last executing test programs:

54m51.765500648s ago: executing program 32 (id=231):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

53m2.969206534s ago: executing program 33 (id=769):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xe72c5e8f5e8528e9, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50)
link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x3, {0x8, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

52m56.057230624s ago: executing program 34 (id=798):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000001440)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x4)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

52m55.187047229s ago: executing program 35 (id=861):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00')
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000bc0)={0x6, 0x400d, 0x400, 0x97aa, 0x1a, "5ef863f1a0973cf65a7917895c30acd61b3d2b"})

43m17.1768023s ago: executing program 36 (id=3708):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x13)
fcntl$setlease(r2, 0x400, 0x0)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
fcntl$setlease(r2, 0x400, 0x2)

39m27.615460163s ago: executing program 37 (id=4338):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

23m51.219370208s ago: executing program 38 (id=6585):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(r1, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$inet6(0xa, 0x3, 0xff)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0)

21m41.524488008s ago: executing program 4 (id=6864):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
unshare(0x2c020400)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f000001bff4)={0x10000000})
signalfd4(r1, &(0x7f0000000180), 0x8, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket(0x10, 0x400000000080803, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8}]}, {0xfffffffffffffe4b}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

21m37.599984926s ago: executing program 4 (id=6870):
socket(0x1d, 0x2, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000002c0)={0x200a})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

21m35.915049429s ago: executing program 4 (id=6873):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18)
socket$kcm(0x10, 0x2, 0x4)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf})
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c)

21m34.207547774s ago: executing program 4 (id=6876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

21m31.596509587s ago: executing program 4 (id=6883):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4}, &(0x7f0000005680), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000003600)=[{{&(0x7f0000000000)={0x2, 0xe21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50}}], 0x1, 0x40000)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006)
fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0)

21m27.769848777s ago: executing program 4 (id=6890):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c)
sendto$inet6(r1, &(0x7f0000000780), 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
chown(0x0, 0x0, 0xee01)
creat(0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0))
ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4)
r5 = semget$private(0x0, 0x6, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x0, 0xc63e, 0x1000}, {0x4, 0x1}], 0x2)
semctl$GETPID(r5, 0x3, 0xb, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

21m25.735664164s ago: executing program 39 (id=6890):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c)
sendto$inet6(r1, &(0x7f0000000780), 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
chown(0x0, 0x0, 0xee01)
creat(0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0))
ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4)
r5 = semget$private(0x0, 0x6, 0x0)
semop(r5, &(0x7f00000000c0)=[{0x0, 0xc63e, 0x1000}, {0x4, 0x1}], 0x2)
semctl$GETPID(r5, 0x3, 0xb, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

19m38.762277841s ago: executing program 2 (id=7092):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000580)}, 0x20)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x7, 0x2, 0x17d, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0)
r7 = dup(r6)
ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d06, &(0x7f0000000000)={0x0, 0x4})

19m34.95825203s ago: executing program 2 (id=7097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, 0x0, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e000000100"/31, @ANYBLOB="eeccf8f6d36773134e699d6103481385087268e81850a20ba44f17dbaee88b9da4b72626423b144ef1c8a341fadac302237c8dd8a4e7461399eef91dea7a568282e68e36dd9b7ae8d9abfe8a41db5778c284ea820b7e49d8d1dc0fb0eda6c1f50aa9fe5ebfb5cb023d61fa890d54f4704767d1b18ea41a09dc8acc2a1fbf0c7b31318307e19fdc7e87fa78e88c7c8bee5e710e2d19bbf3a3652aef5aefab0602d49f076c9b69258c586bc58fa6be6b0d6d43535ab0626d6c4d9070fa6aa6", @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100))
sendmmsg$inet6(r2, &(0x7f0000000ac0), 0x0, 0xff00)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003)

19m33.546280057s ago: executing program 2 (id=7100):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"})

19m32.107792237s ago: executing program 2 (id=7104):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kfree\x00'}, 0x18)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x44880)
io_setup(0xd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10)
setgroups(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x4, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48)
syz_open_dev$vcsn(&(0x7f0000000080), 0x838400000000, 0x80401)
socket(0x9, 0x145b0e891aa68eff, 0x10000)

19m30.959375444s ago: executing program 2 (id=7107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8004, 0x0, 0x8, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x1, 0x8000, 0xd9}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_buf(r8, 0x1, 0x10, &(0x7f00000003c0)=""/145, &(0x7f0000000300)=0x91)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r7, 0x10, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000080)={0x1, '='}, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2})
r9 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r9, 0x40046109, &(0x7f0000000100)=0xd2)
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)

19m28.507340725s ago: executing program 2 (id=7112):
r0 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa94e, 0x2, 0x0, 0x1ea})
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
getrlimit(0xc, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}})
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8)
close_range(r0, 0xffffffffffffffff, 0x0)

19m13.334329259s ago: executing program 40 (id=7112):
r0 = io_uring_setup(0x1946, &(0x7f0000000a80)={0x0, 0xa94e, 0x2, 0x0, 0x1ea})
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
getrlimit(0xc, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}})
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5ce1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b330600000000000000fd6700"}, 0xd8)
close_range(r0, 0xffffffffffffffff, 0x0)

17m39.915710876s ago: executing program 7 (id=7301):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0)

17m38.24179373s ago: executing program 7 (id=7305):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
select(0x0, 0x0, &(0x7f00000000c0)={0x4}, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
shmget$private(0x0, 0x1000, 0x78000a42, &(0x7f0000ff2000/0x1000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

17m35.797961546s ago: executing program 7 (id=7308):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_getattr(r0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50)

17m34.367062063s ago: executing program 7 (id=7311):
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x0, "e922fe53e14fcad1ebe6ff00000000000000080000000000000000000021b49d61"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
getgroups(0x449a065a, 0xfffffffffffffffe)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_DIRENT(r4, &(0x7f0000002580)={0x1e0, 0x0, r5, [{0x1400000000000007, 0x1000000, 0x1b7, 0x0, '\x7f\xb4\xe4\xa3\xe8$I\x88\x8c\n}\xac\xa9\x0e\x92\x04\xbc\xd4\xba\xdb\xc6\xf9K\x0eS\x00\xbdu\xb9;\xcd\xeb\x1aL\xec?\x7f\\N\xe1E\x89\xc9f\xd1\x8ax\xf3\x81\x04KJ\v\xe9\x19H+\xdf\xe3\xdb\xa42Lh\xb8\xe4nL\xfe1\xd5`\x86Cc\xdd\xf2n\x0e\xa7\xf5\x86\x03\xee\xec8\xad\x06\xa8\xd70\xba\xa9\xae(\xc0\x063\xd5\xb6i\xeb\xae\xe2>f\xa1\xc7\xe8_\xd9\xae,\x8d\xb0\x01\xf0<\xd6_e\xa4F\x10\xc0\xc6\x10=\x17\x16\x1a\xd9\x8b\xafq\x1e_\xee \xbb\x92\x9f\x89\n\x1b\xaf\xa2DDi\xe4\x9begcv\xa1\xe4E\x8fs\x8e\xc6[.\x98\x0f;\xc3H5\xfb\x0e\xe8\xb2<>\r\xeb\x9b\f\xf6\x15\xf2\xc0&L\xec;\xca\xc0\xa3\xb6\x84\xc7h\x9c\x9d\xfdUY-o3\xce\x00\x003\x90\xdc\x9f\x95,\xb2\xa5\r\xcc\x98\xf5\x00\x00\x00\x00\x00\x00\x00\x00J\xf4\xa9\xd02S\fZ\xfb\xfc !e\x0e/\xeb\xc5\xfa\xe3\xf5\x9e\x91\xadJ\xbd+-n\xb4\xb8a4\xbc\xdf\x1d\xd8\xc1D\xff|G$\xf6\r\xf3\xad5O~\xa9q\t\xb4\x83\n\x06f\xf0\xb3\xa6\x04\xa7\xec\xfdz\xf3\xdaX\xc1SA\xe4x\xa1\xd9j\xaa\xbdT\xbe\xc7\x94\xa8\xe5w\x97\x11\b\f\xfc\xe6\x9ax\x11\x03R\x81\xc9\x90\x1fQ\xf7\xae(h\xd2\x8fj\tp\xf8VdY0\xa8\xc6|M?2J\x03\xff\xfaI\x9av\xf6^\x01R\xce@\xb4\xe5\b\x00!To\xdb}\xdd\x9d&|L+U\xb2\x10\xaeo\xe6\xf5\xcf\xb2\xb1\x10\x84\xd0\"\x96\xa8FstV\xb5:\xd7\x8cE\x95\x0e\fgJ\xba\xee\x17\x8b\xc2\xc1<@c\xc1\a\x17\b\x94\xb2\x06\xfb\x8e4\x0f\xcaT\xe1M\x98\x06M|\xa9\xb7\x9a\x82\xf4'}]}, 0x1e0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0)

17m30.183518053s ago: executing program 7 (id=7314):
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000001c0)={0x401, 0x2, 0x1, "b09789985539e6d654954ddb9c9a8af07e5235a0bdb0fca932f40a4723289ee8", 0x32314d56})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r5, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000780), 0xffffffffffffffff, 0x2}}, 0x18)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x100)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc00)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000500)={"b0453822", 0x400, 0x6, 0x2, 0x0, 0x0, "3377f877c734c40400", '\x00', "ee8ccda7", "c77e072c", ["c3dad2b677ffffffffffec00", "51f3541a910080ffffcb3a10", "e100"]})

17m27.740975251s ago: executing program 7 (id=7317):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(0x0, 0x0, &(0x7f0000000000)="100c0681000000", 0x7, 0xfffffffffffffffc)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
open(0x0, 0x40000, 0x122)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0xffffffff, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x1, 0x6fd8e84b}, 0x3, 0xed}})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003, 0x804})
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

17m11.360652316s ago: executing program 41 (id=7317):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(0x0, 0x0, &(0x7f0000000000)="100c0681000000", 0x7, 0xfffffffffffffffc)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
open(0x0, 0x40000, 0x122)
r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0xffffffff, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x1, 0x6fd8e84b}, 0x3, 0xed}})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20000003, 0x804})
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

12m50.101340432s ago: executing program 0 (id=7693):
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="f26895f02da2478c25bdfaffff00000000", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setsig(0x4203, r2, 0x2, &(0x7f0000000340)={0xb, 0x3, 0x3})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pread64(r6, 0x0, 0x0, 0xa)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000280)=0x2)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20})
bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0xfffffffe}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

12m46.805557882s ago: executing program 0 (id=7698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe00000005"], 0x1)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0)
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0)
syz_usb_connect(0x2, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="ce010000d1253c40d11256eddd460102030109022f0001000000000904cf0000ff013700052482"], 0x0)

12m42.231747925s ago: executing program 0 (id=7702):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0608262300ba8b0ad775", 0xc, 0xfffffffffffffffc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r4)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_adj\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, &(0x7f0000000280)})
readv(r6, &(0x7f0000000080)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1)

12m40.760176663s ago: executing program 0 (id=7704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
fanotify_mark(0xffffffffffffffff, 0x105, 0x0, r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

12m39.243174017s ago: executing program 0 (id=7705):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0)

12m37.361559648s ago: executing program 0 (id=7707):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4})

12m21.508100216s ago: executing program 42 (id=7707):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x24})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4})

8m13.126138836s ago: executing program 8 (id=8076):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40008c4, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0)
socket$inet(0x10, 0x3, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
unshare(0x22020600)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ppoll(&(0x7f0000000000)=[{r2, 0x81}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040c4)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa395e046d7c8e944613a407abbf4ed3e800000000000000082a850e79009e2905d2f98ba18f91f3c93686e9bee067f4e77d9ad6623805004100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9528c46178ed5f9192dae000e579c80eca35a58dc47d1d5e4ff6e216c724e88c70244858700", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)

8m9.982020702s ago: executing program 8 (id=8084):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2)
connect$inet6(r4, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0x4000000000003)
r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$smackfs_change_rule(r6, &(0x7f0000000140)={'$+', 0x20, '9', 0x20, 'rtbl', 0x20, 'rwxal'}, 0x10)

8m7.565967159s ago: executing program 8 (id=8088):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syslog(0x2, &(0x7f0000000640), 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)={0x12c, r5, 0x1, 0x0, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xf, @local, 0x7f}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x33}, 0x10001}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3, @private1, 0xffffff7f}}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

8m3.597944368s ago: executing program 8 (id=8092):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080))
socket(0x10, 0x6, 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5)
sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r6, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x10, @empty}, 0x1c, 0x0}}], 0x1, 0x20000000)
recvmmsg(r7, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0)

8m2.392172741s ago: executing program 8 (id=8096):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
io_uring_setup(0x27fd, &(0x7f0000000380)={0x0, 0xffffff01, 0x0, 0x1, 0x17e})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x158, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x124, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x114, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x7c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa425, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x41c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff81, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x802, 0x72e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x95a}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0x3c, 0x1, {0x3bb, 0x9de7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x158}}, 0x0)

8m0.060119175s ago: executing program 8 (id=8098):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000200)={0x10, [0x4a78, 0xa, 0x1eb, 0x3ca9, 0xfffa, 0x8001, 0xad5, 0x5, 0x2, 0x7, 0x1, 0x5, 0x2, 0x2, 0x10, 0x6, 0x3901, 0x4, 0x9, 0xfbff, 0x7a92, 0x5, 0x94, 0x80, 0x2, 0x7, 0x8000, 0x4, 0x5, 0xe3, 0x1, 0x7, 0x10, 0xf9b4, 0x2, 0x5, 0x0, 0x1, 0x7, 0x81, 0x6, 0x100, 0xffff, 0x9, 0x6, 0x8001, 0x5, 0x2], 0x7})
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xa2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x3c27, &(0x7f0000000280)={0x0, 0x6e8e, 0x4, 0x1, 0x23b})
r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300)=r6, 0x1)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet6_mptcp(0xa, 0x1, 0x106)

7m44.25762813s ago: executing program 43 (id=8098):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000200)={0x10, [0x4a78, 0xa, 0x1eb, 0x3ca9, 0xfffa, 0x8001, 0xad5, 0x5, 0x2, 0x7, 0x1, 0x5, 0x2, 0x2, 0x10, 0x6, 0x3901, 0x4, 0x9, 0xfbff, 0x7a92, 0x5, 0x94, 0x80, 0x2, 0x7, 0x8000, 0x4, 0x5, 0xe3, 0x1, 0x7, 0x10, 0xf9b4, 0x2, 0x5, 0x0, 0x1, 0x7, 0x81, 0x6, 0x100, 0xffff, 0x9, 0x6, 0x8001, 0x5, 0x2], 0x7})
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1)
r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xa2})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = io_uring_setup(0x3c27, &(0x7f0000000280)={0x0, 0x6e8e, 0x4, 0x1, 0x23b})
r6 = openat$dlm_plock(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000300)=r6, 0x1)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
socket$inet6_mptcp(0xa, 0x1, 0x106)

24.42747637s ago: executing program 1 (id=8745):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r4, r4, &(0x7f0000000080), 0x7f03)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10)
recvmmsg(r8, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000240)=""/122, 0x7a}], 0x2}, 0xdc}], 0x1, 0x40000002, 0x0)
sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0)

24.374731307s ago: executing program 9 (id=8747):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x20440, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = userfaultfd(0x801)
getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
read$msr(r0, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001fc0), 0xa0000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000002000)={0x0, @aes128})

20.481858831s ago: executing program 1 (id=8752):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
sendmmsg(r4, 0x0, 0x0, 0x4000855)
write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9f)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294})
mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, 0x0)
syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0)

20.368737629s ago: executing program 9 (id=8753):
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=<r1=>0x0)
waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
gettid()
sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881)
recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)

17.873518043s ago: executing program 1 (id=8755):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x26)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x10000)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
sendfile(r5, r3, &(0x7f0000002080)=0x64, 0x23b)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x0, @empty, 0xe2}], 0x4c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000000000000000000500007894", @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)

17.293248479s ago: executing program 9 (id=8756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x10, 0x1403, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x18, 0x0, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)

17.288936495s ago: executing program 3 (id=8757):
mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000340)=0x1)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)

17.222156622s ago: executing program 5 (id=8758):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket(0x1f, 0x1, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x44000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9065, @loopback, 0x7fffffff}, 0x1c)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)

14.55267795s ago: executing program 6 (id=8759):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="0200000004000000040000000200000000010000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, 0x0}, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
clock_gettime(0x0, 0x0)
truncate(&(0x7f0000000000)='./file2\x00', 0x8800000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
r3 = syz_pidfd_open(r2, 0x0)
wait4(r2, 0x0, 0x40000000, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180))
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18)
openat$nullb(0xffffffffffffff9c, 0x0, 0x20180, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121300, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x125f, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)

14.535842452s ago: executing program 3 (id=8760):
r0 = socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40004)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x8, 0xffffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2040600)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2)
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x3}, 0x28)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000000)=0x10, 0x4)

12.823740787s ago: executing program 5 (id=8761):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x4, 0x0, @void}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)

11.831263545s ago: executing program 6 (id=8762):
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
mkdir(0x0, 0xff0c)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x170)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x0, 0x5, 0x9, 0x8001, 0x176f, 0x0, 0x0, 0x4}}, 0x50)
write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006)

11.830402671s ago: executing program 3 (id=8763):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x5}, 0x1c)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000400)=""/164)
bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11.236091613s ago: executing program 1 (id=8764):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0)
mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000019c0)={0x2020}, 0x2020)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x8)
sendfile(r1, r1, 0x0, 0x40008)

11.212978838s ago: executing program 5 (id=8765):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000080071103a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000340)='security.SMACK64IPOUT\x00', &(0x7f0000000380)={'/dev/bus/usb/00#/00#\x00'}, 0x16, 0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast})
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
socketpair(0x2, 0xa, 0x2850, &(0x7f0000000240))
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r5})
r6 = fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

10.235025497s ago: executing program 3 (id=8766):
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=<r1=>0x0)
waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
gettid()
sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881)
recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)

10.203592368s ago: executing program 9 (id=8767):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
unshare(0x64030c00)
pselect6(0x40, &(0x7f0000000180)={0x3, 0xcb9, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffc, 0xb456, 0x8c20, 0x9861}, &(0x7f0000000200)={0x2, 0x400, 0xffffffff, 0x7fff, 0x7, 0x7, 0xffffffffffffffff, 0x2}, &(0x7f0000000340)={0xf, 0x4, 0x1, 0x58, 0xffffffffffffffff, 0x2, 0x9, 0x100}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

9.429435939s ago: executing program 6 (id=8768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x100}, 0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1000000000000007, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0x80000000, 0x8320, 0xc20, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x4}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x50)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]})
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}})

9.391453979s ago: executing program 1 (id=8769):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
r1 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
close(r1)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = gettid()
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x25, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9, r2})
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r4, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x76, 0x6031})
capset(0x0, &(0x7f00000000c0)={0xfff, 0x200000, 0x5, 0x0, 0x0, 0x7})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))

8.280276853s ago: executing program 3 (id=8770):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x1, 0x4, 0x39, @loopback, @mcast2={0xff, 0x3}, 0x2000, 0x0, 0x0, 0x2}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x7f)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r9, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
read$nci(r1, &(0x7f0000000580)=""/10, 0xa)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x10, 0xbaf4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
dup(0xffffffffffffffff)

6.851480229s ago: executing program 6 (id=8771):
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket(0x1f, 0x1, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x44000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9065, @loopback, 0x7fffffff}, 0x1c)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0)

6.101252296s ago: executing program 5 (id=8772):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2ca8)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
gettid()
getrusage(0x0, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x6}, {0x83e, 0x40}]}, 0x14, 0x1)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x81, 0x21, 0xe9, 0x40, 0x4e6, 0x5591, 0xb539, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xe5, 0x15, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x88, 0x2}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x1, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x96}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xd, 0xf, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x79, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xd, 0x22, 0xee}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x2, 0xed, 0x20, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42d}}]})

5.556657568s ago: executing program 3 (id=8773):
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040), 0x6)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmsg$unix(r2, 0x0, 0x0)
open(0x0, 0x2000, 0x4)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0)
fcntl$notify(r4, 0x402, 0x6)
syz_80211_inject_frame(&(0x7f00000000c0), 0x0, 0x36)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[], 0x0)

5.482990079s ago: executing program 1 (id=8774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
r2 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb2<S\xd8\x11\x8b\x9a0\xea1\xde_\xcfW\xfa', 0x3)
fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfe49, 0x0)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e99c27f53cd", 0x8}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000600)=0xdfa, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000280), 0xe)

2.409800544s ago: executing program 9 (id=8775):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
sendmmsg(r6, 0x0, 0x0, 0x4000855)
write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9f)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294})
mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0)
syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.391159293s ago: executing program 6 (id=8776):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x4, 0x0, @void}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000340)=[{0x0}], 0x1)
io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x3dcc, 0x40, 0x0, 0xf7, 0x0, r3})

1.381810056s ago: executing program 9 (id=8777):
socket(0x2, 0x3, 0x100000001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
socket$key(0xf, 0x3, 0x2)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000000040), 0x4481, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}]})
ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000004c0))
openat$sysfs(0xffffffffffffff9c, 0x0, 0x7d1e02, 0x90)
sendfile(r3, r1, 0x0, 0x101)
socket$inet6(0xa, 0x2, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x97)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x7f, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x100000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8)

1.26396099s ago: executing program 5 (id=8778):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

359.262084ms ago: executing program 5 (id=8779):
socket$inet(0x2, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r5, 0x0)
setpgid(0x0, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000})

0s ago: executing program 6 (id=8780):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
creat(&(0x7f0000000000)='./file0\x00', 0x108)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0)
ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, 0x0)

kernel console output (not intermixed with test programs):

2302][  T300] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 2710.086190][  T300] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[ 2710.181541][T30859] Bluetooth: hci5: command tx timeout
[ 2710.909957][T30859] Bluetooth: hci3: command 0x0406 tx timeout
[ 2711.112129][T23377] vhci_hcd: vhci_device speed not set
[ 2712.393261][T21049] Bluetooth: hci5: command tx timeout
[ 2714.823892][T21049] Bluetooth: hci5: command tx timeout
[ 2714.938490][T15474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2715.053388][  T342] binder: 341:342 ioctl 4018620d 0 returned -22
[ 2715.055731][T32738] chnl_net:caif_netlink_parms(): no params data found
[ 2715.816739][  T354] binder: 341:354 ioctl c0306201 0 returned -14
[ 2717.958753][  T369] netlink: 452 bytes leftover after parsing attributes in process `syz.1.7756'.
[ 2718.401718][  T358] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 2718.542541][T15474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2718.698338][  T363] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-��:�/": -EINTR
[ 2718.833649][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2718.864142][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2718.994483][  T373] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2719.285264][T15474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2720.494198][T15474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2721.262482][T32738] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2721.276668][T32738] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2722.028686][T32738] bridge_slave_0: entered allmulticast mode
[ 2722.037995][T32738] bridge_slave_0: entered promiscuous mode
[ 2722.507298][T32738] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2722.612885][T32738] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2722.620326][T32738] bridge_slave_1: entered allmulticast mode
[ 2722.915661][T32738] bridge_slave_1: entered promiscuous mode
[ 2723.901624][  T416] netlink: 'syz.1.7764': attribute type 21 has an invalid length.
[ 2723.909541][  T416] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2724.397416][T32738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2724.425936][T32738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2726.643155][T32738] team0: Port device team_slave_0 added
[ 2726.672883][T32738] team0: Port device team_slave_1 added
[ 2726.932547][  T434] loop9: detected capacity change from 0 to 7
[ 2726.939780][  T434] buffer_io_error: 254 callbacks suppressed
[ 2726.939795][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.954046][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.962055][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.970119][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.978228][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.986371][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2726.994391][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2727.002382][  T434] ldm_validate_partition_table(): Disk read failed.
[ 2727.009045][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2727.017071][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2727.025108][  T434] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2727.033539][  T434] Dev loop9: unable to read RDB block 0
[ 2727.039447][  T434]  loop9: unable to read partition table
[ 2727.045400][  T434] loop9: partition table beyond EOD, truncated
[ 2727.051845][  T434] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 2727.051845][  T434] 
) failed (rc=-5)
[ 2727.481728][  T447] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2727.701694][T30859] Bluetooth: hci3: command 0x0406 tx timeout
[ 2728.118342][T32738] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2728.404299][T32738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2728.430268][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2728.679861][T32738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2728.706561][T32738] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2728.735346][T32738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2728.763122][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2729.722849][T32738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2729.756907][T15474] bridge_slave_1: left allmulticast mode
[ 2729.763714][T15474] bridge_slave_1: left promiscuous mode
[ 2729.771386][T15474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2730.831308][T15474] bridge_slave_0: left allmulticast mode
[ 2731.378850][T15474] bridge_slave_0: left promiscuous mode
[ 2731.634972][T15474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2733.424358][  T481] omfs: Invalid superblock (0)
[ 2733.475668][  T469] Falling back ldisc for ptm0.
[ 2736.217203][T30859] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 2736.236477][T30859] CPU: 1 UID: 0 PID: 30859 Comm: kworker/u9:4 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 2736.236504][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2736.236516][T30859] Workqueue: hci3 hci_rx_work
[ 2736.236556][T30859] Call Trace:
[ 2736.236566][T30859]  <TASK>
[ 2736.236576][T30859]  dump_stack_lvl+0x189/0x250
[ 2736.236596][T30859]  ? kernfs_path_from_node+0x2c/0x260
[ 2736.236614][T30859]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2736.236633][T30859]  ? __pfx__printk+0x10/0x10
[ 2736.236656][T30859]  ? kernfs_path_from_node+0x2c/0x260
[ 2736.236670][T30859]  ? kernfs_path_from_node+0x2c/0x260
[ 2736.236687][T30859]  ? kernfs_path_from_node+0x22c/0x260
[ 2736.236702][T30859]  ? kernfs_path_from_node+0x2c/0x260
[ 2736.236724][T30859]  sysfs_create_dir_ns+0x259/0x280
[ 2736.236761][T30859]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2736.236788][T30859]  ? do_raw_spin_unlock+0x122/0x240
[ 2736.236815][T30859]  kobject_add_internal+0x59f/0xb40
[ 2736.236840][T30859]  kobject_add+0x155/0x220
[ 2736.236863][T30859]  ? __pfx_kobject_add+0x10/0x10
[ 2736.236887][T30859]  ? _raw_spin_unlock+0x28/0x50
[ 2736.236921][T30859]  ? get_device_parent+0x366/0x3a0
[ 2736.236954][T30859]  device_add+0x408/0xb50
[ 2736.236986][T30859]  hci_conn_add_sysfs+0xd5/0x1e0
[ 2736.237017][T30859]  le_conn_complete_evt+0xc3a/0x1220
[ 2736.237048][T30859]  ? __pfx_le_conn_complete_evt+0x10/0x10
[ 2736.237069][T30859]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 2736.237082][T30859]  ? __asan_memcpy+0x40/0x70
[ 2736.237104][T30859]  ? __pfx___mutex_lock+0x10/0x10
[ 2736.237119][T30859]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2736.237133][T30859]  ? skb_pull_data+0xfb/0x200
[ 2736.237161][T30859]  hci_le_conn_complete_evt+0x187/0x450
[ 2736.237206][T30859]  hci_event_packet+0x78c/0x1200
[ 2736.237234][T30859]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 2736.237253][T30859]  ? __pfx_hci_event_packet+0x10/0x10
[ 2736.237279][T30859]  ? kcov_remote_start+0x4d3/0x7f0
[ 2736.237302][T30859]  ? lockdep_hardirqs_on+0x90/0x150
[ 2736.237329][T30859]  ? hci_send_to_monitor+0xe2/0x570
[ 2736.237351][T30859]  hci_rx_work+0x46a/0xe80
[ 2736.237382][T30859]  ? process_scheduled_works+0x9ef/0x17b0
[ 2736.237402][T30859]  process_scheduled_works+0xade/0x17b0
[ 2736.237443][T30859]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2736.237475][T30859]  worker_thread+0x8a0/0xda0
[ 2736.237495][T30859]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2736.237525][T30859]  ? __kthread_parkme+0x7b/0x200
[ 2736.237551][T30859]  kthread+0x711/0x8a0
[ 2736.237575][T30859]  ? __pfx_worker_thread+0x10/0x10
[ 2736.237592][T30859]  ? __pfx_kthread+0x10/0x10
[ 2736.237616][T30859]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2736.237637][T30859]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2736.237659][T30859]  ? __pfx_kthread+0x10/0x10
[ 2736.237682][T30859]  ret_from_fork+0x3fc/0x770
[ 2736.237700][T30859]  ? __pfx_ret_from_fork+0x10/0x10
[ 2736.237721][T30859]  ? __switch_to_asm+0x39/0x70
[ 2736.237740][T30859]  ? __switch_to_asm+0x33/0x70
[ 2736.237759][T30859]  ? __pfx_kthread+0x10/0x10
[ 2736.237781][T30859]  ret_from_fork_asm+0x1a/0x30
[ 2736.237814][T30859]  </TASK>
[ 2736.237891][T30859] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 2737.322083][T30859] Bluetooth: hci3: failed to register connection device
[ 2739.768512][  T515] dlm: no local IP address has been set
[ 2739.775589][  T515] dlm: cannot start dlm midcomms -107
[ 2741.171383][  T521] syz.3.7787: attempt to access beyond end of device
[ 2741.171383][  T521] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2741.572581][T15474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2741.602204][T15474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2741.632765][T15474] bond0 (unregistering): Released all slaves
[ 2741.816214][  T520] kthread_run failed with err -4
[ 2742.825004][  T538] veth0_vlan: entered allmulticast mode
[ 2744.090714][T32738] hsr_slave_0: entered promiscuous mode
[ 2744.145428][T32738] hsr_slave_1: entered promiscuous mode
[ 2744.154177][  T550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7792'.
[ 2744.212518][T32738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2744.451789][T32738] Cannot create hsr debugfs directory
[ 2745.470429][  T562] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7788'.
[ 2747.269364][T15474] hsr_slave_0: left promiscuous mode
[ 2747.300665][T15474] hsr_slave_1: left promiscuous mode
[ 2747.323338][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2747.346781][T15474] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2747.387110][T15474] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2747.394947][T15474] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2747.494137][T15474] veth1_macvtap: left promiscuous mode
[ 2747.520348][T15474] veth0_macvtap: left promiscuous mode
[ 2747.535844][T15474] veth1_vlan: left promiscuous mode
[ 2747.555801][T15474] veth0_vlan: left promiscuous mode
[ 2747.691622][  T498] Bluetooth: hci3: command 0x0406 tx timeout
[ 2751.778972][  T597] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd5": -EINTR
[ 2753.086090][T15474] team0 (unregistering): Port device team_slave_1 removed
[ 2753.208465][T15474] team0 (unregistering): Port device team_slave_0 removed
[ 2754.732933][  T581] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7798'.
[ 2754.838008][  T594] kthread_run failed with err -4
[ 2754.843770][  T596] ������: renamed from vlan0
[ 2755.219395][  T619] IPVS: Error connecting to the multicast addr
[ 2756.269209][  T624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7808'.
[ 2756.652321][  T632] netlink: 452 bytes leftover after parsing attributes in process `syz.8.7807'.
[ 2756.866776][  T629] netlink: 'syz.1.7809': attribute type 4 has an invalid length.
[ 2756.905218][  T624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7808'.
[ 2757.014689][  T640] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2757.395927][  T640] slcan: can't register candev
[ 2757.401202][  T640] Falling back ldisc for ttyS3.
[ 2759.663579][  T498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2759.678924][  T498] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2759.688410][  T498] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2759.698577][  T498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2759.706553][  T498] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2760.196164][  T655] lo speed is unknown, defaulting to 1000
[ 2761.165947][  T671] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR
[ 2761.762530][  T680] ptrace attach of "./syz-executor exec"[28964] was attempted by " ��      ��      �      ��      ��      ��      0              ��      ��      ��                 ����                                        �\x07      
                                                                                                              
                                                              �                                                       
                                                               /dev/cpu/#/msr                                                  attr/exec                                                                                                                                                                                                                                                                                                                      $   $ \x0d    
   `         ����                                                                                       
[ 2761.784196][  T498] Bluetooth: hci1: command tx timeout
[ 2761.935882][  T680] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2762.349213][  T681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'.
[ 2762.467293][  T681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7816'.
[ 2763.971648][  T498] Bluetooth: hci1: command tx timeout
[ 2765.267304][  T655] chnl_net:caif_netlink_parms(): no params data found
[ 2766.272035][  T498] Bluetooth: hci1: command tx timeout
[ 2766.604037][  T706] kAFS: No cell specified
[ 2768.026523][T28263] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[ 2769.424075][  T498] Bluetooth: hci1: command tx timeout
[ 2769.540808][  T716] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 2769.551836][  T716] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 2771.790426][  T741] overlay: Unknown parameter '/'
[ 2772.452318][T16828] bridge_slave_1: left allmulticast mode
[ 2772.808678][T16828] bridge_slave_1: left promiscuous mode
[ 2772.814659][T16828] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2772.968245][T16828] bridge_slave_0: left allmulticast mode
[ 2773.100031][T16828] bridge_slave_0: left promiscuous mode
[ 2773.362306][T16828] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2776.245834][T16828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2776.259089][T16828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2776.274849][T16828] bond0 (unregistering): Released all slaves
[ 2777.027168][  T733] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7827'.
[ 2777.036591][  T733] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2777.994662][  T655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2778.007371][  T655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2778.359801][  T655] bridge_slave_0: entered allmulticast mode
[ 2778.373006][  T655] bridge_slave_0: entered promiscuous mode
[ 2778.386454][  T655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2778.397594][  T655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2778.409688][  T655] bridge_slave_1: entered allmulticast mode
[ 2778.423552][  T655] bridge_slave_1: entered promiscuous mode
[ 2778.625544][T16828] hsr_slave_0: left promiscuous mode
[ 2778.872950][T16828] hsr_slave_1: left promiscuous mode
[ 2778.879225][T16828] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2778.908807][T16828] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2779.921863][  T785] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2780.408977][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2780.421915][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2780.737903][  T793] overlay: Unknown parameter '/'
[ 2783.836594][T16828] team0 (unregistering): Port device team_slave_1 removed
[ 2783.900227][T16828] team0 (unregistering): Port device team_slave_0 removed
[ 2785.317238][  T655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2785.396745][  T655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2786.020025][  T822] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2786.098342][  T655] team0: Port device team_slave_0 added
[ 2786.272785][  T655] team0: Port device team_slave_1 added
[ 2787.487145][  T655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2787.508362][  T655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2789.156121][  T655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2790.007603][  T655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2790.048779][  T655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2790.261814][  T655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2791.611512][   T30] kauditd_printk_skb: 13 callbacks suppressed
[ 2791.611553][   T30] audit: type=1326 audit(1752660454.527:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=853 comm="syz.3.7857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdf018e929 code=0x0
[ 2793.669956][  T655] hsr_slave_0: entered promiscuous mode
[ 2793.781756][  T655] hsr_slave_1: entered promiscuous mode
[ 2793.844785][  T655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2793.971540][  T655] Cannot create hsr debugfs directory
[ 2798.011553][   T30] audit: type=1326 audit(1752660459.487:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2798.094719][   T30] audit: type=1326 audit(1752660459.487:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2798.182910][   T30] audit: type=1326 audit(1752660460.967:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdf018d3df code=0x7ffc0000
[ 2798.604548][   T30] audit: type=1326 audit(1752660460.967:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2798.860245][   T30] audit: type=1326 audit(1752660460.967:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2799.744466][   T30] audit: type=1326 audit(1752660460.967:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2799.826344][  T923] ubi31: detaching mtd0
[ 2800.037167][  T923] ubi31: mtd0 is detached
[ 2800.041653][   T30] audit: type=1326 audit(1752660460.967:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2801.036765][   T30] audit: type=1326 audit(1752660460.967:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2801.058912][   T30] audit: type=1326 audit(1752660460.967:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2801.361388][   T30] audit: type=1326 audit(1752660460.967:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=892 comm="syz.3.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x7ffc0000
[ 2801.408198][  T655] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2801.670642][  T655] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2801.722653][  T931] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7872'.
[ 2801.867294][  T655] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2802.094194][  T655] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2805.414278][  T970] veth0_vlan: entered allmulticast mode
[ 2805.430531][  T971] ������: renamed from vlan0
[ 2805.666924][  T655] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2805.809753][  T655] 8021q: adding VLAN 0 to HW filter on device team0
[ 2806.736177][T15474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2806.743399][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2806.956398][T32453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2806.963700][T32453] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2807.145183][  T992] netlink: 'syz.3.7884': attribute type 10 has an invalid length.
[ 2807.901185][  T655] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2809.070227][ T1013] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2809.145498][ T1013] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2810.135400][ T1026] Cannot find add_set index 1 as target
[ 2810.432281][ T1032] No such timeout policy "syz0"
[ 2812.695793][  T655] veth0_vlan: entered promiscuous mode
[ 2812.955270][  T655] veth1_vlan: entered promiscuous mode
[ 2814.138027][  T655] veth0_macvtap: entered promiscuous mode
[ 2814.372235][  T655] veth1_macvtap: entered promiscuous mode
[ 2814.983708][  T655] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2815.003146][  T655] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2815.014585][  T655] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.025267][  T655] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.034344][  T655] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2815.046316][  T655] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2817.142418][ T1082] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR
[ 2817.539093][T29341] IPVS: starting estimator thread 0...
[ 2817.871660][ T1088] IPVS: using max 22 ests per chain, 52800 per kthread
[ 2818.505529][ T1092] netlink: 'syz.3.7903': attribute type 29 has an invalid length.
[ 2819.076374][ T1100] overlay: Unknown parameter '/'
[ 2820.625939][ T1107] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7905'.
[ 2820.635433][ T1107] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2822.546566][T30859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2822.564825][T30859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2823.284063][T30859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2823.335650][T30859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2823.402923][T30859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2823.725200][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 2823.725219][   T30] audit: type=1326 audit(1752660486.647:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2824.368040][   T30] audit: type=1326 audit(1752660486.647:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2824.389884][   T30] audit: type=1326 audit(1752660486.647:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2824.568782][ T1136] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 2824.601203][   T30] audit: type=1326 audit(1752660486.647:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2825.009003][   T30] audit: type=1326 audit(1752660486.647:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2825.298620][T32453] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2825.310083][   T30] audit: type=1326 audit(1752660486.807:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2825.736372][ T1145] hfsplus: unable to find HFS+ superblock
[ 2825.777143][T30859] Bluetooth: hci1: command tx timeout
[ 2826.061165][   T30] audit: type=1326 audit(1752660486.807:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2826.088075][ T1124] lo speed is unknown, defaulting to 1000
[ 2826.107559][   T30] audit: type=1326 audit(1752660486.817:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2826.166375][   T30] audit: type=1326 audit(1752660486.817:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2826.187996][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2826.202664][   T30] audit: type=1326 audit(1752660486.817:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1133 comm="syz.5.7910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x7ffc0000
[ 2826.798732][T32453] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2827.048067][T32453] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2827.290679][T32453] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2827.851560][T30859] Bluetooth: hci1: command tx timeout
[ 2829.024458][T32453] bridge_slave_1: left allmulticast mode
[ 2829.037079][T32453] bridge_slave_1: left promiscuous mode
[ 2829.043974][T32453] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2829.056692][T32453] bridge_slave_0: left allmulticast mode
[ 2829.063145][T32453] bridge_slave_0: left promiscuous mode
[ 2829.100059][T32453] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2830.331536][T30859] Bluetooth: hci1: command tx timeout
[ 2831.083925][ T1178] kernel profiling enabled (shift: 9)
[ 2831.493549][T28263] libceph: connect (1)[c::]:6789 error -22
[ 2831.499601][T28263] libceph: mon0 (1)[c::]:6789 connect error
[ 2831.532742][ T1179] ceph: No mds server is up or the cluster is laggy
[ 2831.613078][ T1185] vxfs: WRONG superblock magic 00000000 at 1
[ 2831.619445][ T1185] vxfs: WRONG superblock magic 00000000 at 8
[ 2831.625656][ T1185] vxfs: can't find superblock.
[ 2832.076933][ T1192] xt_TCPMSS: Only works on TCP SYN packets
[ 2832.411493][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2832.420216][T30859] Bluetooth: hci1: command tx timeout
[ 2833.461467][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2834.231826][ T1199] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[ 2834.491510][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2834.576338][T32453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2834.611514][T32453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2834.656531][T32453] bond0 (unregistering): Released all slaves
[ 2834.675954][ T1173] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7918'.
[ 2834.685483][ T1173] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2834.737362][ T1124] chnl_net:caif_netlink_parms(): no params data found
[ 2834.930202][ T1207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2835.531499][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2836.576098][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2836.766257][T32453] hsr_slave_0: left promiscuous mode
[ 2836.766617][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 2836.766637][   T30] audit: type=1326 audit(1752660499.687:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1215 comm="syz.8.7927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67d5f8e929 code=0x0
[ 2836.964797][T32453] hsr_slave_1: left promiscuous mode
[ 2837.385173][ T1224] syz.5.7928: attempt to access beyond end of device
[ 2837.385173][ T1224] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2837.611487][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2837.652777][T32453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2837.671501][T32453] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2837.951522][T32453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2837.978930][T32453] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2838.221734][T32453] veth1_macvtap: left promiscuous mode
[ 2838.227697][T32453] veth0_macvtap: left promiscuous mode
[ 2838.234489][T32453] veth1_vlan: left promiscuous mode
[ 2838.240764][T32453] veth0_vlan: left promiscuous mode
[ 2838.266465][ T1238] overlay: Unknown parameter '/'
[ 2838.661492][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2839.632991][ T1248] xt_nat: multiple ranges no longer supported
[ 2839.691479][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2840.731420][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2841.781368][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2842.055831][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2842.062790][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2842.821349][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2842.959689][ T1265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7934'.
[ 2843.344008][T32453] team0 (unregistering): Port device team_slave_1 removed
[ 2843.416242][T32453] team0 (unregistering): Port device team_slave_0 removed
[ 2843.851532][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2844.894239][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2845.934636][ T1279] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2845.941570][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2846.392290][   T30] audit: type=1326 audit(1752660508.887:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1272 comm="syz.5.7936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x0
[ 2846.455660][ T1274] No such timeout policy "syz0"
[ 2846.981354][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2847.678789][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2847.696824][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2847.721519][ T1124] bridge_slave_0: entered allmulticast mode
[ 2848.011406][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2848.812164][ T1124] bridge_slave_0: entered promiscuous mode
[ 2849.051378][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2849.352513][ T1296] overlay: Unknown parameter '/'
[ 2849.370431][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2849.386030][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2849.394439][ T1124] bridge_slave_1: entered allmulticast mode
[ 2849.403689][ T1124] bridge_slave_1: entered promiscuous mode
[ 2850.101356][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2850.490800][ T1124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2850.513555][ T1313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7944'.
[ 2850.555960][ T1124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2851.131399][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2851.919955][ T1124] team0: Port device team_slave_0 added
[ 2851.967302][ T1124] team0: Port device team_slave_1 added
[ 2852.171378][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2853.221475][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2853.501441][ T1336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7948'.
[ 2853.646906][ T1336] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2854.148047][ T1124] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2854.173115][ T1124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2854.261376][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2854.273828][ T1343] IPVS: ip_vs_add_dest(): server weight less than zero
[ 2854.481155][ T1124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2854.825888][ T1124] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2854.907787][ T1124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2855.170782][ T1124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2855.301423][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2855.456868][ T1354] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7951'.
[ 2855.519335][ T1355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7951'.
[ 2855.554481][ T1124] hsr_slave_0: entered promiscuous mode
[ 2855.594801][ T1124] hsr_slave_1: entered promiscuous mode
[ 2855.621645][ T1124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2855.670241][ T1124] Cannot create hsr debugfs directory
[ 2856.331355][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2857.371373][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2858.117901][   T30] audit: type=1326 audit(1752660520.097:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1364 comm="syz.3.7954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdf018e929 code=0x0
[ 2858.411350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2859.451806][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2859.814315][ T1381] could not allocate digest TFM handle poly1305-generic
[ 2860.491347][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2861.102063][ T1398] syz.1.7961: attempt to access beyond end of device
[ 2861.102063][ T1398] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2861.531514][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2862.442758][ T1415] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7964'.
[ 2862.452121][ T1415] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2862.571439][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2863.611384][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2863.843812][ T1425] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2864.651470][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2865.691363][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2866.731359][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2867.771374][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2868.745173][ T1454] macvlan0: entered promiscuous mode
[ 2868.755059][ T1454] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2868.811474][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2869.851593][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2870.442088][ T1124] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2870.891456][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2871.701776][ T1124] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2871.931377][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2872.166532][ T1124] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2872.295578][ T1124] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2872.971381][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2873.267048][ T1124] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2873.317976][ T1124] 8021q: adding VLAN 0 to HW filter on device team0
[ 2873.456932][T32453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2873.464428][T32453] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2873.860589][   T30] audit: type=1326 audit(1752660536.667:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1480 comm="syz.8.7978" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67d5f8e929 code=0x0
[ 2874.011381][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2874.371955][T32456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2874.379217][T32456] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2875.051572][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2876.091519][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2876.398851][ T1124] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2876.413916][ T1510] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2877.131491][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2878.181362][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2879.211669][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2880.251504][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2880.844424][  T498] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2880.902601][ T1545] loop6: detected capacity change from 0 to 7
[ 2881.014723][  T498] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2881.301364][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2881.380239][  T498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2881.390201][ T1545] Dev loop6: unable to read RDB block 7
[ 2881.396003][ T1545]  loop6: AHDI p1 p2 p3
[ 2881.400335][ T1545] loop6: partition table partially beyond EOD, truncated
[ 2881.407529][ T1545] loop6: p1 start 1601398130 is beyond EOD, truncated
[ 2881.414379][ T1545] loop6: p2 start 1702059890 is beyond EOD, truncated
[ 2881.512517][  T498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2881.522576][  T498] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2881.625067][ T1542] lo speed is unknown, defaulting to 1000
[ 2882.341361][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2883.371407][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2883.661473][T30859] Bluetooth: hci5: command tx timeout
[ 2884.411387][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2884.545223][ T1568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7994'.
[ 2885.451400][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2885.864009][T30859] Bluetooth: hci5: command tx timeout
[ 2885.889654][ T1542] chnl_net:caif_netlink_parms(): no params data found
[ 2886.492112][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2887.531385][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2888.079628][T30859] Bluetooth: hci5: command tx timeout
[ 2888.571889][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2889.250766][ T1597] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[ 2889.349820][ T1601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8000'.
[ 2889.621397][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2890.091733][  T498] Bluetooth: hci5: command tx timeout
[ 2890.651381][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2891.691350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2892.731358][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2893.771381][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2894.093509][ T1542] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2894.100822][ T1542] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2894.346500][ T1542] bridge_slave_0: entered allmulticast mode
[ 2894.811388][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2894.896293][ T1542] bridge_slave_0: entered promiscuous mode
[ 2894.912163][ T1542] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2894.919475][ T1542] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2894.957486][ T1542] bridge_slave_1: entered allmulticast mode
[ 2894.967476][ T1542] bridge_slave_1: entered promiscuous mode
[ 2895.226542][ T1620] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8008'.
[ 2895.235977][ T1620] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2895.861355][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2896.350969][ T1542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2896.891357][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2897.047469][ T1642] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR
[ 2897.153046][ T1646] netlink: 'syz.5.8013': attribute type 11 has an invalid length.
[ 2897.234301][ T1542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2897.931394][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2898.971473][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2899.964047][ T1542] team0: Port device team_slave_0 added
[ 2900.011354][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2900.269598][ T1542] team0: Port device team_slave_1 added
[ 2900.560907][   T30] audit: type=1326 audit(1752660563.477:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1657 comm="syz.5.8016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x0
[ 2901.051405][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2902.091360][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2902.316083][T32460] bridge_slave_1: left allmulticast mode
[ 2902.322045][T32460] bridge_slave_1: left promiscuous mode
[ 2902.327899][T32460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2902.487764][T32460] bridge_slave_0: left allmulticast mode
[ 2902.899113][T32460] bridge_slave_0: left promiscuous mode
[ 2902.905087][T32460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2903.145820][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2903.152385][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2903.160235][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2904.181409][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2905.211635][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2905.803841][T32460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2905.835122][T32460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2905.847841][T32460] bond0 (unregistering): Released all slaves
[ 2905.914857][ T1542] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2905.934147][ T1542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2906.015802][ T1542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2906.251395][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2906.318567][T32460] hsr_slave_0: left promiscuous mode
[ 2906.366477][T32460] hsr_slave_1: left promiscuous mode
[ 2906.391471][T32460] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2906.409444][T32460] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2907.291400][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2908.331350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2909.371345][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2909.465890][T32460] team0 (unregistering): Port device team_slave_1 removed
[ 2909.546181][T32460] team0 (unregistering): Port device team_slave_0 removed
[ 2910.242515][ T1542] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2910.249851][ T1542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2910.276131][ T1542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2910.302392][ T1707] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8024'.
[ 2910.311620][ T1707] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 2910.412455][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2911.451354][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2912.491347][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2913.531346][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2914.045420][ T1542] hsr_slave_0: entered promiscuous mode
[ 2914.083533][ T1542] hsr_slave_1: entered promiscuous mode
[ 2914.091036][ T1542] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2914.106105][ T1542] Cannot create hsr debugfs directory
[ 2914.348530][ T1741] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2914.571338][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2915.611431][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2915.941364][T28263] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[ 2916.200606][T28263] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2916.235598][T28263] usb 2-1: not running at top speed; connect to a high speed hub
[ 2916.263726][T28263] usb 2-1: config 219 has 1 interface, different from the descriptor's value: 2
[ 2916.277962][T28263] usb 2-1: config 219 interface 0 has no altsetting 0
[ 2916.301838][T28263] usb 2-1: config 219 interface 0 has no altsetting 1
[ 2916.317168][T28263] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e
[ 2916.329443][T28263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2916.362848][T28263] usb 2-1: Product: syz
[ 2916.369067][T28263] usb 2-1: Manufacturer: syz
[ 2916.379617][T28263] usb 2-1: SerialNumber: syz
[ 2916.661338][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2916.746762][ T1759] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2916.865909][ T1759] can0: slcan on ttyS3.
[ 2917.517921][ T1761] can0 (unregistered): slcan off ttyS3.
[ 2917.701355][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2917.747136][T28263] usb 2-1: selecting invalid altsetting 0
[ 2917.969903][ T1760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2917.983953][T28263] usb 2-1: selecting invalid altsetting 0
[ 2918.741326][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2918.793034][T28263] usb 2-1: USB disconnect, device number 16
[ 2919.289667][ T1771] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2919.720362][ T1775] syz.5.8036: attempt to access beyond end of device
[ 2919.720362][ T1775] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2919.771385][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2919.909984][ T1542] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2919.962258][ T1542] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2919.982332][ T1542] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2920.011074][ T1542] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2920.340754][ T1542] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2920.386806][ T1542] 8021q: adding VLAN 0 to HW filter on device team0
[ 2920.446735][T16828] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2920.454136][T16828] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2920.486616][T16828] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2920.493875][T16828] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2920.811421][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2921.449252][T17650] libceph: connect (1)[c::]:6789 error -101
[ 2921.711470][ T1811] ceph: No mds server is up or the cluster is laggy
[ 2921.757961][T17650] libceph: mon0 (1)[c::]:6789 connect error
[ 2921.851416][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2922.891421][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2923.075033][ T1827] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2923.931339][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2924.971364][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2925.067542][ T1542] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2926.011364][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2927.051338][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2928.101406][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2929.131358][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2929.897798][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8051'.
[ 2929.906897][ T1867] IPVS: Unknown mcast interface: vcan0
[ 2929.937030][ T1867] overlayfs: missing 'lowerdir'
[ 2930.171346][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2930.838660][ T1542] veth0_vlan: entered promiscuous mode
[ 2931.211339][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2931.368469][ T1872] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd5": -EINTR
[ 2931.465987][ T1542] veth1_vlan: entered promiscuous mode
[ 2931.640715][ T1542] veth0_macvtap: entered promiscuous mode
[ 2931.652643][ T1542] veth1_macvtap: entered promiscuous mode
[ 2931.694518][ T1542] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2931.710695][ T1542] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2931.729881][ T1542] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.755452][ T1542] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.788170][ T1542] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2931.938157][ T1542] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2932.251346][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2933.291397][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2933.704867][T32456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2933.713116][T32456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2934.331367][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2934.459954][T32460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2934.478236][T32460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2935.371320][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2936.411875][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2937.071819][ T1920] syz.9.8062: attempt to access beyond end of device
[ 2937.071819][ T1920] nbd9: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2937.381539][ T1919] kthread_run failed with err -4
[ 2937.451362][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2937.799590][   T30] audit: type=1326 audit(1752660600.707:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1929 comm="syz.5.8064" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7de1d8e929 code=0x0
[ 2938.491348][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2939.521765][  T498] Bluetooth: hci3: command 0x0406 tx timeout
[ 2939.531340][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2940.571322][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2940.704919][ T1956] atomic_op ffff888076a6f198 conn xmit_atomic 0000000000000000
[ 2940.768480][ T1955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8068'.
[ 2941.611326][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2942.371770][T31801] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 2942.575369][T31801] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2942.651334][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2942.666202][T31801] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2942.756202][T31801] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2942.837563][T31801] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2942.911124][T31801] usb 2-1: Product: syz
[ 2942.950581][T31801] usb 2-1: Manufacturer: syz
[ 2942.984545][T31801] usb 2-1: SerialNumber: syz
[ 2943.092334][T31801] usb 2-1: config 0 descriptor??
[ 2943.519506][T31801] usb 2-1: selecting invalid altsetting 0
[ 2943.541562][T31801] usb 2-1: USB disconnect, device number 17
[ 2943.691360][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2944.446393][ T1980] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR
[ 2944.731811][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2945.238691][ T1995] xt_nat: multiple ranges no longer supported
[ 2945.771416][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2945.796710][T28355] kernel read not supported for file /1220/oom_adj (pid: 28355 comm: kworker/0:1)
[ 2946.483278][ T2002] overlay: Unknown parameter '/'
[ 2946.811412][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2946.909787][ T1991] xt_TCPMSS: Only works on TCP SYN packets
[ 2946.913304][ T2005] syz.5.8081(2005): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 2947.187148][ T2010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8080'.
[ 2947.851371][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2948.328638][ T2018] Invalid ELF header magic: != ELF
[ 2948.891370][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2949.931336][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2950.971330][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2951.100654][ T2034] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[ 2951.101040][ T2033] IPVS: stopping master sync thread 2034 ...
[ 2952.011326][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2953.000132][ T2047] netlink: 'syz.1.8089': attribute type 1 has an invalid length.
[ 2953.008234][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8089'.
[ 2953.052144][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2954.091335][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2955.131372][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2956.171313][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2957.211384][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2957.236230][ T2069] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8096'.
[ 2958.251374][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2958.571975][ T2079] bond_slave_0: entered promiscuous mode
[ 2958.578202][ T2079] bond_slave_1: entered promiscuous mode
[ 2958.584692][ T2079] macvlan2: entered promiscuous mode
[ 2958.590000][ T2079] bond0: entered promiscuous mode
[ 2958.596402][ T2079] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2958.609110][ T2078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8095'.
[ 2959.291331][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2960.305936][ T2097] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2960.331325][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2960.881321][T30859] Bluetooth: hci5: command 0x0405 tx timeout
[ 2961.371617][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2962.411335][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2962.675663][ T2110] syz.5.8102: attempt to access beyond end of device
[ 2962.675663][ T2110] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 2963.451324][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2964.491326][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2965.531351][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2965.583390][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 2965.590690][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 2966.571320][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2967.116202][ T2130] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2967.255267][ T2130] syz.1.8106: attempt to access beyond end of device
[ 2967.255267][ T2130] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0
[ 2967.268906][ T2130] gfs2: error -5 reading superblock
[ 2967.611383][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2967.888697][ T2135] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0)
[ 2967.915451][   T30] audit: type=1326 audit(1752660886.840:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2129 comm="syz.3.8108" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdf018e929 code=0x0
[ 2968.651325][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2969.691407][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2970.647861][ T2145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8110'.
[ 2970.731305][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2971.771325][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2972.811316][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2973.200687][ T5903] libceph: connect (1)[c::]:6789 error -22
[ 2973.288456][ T2159] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2973.334339][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[ 2973.386844][ T2161] ceph: No mds server is up or the cluster is laggy
[ 2973.722852][ T2166] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 2973.851358][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2974.891401][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2974.941356][ T2175] binder: 2170:2175 ioctl 4018620d 0 returned -22
[ 2975.118362][ T2175] overlayfs: missing 'lowerdir'
[ 2975.194060][T30859] Bluetooth: hci5: command 0x0405 tx timeout
[ 2975.197453][ T2175] 9pnet_fd: Insufficient options for proto=fd
[ 2975.931350][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2976.971344][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2977.448539][ T2190] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[ 2977.457740][ T2190] ref_ctr increment failed for inode: 0x604 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888032324600
[ 2977.471345][   T30] audit: type=1804 audit(1752660896.370:1326): pid=2190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.8121" name="/newroot/288/file0" dev="tmpfs" ino=1540 res=1 errno=0
[ 2977.491969][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2978.011695][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2979.051519][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2979.982591][ T2199] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2979.996377][ T2199] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2980.015648][ T2199] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2980.091355][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2980.143260][ T2199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2980.151567][ T2199] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2981.131473][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2982.171339][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2982.497453][ T2199] Bluetooth: hci1: command tx timeout
[ 2982.837685][ T2196] lo speed is unknown, defaulting to 1000
[ 2983.211420][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2983.439812][ T2226] Bluetooth: hci4: Frame reassembly failed (-90)
[ 2984.251657][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2984.571573][T21049] Bluetooth: hci1: command tx timeout
[ 2984.842667][ T2236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2985.291492][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2985.433809][ T2196] chnl_net:caif_netlink_parms(): no params data found
[ 2985.532105][ T2199] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 2986.331988][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2986.651457][  T498] Bluetooth: hci1: command tx timeout
[ 2987.371468][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2988.411301][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2988.651722][ T2266] program syz.9.8137 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2988.970648][  T498] Bluetooth: hci1: command tx timeout
[ 2989.451337][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2989.914700][ T2274] siw: device registration error -23
[ 2990.491307][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2990.980493][ T2278] netlink: 716 bytes leftover after parsing attributes in process `syz.1.8141'.
[ 2991.531507][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2991.962736][ T2285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8141'.
[ 2992.571423][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2993.122851][T15474] dvmrp8 (unregistering): left allmulticast mode
[ 2993.374469][ T2293] omfs: Invalid superblock (0)
[ 2993.611450][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2993.915858][T15474] bond0 (unregistering): Released all slaves
[ 2994.141028][T15474] bond1 (unregistering): Released all slaves
[ 2994.342063][T15474] bond2 (unregistering): Released all slaves
[ 2994.527519][T15474] bond3 (unregistering): Released all slaves
[ 2994.651722][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2995.701296][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2996.163696][ T2300] ceph: No mds server is up or the cluster is laggy
[ 2996.171050][T28355] libceph: connect (1)[c::]:6789 error -101
[ 2996.184445][T28355] libceph: mon0 (1)[c::]:6789 connect error
[ 2996.233526][ T2303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2996.731293][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2996.954608][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2996.962213][ T2196] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2996.969446][ T2196] bridge_slave_0: entered allmulticast mode
[ 2996.978719][ T2196] bridge_slave_0: entered promiscuous mode
[ 2996.986991][T15474] tipc: Disabling bearer <udp:syz2>
[ 2997.452818][T15474] tipc: Left network mode
[ 2997.475262][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2997.487806][ T2196] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2997.522659][ T2196] bridge_slave_1: entered allmulticast mode
[ 2997.540381][ T2196] bridge_slave_1: entered promiscuous mode
[ 2997.660017][ T2196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2997.943420][ T2196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2998.048297][ T2319] netlink: 'syz.1.8148': attribute type 27 has an invalid length.
[ 2998.757477][ T2320] syz.5.8147: attempt to access beyond end of device
[ 2998.757477][ T2320] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0
[ 2998.771140][ T2320] hfsplus: unable to find HFS+ superblock
[ 2999.919046][ T2196] team0: Port device team_slave_0 added
[ 3000.592468][ T2333] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR
[ 3001.561147][ T2196] team0: Port device team_slave_1 added
[ 3001.679092][ T2337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8150'.
[ 3004.980959][ T2360] xt_SECMARK: invalid mode: 2
[ 3005.771712][ T2362] netlink: 'syz.3.8156': attribute type 7 has an invalid length.
[ 3005.786220][ T2362] : entered promiscuous mode
[ 3005.878188][ T2196] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3005.908428][ T2196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3005.951531][ T2196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3006.608107][T28263] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 3007.107988][ T2196] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3007.122678][ T2196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 3007.159301][ T2196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3007.222515][T28263] usb 2-1: device descriptor read/64, error -71
[ 3007.524955][ T2196] hsr_slave_0: entered promiscuous mode
[ 3007.862129][ T2199] Bluetooth: hci5: command 0x0405 tx timeout
[ 3007.886614][T28263] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 3007.910900][ T2196] hsr_slave_1: entered promiscuous mode
[ 3007.920964][ T2196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 3007.937107][ T2196] Cannot create hsr debugfs directory
[ 3008.033533][T28263] usb 2-1: device descriptor read/64, error -71
[ 3008.177762][T28263] usb usb2-port1: attempt power cycle
[ 3008.922774][ T2382] program syz.9.8160 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3009.372031][T28263] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 3009.610933][T28263] usb 2-1: device descriptor read/8, error -71
[ 3009.687711][ T2385] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8162'.
[ 3009.981365][ T2391] overlay: Unknown parameter '/'
[ 3010.716449][ T2392] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 3011.487384][ T2390] delete_channel: no stack
[ 3013.289571][ T2406] veth1_macvtap: left promiscuous mode
[ 3014.371050][ T2422] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR
[ 3014.861057][ T2435] __vm_enough_memory: pid: 2435, comm: syz.1.8172, bytes: 21200283484160 not enough memory for the allocation
[ 3016.458796][ T2441] syz.3.8173: attempt to access beyond end of device
[ 3016.458796][ T2441] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3016.548995][T15474] IPVS: stop unused estimator thread 0...
[ 3017.996541][ T2455] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3018.188592][ T2196] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3018.340147][ T2468] loop6: detected capacity change from 0 to 524287999
[ 3018.381626][ T2196] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3018.450575][ T2196] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3018.532015][ T2196] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3019.415157][ T2468] Dev loop6: unable to read RDB block 8
[ 3019.433788][ T2468]  loop6: unable to read partition table
[ 3019.439761][ T2468] loop_reread_partitions: partition scan of loop6 (3�����) failed (rc=-5)
[ 3019.887755][ T2496] program syz.5.8178 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3020.700967][ T2196] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3021.100446][ T2501] syz.1.8181: attempt to access beyond end of device
[ 3021.100446][ T2501] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3021.566112][ T2196] 8021q: adding VLAN 0 to HW filter on device team0
[ 3021.585151][T32453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3021.592468][T32453] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3021.637745][T32453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3021.645047][T32453] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3022.566625][ T2519] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3023.230751][ T2196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3024.050991][ T2527] ALSA: mixer_oss: invalid OSS volume ''
[ 3024.555483][ T2549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8185'.
[ 3026.111785][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3026.118289][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3027.221505][T29341] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 3028.022156][T29341] usb 2-1: Using ep0 maxpacket: 32
[ 3029.157834][ T2196] veth0_vlan: entered promiscuous mode
[ 3029.217554][ T2196] veth1_vlan: entered promiscuous mode
[ 3029.239812][T29341] usb 2-1: device descriptor read/all, error -71
[ 3030.167339][ T2580] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[ 3030.214132][ T2577] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR
[ 3030.228442][ T2196] veth0_macvtap: entered promiscuous mode
[ 3030.544010][ T2196] veth1_macvtap: entered promiscuous mode
[ 3030.602520][ T2196] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3030.617879][ T2196] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3032.013865][ T2196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.069067][ T2196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.091742][ T2196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.102585][ T2196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3032.866343][T29341] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 3032.927534][T32460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3032.956214][T32460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3032.978240][T32460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3032.986591][ T2601] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 3032.999526][T32460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3033.052221][T29341] usb 2-1: Using ep0 maxpacket: 32
[ 3033.059762][T29341] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 3033.078283][T29341] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 3033.102177][T29341] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 3033.137460][T29341] usb 2-1: Product: syz
[ 3033.152430][T29341] usb 2-1: Manufacturer: syz
[ 3033.157111][T29341] usb 2-1: SerialNumber: syz
[ 3033.424626][T29341] usb 2-1: config 0 descriptor??
[ 3033.431087][ T2595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 3034.192406][ T2613] overlay: Unknown parameter '/'
[ 3036.096363][ T2639] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8202'.
[ 3036.142150][T31801] usb 2-1: USB disconnect, device number 24
[ 3036.583583][ T2654] o2cb: This node has not been configured.
[ 3036.590632][ T2654] o2cb: Cluster check failed. Fix errors before retrying.
[ 3036.597964][ T2654] (syz.3.8203,2654,1):user_dlm_register:674 ERROR: status = -22
[ 3036.606406][ T2654] (syz.3.8203,2654,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[ 3037.981641][ T2663] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[ 3039.075628][ T2674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8209'.
[ 3039.084999][ T2674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8209'.
[ 3040.344648][ T2688] veth0_vlan: entered allmulticast mode
[ 3040.460491][ T2688] ������: renamed from vlan0
[ 3045.173706][ T2703] macvtap1: entered allmulticast mode
[ 3045.179246][ T2703] veth0_macvtap: entered allmulticast mode
[ 3045.321333][ T2702] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.8215'.
[ 3045.818027][ T2710] xt_connbytes: Forcing CT accounting to be enabled
[ 3045.825267][ T2710] set match dimension is over the limit!
[ 3048.477540][ T2730] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 3048.619088][ T2729] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8216'.
[ 3050.515759][ T2751] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[ 3057.751329][T28780] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 3057.923566][T28780] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 3057.942003][T28780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3057.973904][T28780] usb 2-1: config 0 descriptor??
[ 3058.003018][T28780] cp210x 2-1:0.0: cp210x converter detected
[ 3058.791047][T28263] libceph: connect (1)[c::]:6789 error -101
[ 3058.956582][T28263] libceph: mon0 (1)[c::]:6789 connect error
[ 3059.030100][ T2818] ceph: No mds server is up or the cluster is laggy
[ 3059.311820][ T5903] libceph: connect (1)[c::]:6789 error -101
[ 3059.593836][T28780] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 3059.702005][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[ 3059.713231][T28780] cp210x 2-1:0.0: querying part number failed
[ 3060.161310][ T2825] netlink: 'syz.5.8234': attribute type 10 has an invalid length.
[ 3060.208867][ T2825] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8234'.
[ 3060.219191][T28780] usb 2-1: cp210x converter now attached to ttyUSB0
[ 3060.271346][ T2825] dummy0: entered promiscuous mode
[ 3060.308625][ T2825] bridge0: port 3(dummy0) entered blocking state
[ 3060.316188][ T2825] bridge0: port 3(dummy0) entered disabled state
[ 3060.324498][ T2825] dummy0: entered allmulticast mode
[ 3061.282203][T28780] usb 2-1: USB disconnect, device number 25
[ 3061.294180][T28780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 3061.311669][T28780] cp210x 2-1:0.0: device disconnected
[ 3062.765667][ T2843] xt_hashlimit: overflow, rate too high: 0
[ 3063.350761][ T2860] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 3063.520191][ T2862] overlay: Unknown parameter '/'
[ 3064.402035][ T2866] No buffer was provided with the request
[ 3065.658624][   T30] audit: type=1326 audit(1752660984.580:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2878 comm="syz.5.8244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x0
[ 3065.759570][ T2883] veth0_vlan: entered allmulticast mode
[ 3066.360600][ T2884] ������: renamed from vlan0
[ 3068.669912][ T2902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 3068.692253][ T2902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8251'.
[ 3069.587353][ T2909] syz.6.8247: attempt to access beyond end of device
[ 3069.587353][ T2909] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3070.703819][ T2933] overlay: Unknown parameter '/'
[ 3074.928819][ T2965] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8261'.
[ 3074.938097][ T2965] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 3075.329056][ T2968] JFS: discard option not supported on device
[ 3075.335706][ T2968] Mount JFS Failure: -22
[ 3075.340001][ T2968] jfs_mount failed w/return code = -22
[ 3075.940767][ T2973] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR
[ 3077.252142][ T2994] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR
[ 3077.584476][   T30] audit: type=1326 audit(1752660995.870:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=2980 comm="syz.5.8265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7de1d8e929 code=0x0
[ 3077.739252][T28263] libceph: connect (1)[c::]:6789 error -101
[ 3077.790063][T28263] libceph: mon0 (1)[c::]:6789 connect error
[ 3078.590740][ T2998] ceph: No mds server is up or the cluster is laggy
[ 3078.676104][ T3004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8267'.
[ 3080.495678][T17650] libceph: connect (1)[c::]:6789 error -22
[ 3080.504857][T17650] libceph: mon0 (1)[c::]:6789 connect error
[ 3080.584016][ T3013] ceph: No mds server is up or the cluster is laggy
[ 3081.550236][T17650] libceph: connect (1)[c::]:6789 error -22
[ 3081.557670][T17650] libceph: mon0 (1)[c::]:6789 connect error
[ 3086.917494][ T3052] syz.9.8278: attempt to access beyond end of device
[ 3086.917494][ T3052] nbd9: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3087.458154][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3087.571263][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3088.664407][ T3069] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR
[ 3093.697018][ T2199] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3095.221580][ T3093] overlay: Unknown parameter '/'
[ 3096.034290][T32454] tipc: Subscription rejected, illegal request
[ 3098.710387][ T3124] syz.9.8293: attempt to access beyond end of device
[ 3098.710387][ T3124] nbd9: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3098.867181][T28263] IPVS: starting estimator thread 0...
[ 3099.331485][ T3134] IPVS: using max 24 ests per chain, 57600 per kthread
[ 3099.740349][ T3136] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 3100.383347][ T2199] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3102.352173][ T3156] overlay: Unknown parameter '/'
[ 3103.678628][T21049] Bluetooth: hci5: unexpected event for opcode 0x2031
[ 3105.781747][  T498] Bluetooth: hci1: command 0x0406 tx timeout
[ 3108.318250][ T3188] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd9": -EINTR
[ 3110.309725][ T3209] Cannot find map_set index 0 as target
[ 3111.229998][ T3216] Cannot find add_set index 0 as target
[ 3111.462706][ T3216] loop6: detected capacity change from 0 to 524287999
[ 3111.473834][ T3216] buffer_io_error: 4 callbacks suppressed
[ 3111.473856][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3111.487887][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3111.495986][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3111.504925][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3111.517575][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3111.569738][ T3223] overlay: Unknown parameter '/'
[ 3112.288694][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3112.315291][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3112.328671][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3112.342420][ T3216] ldm_validate_partition_table(): Disk read failed.
[ 3112.349180][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3112.357301][ T3216] Buffer I/O error on dev loop6, logical block 0, async page read
[ 3112.365569][ T3216] Dev loop6: unable to read RDB block 0
[ 3112.372008][ T3216]  loop6: unable to read partition table
[ 3112.377956][ T3216] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 3116.605382][ T3248] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd9": -EINTR
[ 3117.543598][ T3263] xt_hashlimit: max too large, truncated to 1048576
[ 3117.561451][ T3263] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 3118.958898][ T3280] : entered promiscuous mode
[ 3121.101903][ T3295] CIFS: iocharset name too long
[ 3121.669564][ T3301] overlay: Unknown parameter '/'
[ 3123.726638][ T3313] syz.3.8335: attempt to access beyond end of device
[ 3123.726638][ T3313] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3124.289796][ T3330] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8336'.
[ 3125.778604][ T3332] loop8: detected capacity change from 0 to 79
[ 3126.171841][T28263] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 3126.701257][T28263] usb 4-1: Using ep0 maxpacket: 16
[ 3126.710489][T28263] usb 4-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[ 3126.802557][T28263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3126.810750][T28263] usb 4-1: Product: syz
[ 3126.815145][T28263] usb 4-1: Manufacturer: syz
[ 3126.819876][T28263] usb 4-1: SerialNumber: syz
[ 3126.830197][T28263] usb 4-1: config 0 descriptor??
[ 3127.066450][ T3327] loop8: detected capacity change from 79 to 78
[ 3128.689089][T28263] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 3128.698196][T28263] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 3128.709254][T28263] usb 4-1: USB disconnect, device number 17
[ 3128.889957][ T3342] program syz.1.8340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3129.097727][ T3343] delete_channel: no stack
[ 3129.209619][ T3356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8344'.
[ 3129.218899][ T3356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8344'.
[ 3131.129538][ T3374] overlay: Unknown parameter '/'
[ 3131.258824][ T3361] syz.3.8343: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 3131.280036][ T3361] CPU: 1 UID: 0 PID: 3361 Comm: syz.3.8343 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 3131.280069][ T3361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3131.280080][ T3361] Call Trace:
[ 3131.280088][ T3361]  <TASK>
[ 3131.280097][ T3361]  dump_stack_lvl+0x189/0x250
[ 3131.280124][ T3361]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3131.280143][ T3361]  ? __pfx__printk+0x10/0x10
[ 3131.280164][ T3361]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 3131.280184][ T3361]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 3131.280211][ T3361]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 3131.280233][ T3361]  warn_alloc+0x214/0x310
[ 3131.280253][ T3361]  ? __pfx_warn_alloc+0x10/0x10
[ 3131.280275][ T3361]  ? __get_vm_area_node+0x28f/0x300
[ 3131.280299][ T3361]  ? frame_vector_create+0x62/0x110
[ 3131.280324][ T3361]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 3131.280372][ T3361]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 3131.280399][ T3361]  ? rcu_is_watching+0x15/0xb0
[ 3131.280418][ T3361]  ? frame_vector_create+0x62/0x110
[ 3131.280437][ T3361]  ? frame_vector_create+0x62/0x110
[ 3131.280458][ T3361]  __kvmalloc_node_noprof+0x3b8/0x5f0
[ 3131.280482][ T3361]  ? frame_vector_create+0x62/0x110
[ 3131.280509][ T3361]  frame_vector_create+0x62/0x110
[ 3131.280531][ T3361]  vb2_create_framevec+0x37/0xd0
[ 3131.280547][ T3361]  vb2_vmalloc_get_userptr+0x108/0x450
[ 3131.280571][ T3361]  ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10
[ 3131.280590][ T3361]  __buf_prepare+0xf4c/0x4740
[ 3131.280622][ T3361]  ? __pfx___buf_prepare+0x10/0x10
[ 3131.280654][ T3361]  ? is_bpf_text_address+0x26/0x2b0
[ 3131.280673][ T3361]  ? is_bpf_text_address+0x292/0x2b0
[ 3131.280688][ T3361]  ? is_bpf_text_address+0x26/0x2b0
[ 3131.280706][ T3361]  ? kernel_text_address+0xa5/0xe0
[ 3131.280737][ T3361]  ? __lock_acquire+0xab9/0xd20
[ 3131.280802][ T3361]  vb2_core_prepare_buf+0xad/0x2c0
[ 3131.280822][ T3361]  __video_do_ioctl+0xc9b/0xdb0
[ 3131.280849][ T3361]  ? __pfx___video_do_ioctl+0x10/0x10
[ 3131.280880][ T3361]  video_usercopy+0x86e/0x14f0
[ 3131.280907][ T3361]  ? __pfx___video_do_ioctl+0x10/0x10
[ 3131.280927][ T3361]  ? __pfx_video_usercopy+0x10/0x10
[ 3131.280944][ T3361]  ? smack_file_ioctl+0x2a9/0x340
[ 3131.280979][ T3361]  ? __fget_files+0x2a/0x420
[ 3131.280992][ T3361]  ? __fget_files+0x3a0/0x420
[ 3131.281009][ T3361]  v4l2_ioctl+0x18a/0x1e0
[ 3131.281028][ T3361]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 3131.281046][ T3361]  __se_sys_ioctl+0xfc/0x170
[ 3131.281068][ T3361]  do_syscall_64+0xfa/0x3b0
[ 3131.281085][ T3361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3131.281100][ T3361]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 3131.281116][ T3361]  ? clear_bhb_loop+0x60/0xb0
[ 3131.281137][ T3361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3131.281157][ T3361] RIP: 0033:0x7efdf018e929
[ 3131.281184][ T3361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3131.281210][ T3361] RSP: 002b:00007efdedfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3131.281232][ T3361] RAX: ffffffffffffffda RBX: 00007efdf03b6160 RCX: 00007efdf018e929
[ 3131.281248][ T3361] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 000000000000000c
[ 3131.281262][ T3361] RBP: 00007efdf0210b39 R08: 0000000000000000 R09: 0000000000000000
[ 3131.281273][ T3361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3131.281282][ T3361] R13: 0000000000000000 R14: 00007efdf03b6160 R15: 00007ffe15ae5bf8
[ 3131.281307][ T3361]  </TASK>
[ 3131.348737][ T3377] overlay: Unknown parameter '/'
[ 3132.185892][ T3361] Mem-Info:
[ 3132.194275][ T3361] active_anon:3196 inactive_anon:10049 isolated_anon:0
[ 3132.194275][ T3361]  active_file:26675 inactive_file:35641 isolated_file:0
[ 3132.194275][ T3361]  unevictable:773 dirty:152 writeback:0
[ 3132.194275][ T3361]  slab_reclaimable:6799 slab_unreclaimable:106099
[ 3132.194275][ T3361]  mapped:38102 shmem:10077 pagetables:1079
[ 3132.194275][ T3361]  sec_pagetables:0 bounce:0
[ 3132.194275][ T3361]  kernel_misc_reclaimable:0
[ 3132.194275][ T3361]  free:1272246 free_pcp:16232 free_cma:0
[ 3132.488200][ T3361] Node 0 active_anon:12736kB inactive_anon:51872kB active_file:106376kB inactive_file:142560kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:163656kB dirty:764kB writeback:0kB shmem:50092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11264kB pagetables:4056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 3133.379135][ T3361] Node 1 active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 3133.495971][ T3361] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3133.537880][ T3361] lowmem_reserve[]: 0 2500 2502 2502 2502
[ 3133.748949][ T3361] Node 0 DMA32 free:1173520kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24132kB inactive_anon:29360kB active_file:104612kB inactive_file:142500kB unevictable:1556kB writepending:884kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:39480kB local_pcp:12856kB free_cma:0kB
[ 3134.351407][ T3361] lowmem_reserve[]: 0 0 1 1 1
[ 3134.356214][ T3361] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 3134.399806][ T3361] lowmem_reserve[]: 0 0 0 0 0
[ 3134.408417][ T3361] Node 1 Normal free:3907788kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:324kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:11040kB free_cma:0kB
[ 3134.463782][ T3361] lowmem_reserve[]: 0 0 0 0 0
[ 3134.470793][ T3361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 3134.495452][ T3361] Node 0 DMA32: 2357*4kB (UME) 589*8kB (UME) 1025*16kB (UME) 1148*32kB (UME) 1393*64kB (UME) 586*128kB (UME) 184*256kB (UME) 61*512kB (UME) 33*1024kB (UM) 16*2048kB (UME) 197*4096kB (UM) = 1183244kB
[ 3134.521170][ T3361] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 3134.543731][ T3361] Node 1 Normal: 165*4kB (UME) 57*8kB (UME) 55*16kB (UME) 242*32kB (UME) 93*64kB (UE) 31*128kB (UME) 12*256kB (UME) 8*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (UM) = 3907788kB
[ 3134.569574][ T3361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3134.631327][ T3361] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 3134.650431][ T3361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3134.660647][ T3361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3135.385804][  T498] Bluetooth: hci5: unexpected event for opcode 0x2031
[ 3135.398135][ T3361] 72865 total pagecache pages
[ 3135.403119][ T3361] 1 pages in swap cache
[ 3135.408450][ T3361] Free swap  = 124992kB
[ 3135.413000][ T3361] Total swap = 124996kB
[ 3135.417288][ T3361] 2097051 pages RAM
[ 3135.427718][ T3361] 0 pages HighMem/MovableOnly
[ 3135.440157][ T3361] 424720 pages reserved
[ 3135.447896][ T3361] 0 pages cma reserved
[ 3135.676241][ T3413] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8353'.
[ 3136.183591][ T3418] afs: Unknown parameter './file0'
[ 3141.462289][T31801] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 3145.132074][  T498] Bluetooth: hci5: unexpected event for opcode 0x2031
[ 3146.195297][ T3475] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3147.630846][   T30] audit: type=1800 audit(1752661066.460:1329): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.8369" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 3148.021918][T31801] usb 4-1: device descriptor read/64, error -110
[ 3148.461593][T31801] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 3148.601574][T31801] usb 4-1: device descriptor read/64, error -32
[ 3148.726485][T31801] usb usb4-port1: attempt power cycle
[ 3149.095505][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3149.123893][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3155.354636][ T3523] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 3155.370074][ T3523] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 3158.741493][ T3537] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 3162.704880][ T3564] syz.6.8388: attempt to access beyond end of device
[ 3162.704880][ T3564] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3165.550553][ T3593] 9pnet_fd: Insufficient options for proto=fd
[ 3168.690958][ T3614] program syz.9.8396 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3171.627742][ T3598] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3171.910339][ T3622] netlink: 4972 bytes leftover after parsing attributes in process `syz.1.8399'.
[ 3171.920189][ T3622] openvswitch: netlink: Message has 16 unknown bytes.
[ 3172.655050][ T3626] vlan0: entered promiscuous mode
[ 3172.660311][ T3626] hsr0: entered promiscuous mode
[ 3173.464529][ T3633] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR
[ 3179.448841][ T3676] program syz.1.8411 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3180.639469][ T3688] No control pipe specified
[ 3181.406980][ T3690] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3181.422702][ T3690] can0: slcan on ttyS3.
[ 3182.302918][ T3680] can0 (unregistered): slcan off ttyS3.
[ 3184.495957][ T3704] overlay: Unknown parameter '/'
[ 3185.240541][ T3708] program syz.1.8418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3187.066143][ T3724] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8422'.
[ 3187.272065][ T3718] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd9": -EINTR
[ 3189.106748][ T3730] program syz.9.8423 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3190.688923][ T3737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8425'.
[ 3192.150810][T29341] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[ 3192.675578][T29341] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3192.690558][T29341] usb 10-1: config 0 has no interfaces?
[ 3192.704250][T29341] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 3192.732718][T29341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3193.003748][T29341] usb 10-1: config 0 descriptor??
[ 3193.127435][ T3754] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 3193.816459][ T3753] dvmrp8: entered allmulticast mode
[ 3193.825566][ T3753] dvmrp8: left allmulticast mode
[ 3194.961179][ T3762] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3195.702757][T29342] usb 10-1: USB disconnect, device number 3
[ 3196.379042][ T3773] ip6erspan0: entered allmulticast mode
[ 3197.034759][ T3783] bridge0: port 3(netdevsim0) entered blocking state
[ 3197.042201][ T3783] bridge0: port 3(netdevsim0) entered disabled state
[ 3197.050758][ T3783] netdevsim netdevsim9 netdevsim0: entered allmulticast mode
[ 3197.073959][ T3783] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[ 3197.082737][ T3783] bridge0: port 3(netdevsim0) entered blocking state
[ 3197.089646][ T3783] bridge0: port 3(netdevsim0) entered forwarding state
[ 3199.611922][ T3795] syz.1.8434: attempt to access beyond end of device
[ 3199.611922][ T3795] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3201.199683][ T3792] netlink: 'syz.5.8436': attribute type 8 has an invalid length.
[ 3203.698719][ T3828] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 3205.491253][T29341] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 3205.536312][ T3837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8445'.
[ 3205.547637][ T3837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8445'.
[ 3206.091951][T29341] usb 2-1: Using ep0 maxpacket: 8
[ 3206.101670][T29341] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3206.110968][T29341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3206.119995][T29341] usb 2-1: Product: syz
[ 3206.124501][T29341] usb 2-1: Manufacturer: syz
[ 3206.129134][T29341] usb 2-1: SerialNumber: syz
[ 3206.827965][T29341] usb 2-1: config 0 descriptor??
[ 3206.837576][T29341] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 3206.846479][T29341] usb 2-1: setting power ON
[ 3206.851340][T29341] dvb-usb: bulk message failed: -22 (2/0)
[ 3206.860139][T29341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3207.005183][ T3849] TCP: TCP_TX_DELAY enabled
[ 3207.016782][ T3849] program syz.6.8448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3207.243005][T29341] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 3207.263638][T29341] usb 2-1: media controller created
[ 3207.345128][T29341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3207.594651][T29341] usb 2-1: selecting invalid altsetting 6
[ 3207.600456][T29341] usb 2-1: digital interface selection failed (-22)
[ 3207.621324][T29341] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 3207.645079][T29341] usb 2-1: setting power OFF
[ 3207.649809][T29341] dvb-usb: bulk message failed: -22 (2/0)
[ 3207.657584][T29341] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 3207.667659][T29341] (NULL device *): no alternate interface
[ 3208.269746][ T3858] random: crng reseeded on system resumption
[ 3208.293869][T29341] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 3208.459078][T28780] usb 2-1: USB disconnect, device number 26
[ 3208.498776][ T3855] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 3208.723095][ T3863] program syz.3.8447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3210.135467][ T3870] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 3210.421889][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3210.437918][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3211.639898][ T3881] sp0: Synchronizing with TNC
[ 3211.927814][ T3877] [U] �
[ 3213.806485][ T3887] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8457'.
[ 3216.439241][ T3900] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[ 3216.953162][T28263] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 3218.646420][T28263] usb 7-1: device descriptor read/all, error -71
[ 3219.854358][ T3924] vivid-007: =================  START STATUS  =================
[ 3219.864002][ T3924] vivid-007: Enable Output Cropping: true
[ 3219.870694][ T3924] vivid-007: Enable Output Composing: true
[ 3219.876973][ T3924] vivid-007: Enable Output Scaler: true
[ 3219.883226][ T3924] vivid-007: Tx RGB Quantization Range: Automatic
[ 3219.890072][ T3924] vivid-007: Transmit Mode: HDMI
[ 3219.895479][ T3924] vivid-007: Hotplug Present: 0x00000000
[ 3219.901329][ T3924] vivid-007: RxSense Present: 0x00000000
[ 3219.909002][ T3924] vivid-007: EDID Present: 0x00000000
[ 3219.915183][ T3924] vivid-007: ==================  END STATUS  ==================
[ 3220.903932][ T3918] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13)
[ 3220.910579][ T3918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 3220.918669][ T3918] vhci_hcd vhci_hcd.0: Device attached
[ 3220.926034][ T3918] 9pnet_fd: Insufficient options for proto=fd
[ 3221.984809][ T3930] vhci_hcd: connection closed
[ 3221.993091][ T6351] vhci_hcd: stop threads
[ 3222.004570][ T6351] vhci_hcd: release socket
[ 3222.011293][T17650] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[ 3222.024982][ T6351] vhci_hcd: disconnect device
[ 3223.976803][ T3947] netlink: 'syz.5.8469': attribute type 1 has an invalid length.
[ 3224.467907][ T3953] binder: 3951:3953 ioctl c0306201 200000000540 returned -14
[ 3225.051583][ T3959] dlm: no local IP address has been set
[ 3225.057324][ T3959] dlm: cannot start dlm midcomms -107
[ 3227.130999][T17650] vhci_hcd: vhci_device speed not set
[ 3227.138265][ T3977] netlink: 136 bytes leftover after parsing attributes in process `syz.6.8476'.
[ 3227.158218][ T3969] delete_channel: no stack
[ 3227.238853][ T3977] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 3234.006513][ T4010] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3235.221487][ T4017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 3235.228831][ T4017] IPv6: NLM_F_CREATE should be set when creating new route
[ 3235.236834][ T4017] IPv6: NLM_F_CREATE should be set when creating new route
[ 3235.244271][ T4017] IPv6: NLM_F_CREATE should be set when creating new route
[ 3240.075064][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.087438][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.098786][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.109257][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.122862][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.133502][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.146841][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.159250][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.170946][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3240.186715][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8493'.
[ 3250.367437][ T4087] program syz.6.8502 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3252.641578][ T4105] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 3255.711284][ T4125] netlink: 'syz.6.8505': attribute type 4 has an invalid length.
[ 3259.834866][ T4151] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3260.763082][ T4160] ptrace attach of "./syz-executor exec"[28964] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
[ 3260.923779][ T4160] __nla_validate_parse: 32 callbacks suppressed
[ 3260.923824][ T4160] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8516'.
[ 3261.014899][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3263.923929][ T4171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3263.942119][ T4171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8519'.
[ 3266.519313][ T4184] sp0: Synchronizing with TNC
[ 3266.712715][T17650] libceph: connect (1)[c::]:6789 error -22
[ 3266.721774][T17650] libceph: mon0 (1)[c::]:6789 connect error
[ 3267.155282][T31801] libceph: connect (1)[c::]:6789 error -22
[ 3267.171937][T31801] libceph: mon0 (1)[c::]:6789 connect error
[ 3267.382354][ T4184] ceph: No mds server is up or the cluster is laggy
[ 3268.988789][  T498] Bluetooth: hci1: unexpected event for opcode 0x2031
[ 3271.783160][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3271.790045][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3272.388833][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8534'.
[ 3277.504612][ T4269] input: syz1 as /devices/virtual/input/input67
[ 3278.102269][ T4280] overlay: Unknown parameter '/'
[ 3279.225221][ T4289] ip6tnl1: entered promiscuous mode
[ 3279.230992][ T4289] ip6tnl1: entered allmulticast mode
[ 3284.454249][ T4298] netlink: 84 bytes leftover after parsing attributes in process `syz.9.8549'.
[ 3284.729698][ T4306] : entered promiscuous mode
[ 3286.017935][ T4309] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3286.072340][ T4309] can0: slcan on ttyS3.
[ 3286.941411][ T4309] can0 (unregistered): slcan off ttyS3.
[ 3288.037827][ T4321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[ 3288.044502][ T4321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3288.070411][ T4321] vhci_hcd vhci_hcd.0: Device attached
[ 3288.170601][ T4327] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14)
[ 3288.177276][ T4327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3288.346402][T28263] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[ 3288.431672][ T4330] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(17)
[ 3288.438342][ T4330] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 3288.877638][ T4338] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 3288.889501][ T4327] vhci_hcd vhci_hcd.0: Device attached
[ 3288.889595][ T4330] vhci_hcd vhci_hcd.0: Device attached
[ 3289.075268][ T4330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 3289.084186][ T4321] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22)
[ 3289.090834][ T4321] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 3289.303581][ T4321] vhci_hcd vhci_hcd.0: Device attached
[ 3289.358442][ T4332] vhci_hcd: connection closed
[ 3289.395267][ T4322] vhci_hcd: connection reset by peer
[ 3289.405530][ T4340] vhci_hcd: connection closed
[ 3289.424494][T32454] vhci_hcd: stop threads
[ 3289.448566][T32454] vhci_hcd: release socket
[ 3289.448585][ T4328] vhci_hcd: connection closed
[ 3289.481950][T32454] vhci_hcd: disconnect device
[ 3289.551679][T32454] vhci_hcd: stop threads
[ 3289.555995][T32454] vhci_hcd: release socket
[ 3289.567264][T32454] vhci_hcd: disconnect device
[ 3289.575123][T32454] vhci_hcd: stop threads
[ 3289.581404][T32454] vhci_hcd: release socket
[ 3289.601771][T32454] vhci_hcd: disconnect device
[ 3289.612753][T32454] vhci_hcd: stop threads
[ 3289.617093][T32454] vhci_hcd: release socket
[ 3289.625554][T32454] vhci_hcd: disconnect device
[ 3289.956509][ T4350] overlay: Unknown parameter '/'
[ 3291.272146][ T4362] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 3294.204866][T28263] vhci_hcd: vhci_device speed not set
[ 3294.354334][ T4386] syz_tun: entered allmulticast mode
[ 3294.711808][ T4372] syz_tun: left allmulticast mode
[ 3295.438193][ T3912] hid-generic 0000:0004:0034.001A: unknown main item tag 0x0
[ 3295.492041][ T3912] hid-generic 0000:0004:0034.001A: unknown main item tag 0x0
[ 3295.726244][ T3912] hid-generic 0000:0004:0034.001A: unknown main item tag 0x0
[ 3296.072866][ T4390] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 3296.080043][ T4390] overlayfs: failed to set xattr on upper
[ 3296.085899][ T4390] overlayfs: ...falling back to redirect_dir=nofollow.
[ 3296.093266][ T4390] overlayfs: ...falling back to index=off.
[ 3296.099152][ T4390] overlayfs: ...falling back to uuid=null.
[ 3296.563189][ T3912] hid-generic 0000:0004:0034.001A: hidraw0: <UNKNOWN> HID v0.0e Device [syz0] on syz1
[ 3296.632464][T28780] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 3300.461795][  T498] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3300.946906][ T4427] overlay: Unknown parameter '/'
[ 3302.611582][ T4438] overlay: Unknown parameter '/'
[ 3304.771900][ T4459] syz.5.8580 (4459): drop_caches: 2
[ 3304.783062][ T4459] syz.5.8580 (4459): drop_caches: 2
[ 3305.740663][ T4447] syz.1.8577: attempt to access beyond end of device
[ 3305.740663][ T4447] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3305.899192][ T4471] : entered promiscuous mode
[ 3307.999728][ T4483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3311.081720][  T498] Bluetooth: hci5: unexpected event for opcode 0x2031
[ 3313.003789][ T4511] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8592'.
[ 3313.161385][ T4515] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0
[ 3316.150814][ T4528] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd5": -EINTR
[ 3317.831601][ T4552] : entered promiscuous mode
[ 3318.647638][ T4556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3325.003040][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3325.019974][ T4595] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 3326.093981][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3326.904046][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3327.153678][ T4605] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[ 3327.160341][ T4605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 3327.169563][ T4605] vhci_hcd vhci_hcd.0: Device attached
[ 3327.219699][ T4613] vhci_hcd: connection closed
[ 3327.220092][T28028] vhci_hcd: stop threads
[ 3327.401233][T17650] usb 39-1: new high-speed USB device number 3 using vhci_hcd
[ 3328.134670][T28028] vhci_hcd: release socket
[ 3328.139563][T28028] vhci_hcd: disconnect device
[ 3328.779140][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8610'.
[ 3329.179569][  T498] Bluetooth: hci3: connection err: -111
[ 3330.109639][ T4624] overlayfs: overlapping lowerdir path
[ 3331.493598][ T4636] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[ 3331.504176][ T4636] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[ 3332.621314][T17650] vhci_hcd: vhci_device speed not set
[ 3332.948110][ T4644] netlink: 260 bytes leftover after parsing attributes in process `syz.9.8621'.
[ 3333.048833][ T4647] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8620'.
[ 3333.288100][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3333.296788][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3333.974862][ T4657] overlay: Unknown parameter '/'
[ 3336.636518][ T4665] warn_alloc: 1 callbacks suppressed
[ 3336.636539][ T4665] syz.9.8625: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 3336.679253][ T4665] CPU: 1 UID: 0 PID: 4665 Comm: syz.9.8625 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 3336.679286][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3336.679302][ T4665] Call Trace:
[ 3336.679312][ T4665]  <TASK>
[ 3336.679322][ T4665]  dump_stack_lvl+0x189/0x250
[ 3336.679355][ T4665]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[ 3336.679390][ T4665]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3336.679415][ T4665]  ? __pfx__printk+0x10/0x10
[ 3336.679444][ T4665]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 3336.679473][ T4665]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 3336.679509][ T4665]  warn_alloc+0x214/0x310
[ 3336.679530][ T4665]  ? stack_depot_save_flags+0x40/0x900
[ 3336.679572][ T4665]  ? __pfx_warn_alloc+0x10/0x10
[ 3336.679595][ T4665]  ? kasan_save_track+0x4f/0x80
[ 3336.679625][ T4665]  ? xskq_create+0x56/0x170
[ 3336.679655][ T4665]  ? xsk_init_queue+0xb0/0x110
[ 3336.679683][ T4665]  ? xsk_setsockopt+0x43f/0x710
[ 3336.679710][ T4665]  ? do_sock_setsockopt+0x25a/0x3e0
[ 3336.679735][ T4665]  ? __x64_sys_setsockopt+0x18b/0x220
[ 3336.679759][ T4665]  ? do_syscall_64+0xfa/0x3b0
[ 3336.679778][ T4665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3336.679809][ T4665]  __vmalloc_node_range_noprof+0x125/0x12f0
[ 3336.679878][ T4665]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 3336.679920][ T4665]  ? __kasan_kmalloc+0x93/0xb0
[ 3336.679954][ T4665]  vmalloc_user_noprof+0xad/0xf0
[ 3336.679988][ T4665]  ? xskq_create+0xbf/0x170
[ 3336.680021][ T4665]  xskq_create+0xbf/0x170
[ 3336.680057][ T4665]  xsk_init_queue+0xb0/0x110
[ 3336.680092][ T4665]  xsk_setsockopt+0x43f/0x710
[ 3336.680132][ T4665]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 3336.680160][ T4665]  ? __lock_acquire+0xab9/0xd20
[ 3336.680193][ T4665]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 3336.680224][ T4665]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 3336.680256][ T4665]  do_sock_setsockopt+0x25a/0x3e0
[ 3336.680286][ T4665]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 3336.680319][ T4665]  ? __fget_files+0x2a/0x420
[ 3336.680350][ T4665]  __x64_sys_setsockopt+0x18b/0x220
[ 3336.680383][ T4665]  do_syscall_64+0xfa/0x3b0
[ 3336.680402][ T4665]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3336.680434][ T4665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3336.680455][ T4665]  ? clear_bhb_loop+0x60/0xb0
[ 3336.680482][ T4665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3336.680503][ T4665] RIP: 0033:0x7f4b1f18e929
[ 3336.680524][ T4665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3336.680543][ T4665] RSP: 002b:00007f4b1fffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 3336.680565][ T4665] RAX: ffffffffffffffda RBX: 00007f4b1f3b5fa0 RCX: 00007f4b1f18e929
[ 3336.680582][ T4665] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[ 3336.680596][ T4665] RBP: 00007f4b1f210b39 R08: 0000000000000004 R09: 0000000000000000
[ 3336.680610][ T4665] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3336.680624][ T4665] R13: 0000000000000000 R14: 00007f4b1f3b5fa0 R15: 00007ffc3b593628
[ 3336.680658][ T4665]  </TASK>
[ 3336.680914][ T4665] Mem-Info:
[ 3337.376068][ T4672] IPv6: NLM_F_CREATE should be specified when creating new route
[ 3337.482671][ T4681] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8628'.
[ 3338.471344][ T4665] active_anon:3185 inactive_anon:7165 isolated_anon:0
[ 3338.471344][ T4665]  active_file:27207 inactive_file:35192 isolated_file:0
[ 3338.471344][ T4665]  unevictable:773 dirty:290 writeback:0
[ 3338.471344][ T4665]  slab_reclaimable:6772 slab_unreclaimable:107060
[ 3338.471344][ T4665]  mapped:32153 shmem:7188 pagetables:1050
[ 3338.471344][ T4665]  sec_pagetables:0 bounce:0
[ 3338.471344][ T4665]  kernel_misc_reclaimable:0
[ 3338.471344][ T4665]  free:1277634 free_pcp:13291 free_cma:0
[ 3338.516926][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3338.523825][ T4665] Node 0 active_anon:12740kB inactive_anon:28460kB active_file:108504kB inactive_file:140768kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:128508kB dirty:1160kB writeback:0kB shmem:27216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11380kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 3338.557810][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3338.576952][ T4665] Node 1 active_anon:0kB inactive_anon:200kB active_file:324kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 3338.611058][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3338.624248][ T4665] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 3338.712508][ T4665] lowmem_reserve[]: 0 2500 2502 2502 2502
[ 3338.730582][ T4665] Node 0 DMA32 free:1188068kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12736kB inactive_anon:28320kB active_file:106732kB inactive_file:140708kB unevictable:1556kB writepending:1160kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:43028kB local_pcp:21408kB free_cma:0kB
[ 3339.774587][ T4665] lowmem_reserve[]: 0 0 1 1 1
[ 3339.779419][ T4665] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 3339.826049][ T4665] lowmem_reserve[]: 0 0 0 0 0
[ 3339.830860][ T4665] Node 1 Normal free:3907032kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:136kB active_file:376kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12320kB local_pcp:4988kB free_cma:0kB
[ 3339.871373][ T4665] lowmem_reserve[]: 0 0 0 0 0
[ 3339.876194][ T4665] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 3339.894611][ T4665] Node 0 DMA32: 3946*4kB (UME) 2592*8kB (UME) 2094*16kB (UME) 1113*32kB (UME) 1469*64kB (UME) 650*128kB (UME) 230*256kB (UME) 103*512kB (UME) 60*1024kB (UM) 12*2048kB (UME) 174*4096kB (UM) = 1193192kB
[ 3339.917413][ T4665] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 3339.939351][ T4665] Node 1 Normal: 164*4kB (UE) 57*8kB (UME) 54*16kB (UE) 241*32kB (UE) 94*64kB (UME) 31*128kB (UME) 11*256kB (UME) 7*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (UM) = 3907032kB
[ 3339.979137][ T4665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3339.989793][ T4665] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 3340.229390][ T4665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 3340.244659][ T4665] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 3340.256967][ T4665] 73838 total pagecache pages
[ 3340.575182][T28355] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 3341.058480][  T498] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3341.096355][ T4665] 1 pages in swap cache
[ 3341.100733][ T4665] Free swap  = 124992kB
[ 3341.105927][ T4665] Total swap = 124996kB
[ 3341.110127][ T4665] 2097051 pages RAM
[ 3341.261300][ T4665] 0 pages HighMem/MovableOnly
[ 3341.269475][ T4665] 424720 pages reserved
[ 3341.271254][T28355] usb 2-1: Using ep0 maxpacket: 32
[ 3341.279746][ T4665] 0 pages cma reserved
[ 3341.281635][T28355] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 3341.297038][T28355] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 3341.316908][T28355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 3341.329108][T28355] usb 2-1: config 1 has no interface number 0
[ 3341.341540][T28355] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3341.359407][T28355] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 3341.373082][T28355] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 3341.382227][T28355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3341.407236][T28355] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 3341.546060][ T4706] program syz.3.8629 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3342.211766][T28355] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[ 3342.808613][ T4716] overlay: Unknown parameter '/'
[ 3343.154769][ T4708] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[ 3343.202088][ T4708] CUSE: unknown device info "3�ܟ�,��̘�"
[ 3343.208303][ T4708] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4����D�|G$��5O~�q	��
[ 3343.208303][ T4708] f����z��X�SA�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[ 3343.228579][ T4708] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M�M|�����"
[ 3343.241634][ T4708] CUSE: DEVNAME unspecified
[ 3343.295189][T28355] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[ 3345.921311][T28355] usb 2-1: USB disconnect, device number 27
[ 3345.932904][T28355] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 3347.216941][ T4739] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8639'.
[ 3348.106721][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8639'.
[ 3348.832685][ T4748] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3349.964336][  T498] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3351.500853][ T4761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8647'.
[ 3351.517357][ T4761] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 3351.526237][ T4761] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3351.535075][ T4761] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3351.543907][ T4761] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3356.130564][ T4789] overlayfs: failed to resolve './file1': -2
[ 3360.927204][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8659'.
[ 3360.936921][ T4824] vcan0: entered promiscuous mode
[ 3360.942037][ T4824] vcan0: entered allmulticast mode
[ 3361.078882][ T4826] blktrace: Concurrent blktraces are not allowed on loop2
[ 3362.854094][ T4840] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3363.425420][T28263] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 3363.691282][T28263] usb 4-1: Using ep0 maxpacket: 8
[ 3363.784993][T28263] usb 4-1: device descriptor read/all, error -71
[ 3365.297585][ T4851] block device autoloading is deprecated and will be removed.
[ 3365.308333][ T4851] syz.9.8667: attempt to access beyond end of device
[ 3365.308333][ T4851] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 3370.364807][  T498] Bluetooth: hci1: unexpected event for opcode 0x2031
[ 3371.380434][ T4899] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8679'.
[ 3376.960954][ T4931] binder: 4930:4931 ioctl 400c620e 0 returned -14
[ 3377.261499][ T4934] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3383.094164][ T4972] program syz.1.8697 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3388.078298][ T4993] veth0_to_team: left allmulticast mode
[ 3388.323775][ T5007] syz.9.8704: attempt to access beyond end of device
[ 3388.323775][ T5007] nbd9: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3388.364419][ T4993] veth0_vlan: left allmulticast mode
[ 3388.414698][ T4993] macvtap1: left allmulticast mode
[ 3388.420177][ T4993] veth0_macvtap: left allmulticast mode
[ 3388.450102][ T5001] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 3389.137703][ T5023] siw: device registration error -23
[ 3389.813780][ T5023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 3389.820362][ T5023] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 3389.828337][ T5024] vhci_hcd: connection closed
[ 3389.828345][ T5023] vhci_hcd vhci_hcd.0: Device attached
[ 3389.858201][T15476] vhci_hcd: stop threads
[ 3389.877593][T15476] vhci_hcd: release socket
[ 3389.925273][T15476] vhci_hcd: disconnect device
[ 3389.979892][ T5030] overlay: Unknown parameter '/'
[ 3391.270638][  T498] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 3394.656282][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 3394.663029][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 3397.026106][ T5074] syz.5.8718: attempt to access beyond end of device
[ 3397.026106][ T5074] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[ 3397.616634][ T5085] netlink: 'syz.3.8719': attribute type 11 has an invalid length.
[ 3397.624628][ T5085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8719'.
[ 3398.520167][ T5093] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 3400.811585][ T5110] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3400.821939][ T5110] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[ 3402.963002][ T5113] Device name cannot be null; rc = [-22]
[ 3403.581335][ T5116] tmpfs: Bad value for 'mpol'
[ 3404.793665][ T5133] random: crng reseeded on system resumption
[ 3404.930797][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3404.938637][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3405.814768][ T5135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3405.822375][ T5135] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3405.853836][ T5138] overlay: Unknown parameter '/'
[ 3409.792574][ T5165] syz.3.8738 (5165): drop_caches: 2
[ 3409.798256][ T5165] syz.3.8738 (5165): drop_caches: 2
[ 3412.615326][ T5193] random: crng reseeded on system resumption
[ 3413.062136][ T5195] lo speed is unknown, defaulting to 1000
[ 3417.173558][ T5226] netlink: 208 bytes leftover after parsing attributes in process `syz.3.8750'.
[ 3418.375968][  T498] Bluetooth: hci1: unexpected event for opcode 0x2031
[ 3419.090275][ T5236] program syz.1.8752 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3431.101256][T17650] Process accounting resumed
[ 3433.102424][ T5326] CIFS mount error: No usable UNC path provided in device string!
[ 3433.102424][ T5326] 
[ 3433.112823][ T5326] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 3435.413279][ T5332] overlay: Unknown parameter '/'
[ 3435.706114][ T5336] program syz.9.8775 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 3436.398726][ T5324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3437.909583][ T5346] 
[ 3437.911987][ T5346] ======================================================
[ 3437.919030][ T5346] WARNING: possible circular locking dependency detected
[ 3437.926085][ T5346] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted
[ 3437.933222][ T5346] ------------------------------------------------------
[ 3437.940256][ T5346] syz.5.8779/5346 is trying to acquire lock:
[ 3437.946257][ T5346] ffff888066d0c940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50
[ 3437.956073][ T5346] 
[ 3437.956073][ T5346] but task is already holding lock:
[ 3437.963472][ T5346] ffff888059783c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[ 3437.972854][ T5346] 
[ 3437.972854][ T5346] which lock already depends on the new lock.
[ 3437.972854][ T5346] 
[ 3437.983291][ T5346] 
[ 3437.983291][ T5346] the existing dependency chain (in reverse order) is:
[ 3437.992326][ T5346] 
[ 3437.992326][ T5346] -> #2 (&of->mutex){+.+.}-{4:4}:
[ 3437.999584][ T5346]        lock_acquire+0x120/0x360
[ 3438.004642][ T5346]        __mutex_lock+0x182/0xe80
[ 3438.009689][ T5346]        kernfs_fop_write_iter+0x1e0/0x4f0
[ 3438.015541][ T5346]        iter_file_splice_write+0x937/0x1000
[ 3438.021583][ T5346]        do_splice+0xc79/0x1660
[ 3438.026478][ T5346]        __se_sys_splice+0x2e1/0x460
[ 3438.031804][ T5346]        do_syscall_64+0xfa/0x3b0
[ 3438.036856][ T5346]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.043296][ T5346] 
[ 3438.043296][ T5346] -> #1 (&pipe->mutex){+.+.}-{4:4}:
[ 3438.050728][ T5346]        lock_acquire+0x120/0x360
[ 3438.055763][ T5346]        __mutex_lock+0x182/0xe80
[ 3438.060798][ T5346]        anon_pipe_write+0x16a/0x1360
[ 3438.066184][ T5346]        __kernel_write_iter+0x3ec/0x860
[ 3438.071835][ T5346]        __kernel_write+0xef/0x150
[ 3438.076961][ T5346]        autofs_notify_daemon+0x748/0xe50
[ 3438.082712][ T5346]        autofs_wait+0x11dc/0x1870
[ 3438.087844][ T5346]        autofs_mount_wait+0x16b/0x330
[ 3438.093317][ T5346]        autofs_d_automount+0x393/0x720
[ 3438.098882][ T5346]        __traverse_mounts+0x308/0x5b0
[ 3438.104357][ T5346]        step_into+0x534/0xf30
[ 3438.109128][ T5346]        link_path_walk+0x77b/0xea0
[ 3438.114340][ T5346]        path_openat+0x28c/0x3830
[ 3438.119380][ T5346]        do_filp_open+0x1fa/0x410
[ 3438.124424][ T5346]        do_sys_openat2+0x121/0x1c0
[ 3438.129635][ T5346]        __x64_sys_openat+0x138/0x170
[ 3438.135016][ T5346]        do_syscall_64+0xfa/0x3b0
[ 3438.140051][ T5346]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.146478][ T5346] 
[ 3438.146478][ T5346] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}:
[ 3438.154230][ T5346]        validate_chain+0xb9b/0x2140
[ 3438.159530][ T5346]        __lock_acquire+0xab9/0xd20
[ 3438.164747][ T5346]        lock_acquire+0x120/0x360
[ 3438.169778][ T5346]        __mutex_lock+0x182/0xe80
[ 3438.174814][ T5346]        autofs_notify_daemon+0x735/0xe50
[ 3438.180557][ T5346]        autofs_wait+0x11dc/0x1870
[ 3438.185690][ T5346]        autofs_mount_wait+0x16b/0x330
[ 3438.191165][ T5346]        autofs_d_automount+0x393/0x720
[ 3438.196725][ T5346]        __traverse_mounts+0x308/0x5b0
[ 3438.202194][ T5346]        step_into+0x534/0xf30
[ 3438.206968][ T5346]        path_lookupat+0x163/0x430
[ 3438.212087][ T5346]        filename_lookup+0x212/0x570
[ 3438.217379][ T5346]        kern_path+0x35/0x50
[ 3438.221982][ T5346]        lookup_bdev+0xc0/0x280
[ 3438.226852][ T5346]        resume_store+0x169/0x460
[ 3438.231901][ T5346]        kernfs_fop_write_iter+0x378/0x4f0
[ 3438.237728][ T5346]        vfs_write+0x54b/0xa90
[ 3438.242509][ T5346]        ksys_write+0x145/0x250
[ 3438.247374][ T5346]        do_syscall_64+0xfa/0x3b0
[ 3438.252408][ T5346]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.258836][ T5346] 
[ 3438.258836][ T5346] other info that might help us debug this:
[ 3438.258836][ T5346] 
[ 3438.269077][ T5346] Chain exists of:
[ 3438.269077][ T5346]   &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex
[ 3438.269077][ T5346] 
[ 3438.281537][ T5346]  Possible unsafe locking scenario:
[ 3438.281537][ T5346] 
[ 3438.288990][ T5346]        CPU0                    CPU1
[ 3438.294363][ T5346]        ----                    ----
[ 3438.299737][ T5346]   lock(&of->mutex);
[ 3438.303736][ T5346]                                lock(&pipe->mutex);
[ 3438.311040][ T5346]                                lock(&of->mutex);
[ 3438.317567][ T5346]   lock(&sbi->pipe_mutex);
[ 3438.322085][ T5346] 
[ 3438.322085][ T5346]  *** DEADLOCK ***
[ 3438.322085][ T5346] 
[ 3438.330245][ T5346] 4 locks held by syz.5.8779/5346:
[ 3438.335367][ T5346]  #0: ffff888021bcaef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320
[ 3438.344448][ T5346]  #1: ffff8880358a6428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90
[ 3438.353361][ T5346]  #2: ffff888059783c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0
[ 3438.363141][ T5346]  #3: ffff8881412ade18 (kn->active#78){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0
[ 3438.373189][ T5346] 
[ 3438.373189][ T5346] stack backtrace:
[ 3438.379101][ T5346] CPU: 1 UID: 0 PID: 5346 Comm: syz.5.8779 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[ 3438.379124][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 3438.379136][ T5346] Call Trace:
[ 3438.379145][ T5346]  <TASK>
[ 3438.379156][ T5346]  dump_stack_lvl+0x189/0x250
[ 3438.379179][ T5346]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3438.379198][ T5346]  ? __pfx__printk+0x10/0x10
[ 3438.379222][ T5346]  ? print_lock_name+0xde/0x100
[ 3438.379245][ T5346]  print_circular_bug+0x2ee/0x310
[ 3438.379269][ T5346]  check_noncircular+0x134/0x160
[ 3438.379298][ T5346]  validate_chain+0xb9b/0x2140
[ 3438.379328][ T5346]  __lock_acquire+0xab9/0xd20
[ 3438.379347][ T5346]  ? autofs_notify_daemon+0x735/0xe50
[ 3438.379372][ T5346]  lock_acquire+0x120/0x360
[ 3438.379387][ T5346]  ? autofs_notify_daemon+0x735/0xe50
[ 3438.379418][ T5346]  __mutex_lock+0x182/0xe80
[ 3438.379434][ T5346]  ? autofs_notify_daemon+0x735/0xe50
[ 3438.379460][ T5346]  ? autofs_notify_daemon+0x6e5/0xe50
[ 3438.379485][ T5346]  ? autofs_notify_daemon+0x735/0xe50
[ 3438.379511][ T5346]  ? __pfx___mutex_lock+0x10/0x10
[ 3438.379527][ T5346]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3438.379543][ T5346]  ? from_kgid_munged+0x1f4/0x6a0
[ 3438.379569][ T5346]  ? __pfx_from_kgid_munged+0x10/0x10
[ 3438.379593][ T5346]  ? kasan_save_track+0x4f/0x80
[ 3438.379615][ T5346]  ? __kasan_kmalloc+0x93/0xb0
[ 3438.379638][ T5346]  ? __kmalloc_cache_noprof+0x230/0x3d0
[ 3438.379662][ T5346]  ? autofs_wait+0xd32/0x1870
[ 3438.379685][ T5346]  ? autofs_notify_daemon+0x3d1/0xe50
[ 3438.379711][ T5346]  autofs_notify_daemon+0x735/0xe50
[ 3438.379735][ T5346]  ? do_syscall_64+0xfa/0x3b0
[ 3438.379753][ T5346]  ? __pfx_autofs_notify_daemon+0x10/0x10
[ 3438.379792][ T5346]  ? __raw_spin_lock_init+0x45/0x100
[ 3438.379815][ T5346]  ? autofs_wait+0xe13/0x1870
[ 3438.379840][ T5346]  autofs_wait+0x11dc/0x1870
[ 3438.379863][ T5346]  ? d_walk+0x2c0/0x780
[ 3438.379884][ T5346]  ? __pfx_autofs_wait+0x10/0x10
[ 3438.379908][ T5346]  ? preempt_schedule_common+0x83/0xd0
[ 3438.379933][ T5346]  ? preempt_schedule+0xae/0xc0
[ 3438.379958][ T5346]  ? __pfx_preempt_schedule+0x10/0x10
[ 3438.379988][ T5346]  autofs_mount_wait+0x16b/0x330
[ 3438.380014][ T5346]  autofs_d_automount+0x393/0x720
[ 3438.380040][ T5346]  __traverse_mounts+0x308/0x5b0
[ 3438.380062][ T5346]  step_into+0x534/0xf30
[ 3438.380080][ T5346]  ? lookup_slow+0x5e/0x70
[ 3438.380101][ T5346]  ? __pfx_step_into+0x10/0x10
[ 3438.380118][ T5346]  ? walk_component+0x190/0x400
[ 3438.380136][ T5346]  path_lookupat+0x163/0x430
[ 3438.380158][ T5346]  filename_lookup+0x212/0x570
[ 3438.380178][ T5346]  ? __pfx_filename_lookup+0x10/0x10
[ 3438.380207][ T5346]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 3438.380230][ T5346]  ? getname_kernel+0x146/0x2f0
[ 3438.380248][ T5346]  ? getname_kernel+0x20e/0x2f0
[ 3438.380265][ T5346]  kern_path+0x35/0x50
[ 3438.380283][ T5346]  lookup_bdev+0xc0/0x280
[ 3438.380306][ T5346]  ? rcu_is_watching+0x15/0xb0
[ 3438.380326][ T5346]  ? __pfx_lookup_bdev+0x10/0x10
[ 3438.380342][ T5346]  ? kstrndup+0xbf/0x160
[ 3438.380364][ T5346]  resume_store+0x169/0x460
[ 3438.380386][ T5346]  ? sysfs_file_kobj+0x1a/0x230
[ 3438.380411][ T5346]  ? __pfx_resume_store+0x10/0x10
[ 3438.380434][ T5346]  ? sysfs_file_kobj+0x1a/0x230
[ 3438.380458][ T5346]  ? sysfs_file_kobj+0x1a/0x230
[ 3438.380481][ T5346]  ? sysfs_file_kobj+0x1a/0x230
[ 3438.380505][ T5346]  ? sysfs_file_kobj+0x1e4/0x230
[ 3438.380529][ T5346]  ? sysfs_kf_write+0x166/0x260
[ 3438.380555][ T5346]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 3438.380580][ T5346]  kernfs_fop_write_iter+0x378/0x4f0
[ 3438.380605][ T5346]  vfs_write+0x54b/0xa90
[ 3438.380631][ T5346]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[ 3438.380653][ T5346]  ? __pfx_vfs_write+0x10/0x10
[ 3438.380680][ T5346]  ? __fget_files+0x2a/0x420
[ 3438.380699][ T5346]  ksys_write+0x145/0x250
[ 3438.380723][ T5346]  ? __pfx_ksys_write+0x10/0x10
[ 3438.380752][ T5346]  do_syscall_64+0xfa/0x3b0
[ 3438.380768][ T5346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.380785][ T5346]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 3438.380802][ T5346]  ? clear_bhb_loop+0x60/0xb0
[ 3438.380821][ T5346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3438.380839][ T5346] RIP: 0033:0x7f7de1d8e929
[ 3438.380855][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3438.380870][ T5346] RSP: 002b:00007f7ddfbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3438.380888][ T5346] RAX: ffffffffffffffda RBX: 00007f7de1fb6160 RCX: 00007f7de1d8e929
[ 3438.380902][ T5346] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009
[ 3438.380913][ T5346] RBP: 00007f7de1e10b39 R08: 0000000000000000 R09: 0000000000000000
[ 3438.380924][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3438.380935][ T5346] R13: 0000000000000000 R14: 00007f7de1fb6160 R15: 00007fff732139c8
[ 3438.380955][ T5346]  </TASK>
[ 3439.541344][ T5352] tmpfs: Bad value for 'nr_blocks'
[ 3439.549199][ T5352] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 3439.861500][ T5346] block device autoloading is deprecated and will be removed.
[ 3439.862506][ T5346] PM: Image not found (code -22)