber: syz
[  309.964279][   T43] usb 7-1: config 0 descriptor??
[  309.978225][   T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input7
[  310.014816][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  310.028977][ T3077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.037686][ T7218] trusted_key: encrypted_key: insufficient parameters specified
[  310.321143][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  310.410737][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  310.673184][    C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  310.688588][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  311.354614][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.573574][ T7209] syz.4.232 (7209): drop_caches: 2
[  312.699354][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.985357][ T7231] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[  313.140582][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.509642][ T5829] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  313.565811][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  313.756376][ T5172] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  313.766340][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.992232][ T7242] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  314.003881][ T7242] netlink: 112 bytes leftover after parsing attributes in process `syz.5.240'.
[  314.921265][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.183199][ T6633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.201771][ T6633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.224237][ T6633] bond0 (unregistering): Released all slaves
[  315.392606][ T7231] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  315.554143][ T5873] usb 7-1: USB disconnect, device number 3
[  315.961058][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.604571][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.612951][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.853269][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.875034][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.164629][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  317.173980][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  317.310367][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.322349][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.490425][ T7109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.861630][ T7109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.863344][ T7260] fuse: Bad value for 'fd'
[  317.869161][ T7109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.905049][ T7109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.352453][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.439349][ T7109] hsr_slave_0: entered promiscuous mode
[  318.726736][ T7275] netlink: 'syz.6.248': attribute type 1 has an invalid length.
[  318.729435][ T7109] hsr_slave_1: entered promiscuous mode
[  319.625937][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.634091][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.643648][ T7109] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  319.651990][ T7109] Cannot create hsr debugfs directory
[  321.033832][ T7291] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  321.110789][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.725213][ T7296] overlayfs: failed to resolve 'fowner>00000000000000000000': -2
[  322.336336][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  322.685655][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.551616][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.776582][ T6633] hsr_slave_0: left promiscuous mode
[  324.537862][ T6633] hsr_slave_1: left promiscuous mode
[  324.543885][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.582088][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.594319][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  324.618854][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.635640][ T6633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.754807][ T6633] veth1_macvtap: left promiscuous mode
[  324.776751][ T6633] veth0_macvtap: left promiscuous mode
[  324.783075][ T6633] veth1_vlan: left promiscuous mode
[  324.805699][ T6633] veth0_vlan: left promiscuous mode
[  325.814213][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  325.869988][ T7325] Bluetooth: hci0: unsupported parameter 39401
[  325.876293][ T7325] Bluetooth: hci0: unsupported parameter 512
[  325.882303][ T7325] Bluetooth: hci0: unsupported parameter 39401
[  325.888590][ T7325] Bluetooth: hci0: unsupported parameter 512
[  326.097321][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.528155][ T7332] ntfs3(nullb0): Primary boot signature is not NTFS.
[  326.536594][ T7332] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  327.159349][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.170727][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.387077][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.732652][ T6633] team0 (unregistering): Port device team_slave_1 removed
[  327.881121][ T6633] team0 (unregistering): Port device team_slave_0 removed
[  328.370245][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  328.783547][ T7319] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  328.793911][ T7319] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  328.906015][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  329.871922][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  330.182573][ T7356] netlink: 'syz.5.259': attribute type 1 has an invalid length.
[  330.924646][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.175814][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'.
[  332.186776][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.202551][  T915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.211021][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  332.211037][   T30] audit: type=1326 audit(1748437427.716:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7361 comm="syz.0.263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd7338e969 code=0x0
[  332.506456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.233749][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.407687][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.486941][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  335.495722][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.327938][ T7395] sctp: [Deprecated]: syz.0.267 (pid 7395) Use of struct sctp_assoc_value in delayed_ack socket option.
[  336.327938][ T7395] Use struct sctp_sack_info instead
[  336.521606][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.007849][   T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.303003][ T7358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  337.322084][ T7358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  337.433871][ T7413] IPVS: set_ctl: invalid protocol: 92 10.1.1.0:20004
[  337.632181][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.885693][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.901094][   T30] audit: type=1800 audit(1748437433.746:30): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.269" name="dmabuf" dev="dmabuf" ino=3 res=0 errno=0
[  337.932771][ T7358] bond0 (unregistering): Released all slaves
[  339.212030][ T7426] veth1_macvtap: left promiscuous mode
[  339.247092][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.255237][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.368680][ T6021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.395984][ T7408] syz.6.269 (7408) used greatest stack depth: 18120 bytes left
[  339.516991][   T24] net_ratelimit: 1 callbacks suppressed
[  339.517009][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.558271][ T6633] IPVS: stop unused estimator thread 0...
[  340.003085][ T7109] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  341.935935][ T7109] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  342.066567][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.153624][ T7109] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  342.161775][ T3517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.176156][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.186003][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.285717][ T5874] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  342.588299][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.604890][ T5874] usb 7-1: config 5 has an invalid interface descriptor of length 4, skipping
[  342.637310][ T5874] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  342.646910][ T5482] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI
[  342.655508][ T5874] usb 7-1: New USB device found, idVendor=1199, idProduct=6829, bcdDevice=98.59
[  342.658812][ T5482] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
[  342.658842][ T5482] CPU: 1 UID: 0 PID: 5482 Comm: dhcpcd Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) 
[  342.675489][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.676250][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  342.705581][ T5482] RIP: 0010:ip_mc_up+0x76/0x300
[  342.710440][ T5482] Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 3f a7 3e f8 41 be 08 01 00 00 4c 03 33 e8 b1 1e 75 01 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 1b a7 3e f8 4d 8b 36 48 8d bb 98
[  342.730049][ T5482] RSP: 0018:ffffc90003bcf6d0 EFLAGS: 00010206
[  342.736130][ T5482] RAX: 0000000000000021 RBX: ffff8880330a5800 RCX: ffff88802eae5a00
[  342.744101][ T5482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  342.752067][ T5482] RBP: 0000000000000001 R08: ffffffff8f2f36a7 R09: 1ffffffff1e5e6d4
[  342.760034][ T5482] R10: dffffc0000000000 R11: fffffbfff1e5e6d5 R12: dffffc0000000000
[  342.767998][ T5482] R13: dffffc0000000000 R14: 0000000000000108 R15: 0000000000000001
[  342.775963][ T5482] FS:  00007f84ecda4740(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000
[  342.784884][ T5482] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.791457][ T5482] CR2: 00007f9187e00000 CR3: 00000000217ac000 CR4: 00000000003526f0
[  342.799428][ T5482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  342.807390][ T5482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  342.816316][ T5482] Call Trace:
[  342.819604][ T5482]  <TASK>
[  342.822535][ T5482]  inetdev_event+0xfb3/0x15b0
[  342.827222][ T5482]  ? __pfx_del_netdev_default_ips_join+0x10/0x10
[  342.833552][ T5482]  ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10
[  342.840399][ T5482]  ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10
[  342.847011][ T5482]  ? __pfx_inetdev_event+0x10/0x10
[  342.852134][ T5482]  notifier_call_chain+0x1b6/0x3e0
[  342.857253][ T5482]  __dev_notify_flags+0x18d/0x2e0
[  342.862282][ T5482]  ? __pfx___dev_notify_flags+0x10/0x10
[  342.867829][ T5482]  ? __dev_change_flags+0x4cc/0x6d0
[  342.873029][ T5482]  ? __mutex_lock+0x51b/0xe80
[  342.877713][ T5482]  ? __pfx___dev_change_flags+0x10/0x10
[  342.883261][ T5482]  ? devinet_ioctl+0x323/0x1b50
[  342.888111][ T5482]  ? __pfx___mutex_lock+0x10/0x10
[  342.893157][ T5482]  netif_change_flags+0xe8/0x1a0
[  342.898103][ T5482]  dev_change_flags+0x130/0x260
[  342.902959][ T5482]  devinet_ioctl+0xbb4/0x1b50
[  342.907639][ T5482]  ? __pfx_devinet_ioctl+0x10/0x10
[  342.912748][ T5482]  ? get_user_ifreq+0x12c/0x180
[  342.917608][ T5482]  inet_ioctl+0x3c0/0x4c0
[  342.921957][ T5482]  ? __pfx_inet_ioctl+0x10/0x10
[  342.926817][ T5482]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  342.932806][ T5482]  sock_do_ioctl+0xd9/0x300
[  342.937310][ T5482]  ? __pfx_sock_do_ioctl+0x10/0x10
[  342.942435][ T5482]  ? __asan_memset+0x22/0x50
[  342.947027][ T5482]  ? smack_file_ioctl+0x24a/0x340
[  342.952058][ T5482]  sock_ioctl+0x576/0x790
[  342.956385][ T5482]  ? __pfx_sock_ioctl+0x10/0x10
[  342.961231][ T5482]  ? fd_install+0x30d/0x540
[  342.965733][ T5482]  ? bpf_lsm_file_ioctl+0x9/0x20
[  342.970667][ T5482]  ? __pfx_sock_ioctl+0x10/0x10
[  342.975512][ T5482]  __se_sys_ioctl+0xf9/0x170
[  342.980100][ T5482]  do_syscall_64+0xfa/0x3b0
[  342.984601][ T5482]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.989814][ T5482]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.995873][ T5482]  ? clear_bhb_loop+0x60/0xb0
[  343.000545][ T5482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.006428][ T5482] RIP: 0033:0x7f84ecea4378
[  343.010845][ T5482] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d
[  343.030451][ T5482] RSP: 002b:00007ffd5c4009c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  343.038947][ T5482] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 00007f84ecea4378
[  343.046912][ T5482] RDX: 00007ffd5c410bc0 RSI: 0000000000008914 RDI: 000000000000001a
[  343.054879][ T5482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  343.062845][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c420d60
[  343.070808][ T5482] R13: 00007f84ecda46c8 R14: 0000000000000028 R15: 0000000000008914
[  343.078780][ T5482]  </TASK>
[  343.081789][ T5482] Modules linked in:
[  343.088853][ T5482] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  343.230442][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.636154][ T5482] RIP: 0010:ip_mc_up+0x76/0x300
[  343.641561][ T5482] Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 3f a7 3e f8 41 be 08 01 00 00 4c 03 33 e8 b1 1e 75 01 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 1b a7 3e f8 4d 8b 36 48 8d bb 98
[  343.698476][ T5874] usb 7-1: can't set config #5, error -71
[  343.701646][ T7436] sctp: failed to load transform for md5: -2
[  343.730197][ T5874] usb 7-1: USB disconnect, device number 4
[  343.761226][ T5482] RSP: 0018:ffffc90003bcf6d0 EFLAGS: 00010206
[  343.855587][ T5482] RAX: 0000000000000021 RBX: ffff8880330a5800 RCX: ffff88802eae5a00
[  343.876151][ T5482] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  343.884181][ T5482] RBP: 0000000000000001 R08: ffffffff8f2f36a7 R09: 1ffffffff1e5e6d4
[  343.892618][ T5482] R10: dffffc0000000000 R11: fffffbfff1e5e6d5 R12: dffffc0000000000
[  343.900866][ T5482] R13: dffffc0000000000 R14: 0000000000000108 R15: 0000000000000001
[  343.909096][ T5482] FS:  00007f84ecda4740(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000
[  343.945694][ T5482] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  343.952335][ T5482] CR2: 0000001b31206ff8 CR3: 00000000217ac000 CR4: 00000000003526f0
[  343.977554][ T5482] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  344.006296][ T5482] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  344.055471][ T5482] Kernel panic - not syncing: Fatal exception
[  344.061937][ T5482] Kernel Offset: disabled
[  344.066263][ T5482] Rebooting in 86400 seconds..