last executing test programs:

18m3.365515743s ago: executing program 3 (id=61):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x2, @loopback}}, {{0xa, 0x100, 0x0, @remote}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d)
r3 = userfaultfd(0x801)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)

18m1.525447944s ago: executing program 3 (id=65):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x39)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r2, 0x0)
setreuid(0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2)
bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc)

17m59.265910495s ago: executing program 3 (id=68):
socket$netlink(0x10, 0x3, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0)
getpid()
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0], 0x48}}, 0x48000)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

17m50.817444275s ago: executing program 3 (id=73):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc852}, 0x24040084)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
close(0x3)

17m47.129419849s ago: executing program 3 (id=82):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014000400ff0100000000000000000000000000010c00028005c20100980000003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a140004"], 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)

17m42.676705979s ago: executing program 3 (id=84):
socket$netlink(0x10, 0x3, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0)
getpid()
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0], 0x48}}, 0x48000)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

17m26.554778581s ago: executing program 32 (id=84):
socket$netlink(0x10, 0x3, 0x0)
mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0)
getpid()
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r1, 0x2000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf2500000000", @ANYRES32=0x0], 0x48}}, 0x48000)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)

13m11.280336036s ago: executing program 2 (id=690):
timer_create(0x4, &(0x7f0000000000)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000340)="ee24570fc7beb3830cc0cd2925a9f05829455799053d0cec7e08674b6b403f3b32cb4e074782559102f7b05cc86ca80b5f258f8cc77679843430ae9b7060f1de7be3b65a20ac982a0dfc30480ffc9d9ff385af0883dbf5abd59f", 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = dup2(r2, 0xffffffffffffffff)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000003fc0))
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)

13m9.262588221s ago: executing program 2 (id=695):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x7b, 0x5, 0x0, 0x10001, 0x800, 0x4}, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x20075, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13m8.789905561s ago: executing program 2 (id=701):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

13m5.649438102s ago: executing program 2 (id=705):
timer_create(0x4, &(0x7f0000000000)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000340)="ee24570fc7beb3830cc0cd2925a9f05829455799053d0cec7e08674b6b403f3b32cb4e074782559102f7b05cc86ca80b5f258f8cc77679843430ae9b7060f1de7be3b65a20ac982a0dfc30480ffc9d9ff385af0883dbf5abd59f", 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, 0x0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r3 = dup2(r2, 0xffffffffffffffff)
getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000003fc0))
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)

13m2.300934158s ago: executing program 2 (id=711):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x4048881)
ioctl$TCFLSH(r2, 0x5608, 0x2)

13m1.149634333s ago: executing program 2 (id=716):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0)

12m45.887729866s ago: executing program 33 (id=716):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0)

6m41.709480507s ago: executing program 6 (id=1408):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})

6m39.269787692s ago: executing program 6 (id=1411):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$reject(0x13, r7, 0xd59, 0x1, r7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)

6m38.185717276s ago: executing program 6 (id=1415):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000000)
sendmsg$NFT_BATCH(r0, 0x0, 0x20040040)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x200408c4)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x14008080)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
r4 = memfd_create(&(0x7f0000000a40)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x89\x9c\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\x8d\xafH\xd4%\x1e\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%\xff\xff\xff\xff\x00\x00\x00\x00Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0fx\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x046`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x83\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfaO^\xb9\xf0\x9fFN\x1b\x12\x1e_\x05\x95\xcd/\xebgv/>E\x8e\xb6\xe0+\x1b;\xdfXp\a}Q\xc1\x8b\x9c\x9cx\x1d_-\x9bf}\t\xecf:\x82\x1c\xda \xfb\xd5:\xac\xe0\x1a\x91\xc9.M\xa5\x0f\xde\xa2A$\xa5\x13\xf2:\x0e\x92\x06\x88\x84\f\xde\xb76\xb6\x9e\r\xb1\x95\x1b\xa8\xfe\xe7\a2\xf6\xc1\xda\xb1\x17\t\x97\xdfCX2\xa3\x880\xedD\xf7:lC\xcaf\xf9\xe9y\x1f,xy:\x06~\xcf\xb3\xb6\xdc\xa7\xb2O\xc4\vVK\t:u\xf2\xc4\xdd.e\"\x9b\x01\x8b\x00\xc1\xdd\xee\xaa\xe8C\x81)\x1a,\x02\x1e\x97\xa8c\xa5\x17&Uh\xf0\v\x93r\x1a\xcb\xc9\xa6\xd35\x9akg\x9a\xa7/\xbe8\f\xb7\x89\x1bB\xb0\xea\xb1w\xfa\x89\xdc\xda\x93\xcbV\x9d\xad\xb9P\x1d\x8eA\xdb\x7f\x8fmt', 0x0)
ftruncate(r4, 0x800799c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)
lseek(r4, 0x0, 0x4)

6m35.601464365s ago: executing program 6 (id=1420):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x55, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040085}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
ftruncate(r3, 0x8800000)
r4 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000400))
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28)
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r7, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)

6m24.388881826s ago: executing program 6 (id=1436):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
socket$can_j1939(0x1d, 0x2, 0x7)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r4}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)})

6m19.719409431s ago: executing program 6 (id=1443):
socket$inet(0x2, 0x3, 0x8)
socket$inet6(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
fanotify_mark(r3, 0x1, 0x1000, r3, &(0x7f0000000240)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r6, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00'})
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x12, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

6m3.935092286s ago: executing program 34 (id=1443):
socket$inet(0x2, 0x3, 0x8)
socket$inet6(0xa, 0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x803, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x18)
r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
fanotify_mark(r3, 0x1, 0x1000, r3, &(0x7f0000000240)='./file0\x00')
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x11}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2c}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r6, 0x5}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x2094)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00'})
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x803, 0x300, 0x0, 0x101, 0x300}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x12, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

18.170809813s ago: executing program 1 (id=2153):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ptrace$getregset(0x4204, 0x0, 0x201, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
gettid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = gettid()
timer_create(0x2, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff16, 0x3, 0x8, 0x3]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

16.805328264s ago: executing program 1 (id=2156):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpgid(0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x368}, &(0x7f0000000340), 0x0, &(0x7f0000000000))
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3401000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0200000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f85611bfaa617be20ef9a16f62540c9ef96"], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)
r10 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4)
ftruncate(r10, 0x7000000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r11 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0)

14.705355901s ago: executing program 7 (id=2162):
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d8"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_init()
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
getdents64(r4, 0x0, 0x0)

12.655041817s ago: executing program 7 (id=2166):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc2401, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r4, 0x8931, &(0x7f0000000080)={'dummy0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x20040011}}], 0x1, 0x80)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
pwritev2(r0, &(0x7f0000001d40)=[{&(0x7f0000000b40)='v', 0x1}], 0x1, 0x2, 0x8, 0xa)

9.711467243s ago: executing program 1 (id=2174):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r2, 0x0, 0x0, 0x830b, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
syslog(0x9, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x1)
r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
write$tun(r0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

9.36740102s ago: executing program 5 (id=2176):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x7b, 0x5, 0x0, 0x10001, 0x800, 0x4}, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x20075, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xb, 0x0, &(0x7f0000000600)="c9f7b98600000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.233963103s ago: executing program 1 (id=2177):
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d8"], 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_init()
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$snapshot(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
getdents64(r4, 0x0, 0x0)

8.990779869s ago: executing program 0 (id=2178):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x42000, 0x18)
ftruncate(r2, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

8.905823491s ago: executing program 5 (id=2179):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r3, 0x0, 0x0, 0x80000)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d4, 0x38, 0x2, 0x70bd26, 0x25dfdbfb, {0x18}, [@generic="38baab445264884bfa606057fad0f6ddbb7d27d231d84924c701f183c44de9c3d008841458b6052db10bafa8fb78f2fad806cefa4005ba1b0cd76f9325b39d6733ef346db6ba54cb7304a8ffd3f0976fa9cdb885cba543424e8353e04bf6a92046e4519f7cd69a283df8e8801b4ac05b9f607ef6dce84f83b5defa18b2b0b8250acfeab568b16db644c5ad2bd7df6dab60fa8df4d19c9ecf45a0937367e3122ea35756cfe059424946e63b6ae153402239a986713842b7c007e1dbe604160592542963ddfb029670f858843916bf493494c8bb2ef2e3c545abe904eb8cb735b3ac", @generic="3ffb58e4ee0210fe24b64891a26acec0801f4867eec34901871a3342cb504d97257d762bd91466bc02f8a2dfbf3bf49b10e64acc8dde5d254229663368ab2a5e7dd89b21ad062e36cef2abd60361a206677b121680bbc6eb13fe2070b36ddda9fa9be8e89fae791cd556b95810548860f61bc0ca8114afabae3137eccd0aae4b78f28eee876ef513f1b97cc4de39be2d8ce1035465a67ef60935128f3233f0967226f630cff7586083df2acfc3ca5823bce056581fd9c857ad788c8b07eac43ce40e2cd80c2ce98d177eb891ceb010fd99e3e3f40527eacf4cc31937ae5c"]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008800}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef", 0xc5}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0xe4, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket(0x10, 0x3, 0x0)
semget$private(0x0, 0x2, 0x550)

8.890503721s ago: executing program 1 (id=2180):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20040010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

7.745213217s ago: executing program 0 (id=2181):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xb, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}])

7.457353284s ago: executing program 4 (id=2182):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt(r3, 0x6b, 0xffff, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9200a0004"], 0xf)

7.413349905s ago: executing program 5 (id=2183):
keyctl$session_to_parent(0x12)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)

7.411697004s ago: executing program 1 (id=2184):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpgid(0x0)
r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x6, &(0x7f0000bdd000/0x2000)=nil)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x0, 0x368}, &(0x7f0000000340), 0x0, &(0x7f0000000000))
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8})
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3401000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844)
r10 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4)
ftruncate(r10, 0x7000000)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0)
r11 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0)

6.468882895s ago: executing program 5 (id=2185):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
dup2(r2, r0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x11f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0)

6.438554206s ago: executing program 7 (id=2186):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

6.367259817s ago: executing program 4 (id=2187):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r2, 0x0, 0x0, 0x830b, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
syslog(0x9, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x1)
r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
write$tun(r0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

6.331546738s ago: executing program 0 (id=2188):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x12)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r2, &(0x7f0000002200)="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", 0x1000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x20000000, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810)

5.37697944s ago: executing program 7 (id=2189):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0xa4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x70, 0x2, [@TCA_MATCHALL_ACT={0x6c, 0x2, [@m_ife={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffff9}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)

4.313397894s ago: executing program 4 (id=2190):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x7b, 0x5, 0x0, 0x10001, 0x800, 0x4}, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x20075, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xb, 0x0, &(0x7f0000000600)="c9f7b98600000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.155352217s ago: executing program 0 (id=2191):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0)
r2 = open(0x0, 0x42000, 0x18)
ftruncate(r2, 0x2007ffb)
bpf$MAP_CREATE(0x0, 0x0, 0x1658356475ec8287)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x0, 0x0})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

4.152336927s ago: executing program 5 (id=2192):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$reject(0x13, r7, 0xd59, 0x1, r7)
keyctl$revoke(0x3, r7)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)

4.093270089s ago: executing program 7 (id=2193):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r3, 0x0, 0x0, 0x80000)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, r2, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1d4, 0x38, 0x2, 0x70bd26, 0x25dfdbfb, {0x18}, [@generic="38baab445264884bfa606057fad0f6ddbb7d27d231d84924c701f183c44de9c3d008841458b6052db10bafa8fb78f2fad806cefa4005ba1b0cd76f9325b39d6733ef346db6ba54cb7304a8ffd3f0976fa9cdb885cba543424e8353e04bf6a92046e4519f7cd69a283df8e8801b4ac05b9f607ef6dce84f83b5defa18b2b0b8250acfeab568b16db644c5ad2bd7df6dab60fa8df4d19c9ecf45a0937367e3122ea35756cfe059424946e63b6ae153402239a986713842b7c007e1dbe604160592542963ddfb029670f858843916bf493494c8bb2ef2e3c545abe904eb8cb735b3ac", @generic="3ffb58e4ee0210fe24b64891a26acec0801f4867eec34901871a3342cb504d97257d762bd91466bc02f8a2dfbf3bf49b10e64acc8dde5d254229663368ab2a5e7dd89b21ad062e36cef2abd60361a206677b121680bbc6eb13fe2070b36ddda9fa9be8e89fae791cd556b95810548860f61bc0ca8114afabae3137eccd0aae4b78f28eee876ef513f1b97cc4de39be2d8ce1035465a67ef60935128f3233f0967226f630cff7586083df2acfc3ca5823bce056581fd9c857ad788c8b07eac43ce40e2cd80c2ce98d177eb891ceb010fd99e3e3f40527eacf4cc31937ae5c"]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008800}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a800080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef", 0xc5}], 0x1}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0xe4, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})
openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[])
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
socket(0x10, 0x3, 0x0)
semget$private(0x0, 0x2, 0x550)

1.81766335s ago: executing program 4 (id=2194):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20040010)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

1.409775348s ago: executing program 0 (id=2195):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="68cabf2dfb58fc0a01008888ff", 0xd}], 0x1}, 0x0)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0)
sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.265916232s ago: executing program 7 (id=2196):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r2, 0x5)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
sendto$packet(r3, &(0x7f00000001c0), 0x0, 0x40890, 0x0, 0x0)
recvmsg(r4, 0x0, 0x2)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, 0x0)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000380))
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000640)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
stat(&(0x7f0000000140)='./file0\x00', 0x0)

1.069241786s ago: executing program 0 (id=2197):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r0, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt(r3, 0x6b, 0xffff, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9200a0004"], 0xf)

957.182519ms ago: executing program 5 (id=2198):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0xb, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}])

917.0017ms ago: executing program 4 (id=2199):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000010000107d3000000000000000a000c000600010017"], 0x1c}}, 0x0)

0s ago: executing program 4 (id=2200):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
recvmmsg(r2, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, 0x0, 0x0)
syslog(0x9, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000000)='proc\x00', 0x1)
r4 = openat$dsp1(0xffffff9c, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
write$tun(r0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

kernel console output (not intermixed with test programs):

2 (3/0)
[  643.204436][ T6699] dw2102: command 0x0e transfer failed.
[  643.210330][ T6699] dvb-usb: bulk message failed: -22 (3/0)
[  643.216227][ T6699] dw2102: command 0x0e transfer failed.
[  643.541937][ T6699] dvb-usb: bulk message failed: -22 (3/0)
[  645.023318][ T6699] dw2102: command 0x0e transfer failed.
[  645.227221][ T6699] dvb-usb: bulk message failed: -22 (3/0)
[  645.424683][ T6699] dw2102: command 0x0e transfer failed.
[  645.550225][ T6699] dvb-usb: bulk message failed: -22 (1/0)
[  645.725505][ T6699] dw2102: command 0x51 transfer failed.
[  646.559785][ T6699] DVB: Unable to find symbol ds3000_attach()
[  646.567821][ T6699] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  648.538133][ T9253] device syzkaller0 entered promiscuous mode
[  648.922056][ T6699] rc_core: IR keymap rc-su3000 not found
[  648.928136][ T6699] Registered IR keymap rc-empty
[  648.948955][ T6699] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  648.985333][ T6699] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input19
[  649.010167][ T6699] dvb-usb: schedule remote query interval to 150 msecs.
[  649.031618][ T6699] dw2102: su3000_power_ctrl: 0, initialized 1
[  649.048017][ T6699] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  649.123135][ T6699] usb 2-1: USB disconnect, device number 9
[  649.371935][ T6699] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  652.273115][ T9326] random: crng reseeded on system resumption
[  654.489399][ T9336] 9pnet_virtio: no channels available for device syz
[  655.567095][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'.
[  655.584258][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1155'.
[  656.165589][ T9340] JFS: discard option not supported on device
[  656.233278][ T9340] Mount JFS Failure: -22
[  656.866120][ T9340] jfs_mount failed w/return code = -22
[  659.711056][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'.
[  660.825847][ T9378] binder: 9373:9378 ioctl c0306201 0 returned -14
[  662.225408][ T9382] bridge0: the hash_elasticity option has been deprecated and is always 16
[  662.250185][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'.
[  662.266083][ T9387] device bridge_slave_1 left promiscuous mode
[  662.277939][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.560223][ T9387] device bridge_slave_0 left promiscuous mode
[  662.566830][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.517993][ T9409] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  663.524680][ T9409] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  663.532660][ T9409] vhci_hcd vhci_hcd.0: Device attached
[  663.995020][ T9410] vhci_hcd: connection closed
[  663.996047][ T4492] vhci_hcd: stop threads
[  664.561982][ T4492] vhci_hcd: release socket
[  664.566590][ T4492] vhci_hcd: disconnect device
[  665.128099][ T9408] device syzkaller0 entered promiscuous mode
[  668.773404][ T9441] JFS: discard option not supported on device
[  668.792129][ T9441] Mount JFS Failure: -22
[  668.796442][ T9441] jfs_mount failed w/return code = -22
[  673.081237][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'.
[  673.110749][ T9454] bridge5: the hash_elasticity option has been deprecated and is always 16
[  673.448274][ T9479] device syzkaller0 entered promiscuous mode
;[  674.200125][ T9487] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  674.206827][ T9487] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  674.215479][ T9487] vhci_hcd vhci_hcd.0: Device attached
[  674.269588][ T9489] vhci_hcd: connection closed
[  674.270738][ T4492] vhci_hcd: stop threads
[  674.343255][ T4492] vhci_hcd: release socket
[  674.424025][ T4492] vhci_hcd: disconnect device
[  677.839826][ T9510] NILFS (loop0): device size too small
[  677.924284][ T9512] JFS: discard option not supported on device
[  677.944858][ T9512] Mount JFS Failure: -22
[  677.959953][ T9512] jfs_mount failed w/return code = -22
[  678.317703][ T9516] device syzkaller0 entered promiscuous mode
[  678.423059][ T9522] device syzkaller0 entered promiscuous mode
[  680.799916][ T9538] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10)
[  680.806602][ T9538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  680.814944][ T9538] vhci_hcd vhci_hcd.0: Device attached
[  681.240784][ T4322] usb 46-1: SetAddress Request (2) to port 0
[  681.280674][ T4322] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[  681.598984][ T9539] vhci_hcd: connection reset by peer
[  681.607802][   T56] vhci_hcd: stop threads
[  681.614236][   T56] vhci_hcd: release socket
[  681.668709][   T56] vhci_hcd: disconnect device
[  683.624855][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'.
[  683.650979][ T9530] bridge13: the hash_elasticity option has been deprecated and is always 16
[  683.680381][ T9546] device syzkaller0 entered promiscuous mode
[  683.929999][ T9561] NILFS (loop1): device size too small
[  684.048796][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  685.725312][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  685.731775][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.432522][ T4322] usb 46-1: device descriptor read/8, error -110
[  686.874619][ T4322] usb usb46-port1: attempt power cycle
[  687.565157][ T4322] usb usb46-port1: unable to enumerate USB device
[  688.108569][ T9584] device syzkaller0 entered promiscuous mode
[  688.359693][ T9588] device syzkaller0 entered promiscuous mode
[  689.779876][ T9607] NILFS (loop1): device size too small
[  690.135866][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'.
[  690.589495][ T9622] input: syz0 as /devices/virtual/input/input21
[  692.639242][ T9591] bridge0: the hash_elasticity option has been deprecated and is always 16
[  692.698651][ T9643] device syzkaller0 entered promiscuous mode
[  695.431250][ T9655] NILFS (loop5): device size too small
[  695.747904][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1231'.
[  696.158950][ T9678] netlink: 'syz.5.1235': attribute type 16 has an invalid length.
[  696.167001][ T9678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1235'.
[  698.648160][ T9687] device syzkaller0 entered promiscuous mode
[  698.758953][ T9696] device syzkaller0 entered promiscuous mode
[  698.807648][ T9690] device syzkaller0 entered promiscuous mode
[  699.549863][ T9707] NILFS (loop4): device size too small
[  704.332990][ T9720] NILFS (loop4): device size too small
[  707.988282][ T9735] netlink: 'syz.4.1251': attribute type 16 has an invalid length.
[  707.996582][ T9735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1251'.
[  708.479684][ T9755] binder: 9752:9755 ioctl c0306201 0 returned -14
[  708.782831][ T9750] NILFS (loop6): device size too small
[  712.092631][ T9765] device syzkaller0 entered promiscuous mode
[  718.845509][ T9814] NILFS (loop6): device size too small
[  719.037659][ T9777] netlink: 'syz.4.1264': attribute type 16 has an invalid length.
[  719.045911][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1264'.
[  719.067337][ T9786] device syzkaller0 entered promiscuous mode
[  720.566873][ T9825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  720.573559][ T9825] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  720.581530][ T9825] vhci_hcd vhci_hcd.0: Device attached
[  720.923111][ T9826] vhci_hcd: connection closed
[  720.933655][ T6182] vhci_hcd: stop threads
[  721.339982][ T6182] vhci_hcd: release socket
[  721.443375][   T22] usb 42-1: SetAddress Request (2) to port 0
[  721.491553][ T6182] vhci_hcd: disconnect device
[  721.512099][   T22] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  721.581799][   T22] usb 42-1: enqueue for inactive port 0
[  722.601464][   T22] usb usb42-port1: attempt power cycle
[  724.923059][   T22] usb usb42-port1: unable to enumerate USB device
[  725.414434][ T9860] NILFS (loop4): device size too small
[  725.647353][ T9859] device syzkaller0 entered promiscuous mode
[  725.804514][ T9868] netlink: 'syz.0.1284': attribute type 16 has an invalid length.
[  725.812724][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1284'.
[  727.693136][ T9876] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  727.699827][ T9876] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  727.707760][ T9876] vhci_hcd vhci_hcd.0: Device attached
[  727.718515][ T9877] vhci_hcd: connection closed
[  727.720619][ T6182] vhci_hcd: stop threads
[  728.143652][ T6182] vhci_hcd: release socket
[  728.158363][ T6182] vhci_hcd: disconnect device
[  728.618425][ T9891] random: crng reseeded on system resumption
[  734.793232][ T9915] NILFS (loop5): device size too small
[  739.091681][ T9925] netlink: 'syz.5.1297': attribute type 16 has an invalid length.
[  739.099563][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1297'.
[  739.375462][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'.
[  741.789431][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1302'.
[  742.482443][ T9965] NILFS (loop4): device size too small
[  745.289475][   T26] audit: type=1326 audit(1784332425.608:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9970 comm="syz.6.1308" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68ab9de99 code=0x0
[  745.606973][ T9980] netlink: 'syz.0.1310': attribute type 16 has an invalid length.
[  745.615319][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1310'.
[  745.624826][ T4360] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  746.354675][ T9981] NILFS (loop4): device size too small
[  746.575731][ T4360] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  746.604447][ T4360] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  746.613886][ T4360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.624957][ T4360] usb 7-1: Product: syz
[  746.629948][ T4360] usb 7-1: Manufacturer: syz
[  746.641606][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'.
[  746.650616][ T4360] usb 7-1: SerialNumber: syz
[  746.663529][ T9986] device syzkaller0 entered promiscuous mode
[  746.671935][ T4360] usb 7-1: config 0 descriptor??
[  746.677658][ T9973] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  746.702244][ T4360] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  746.987875][ T9999] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  746.989081][ T9973] capability: warning: `syz.6.1308' uses 32-bit capabilities (legacy support in use)
[  747.156609][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.163393][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  751.245612][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'.
[  752.151741][ T6562] usb 7-1: USB disconnect, device number 2
[  752.961949][T10037] NILFS (loop5): device size too small
[  753.194174][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1320'.
[  756.918550][T10060] netlink: 'syz.5.1323': attribute type 16 has an invalid length.
[  756.926561][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1323'.
[  757.811309][T10062] NILFS (loop6): device size too small
[  757.909101][T10067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  759.051999][T10073] device syzkaller0 entered promiscuous mode
[  760.680261][T10094] NILFS (loop5): device size too small
[  762.495917][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1335'.
[  772.100212][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'.
[  772.115487][T10128] netlink: 'syz.6.1339': attribute type 16 has an invalid length.
[  772.128591][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1339'.
[  772.405806][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'.
[  773.442592][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'.
[  774.514129][T10150] fuse: Bad value for 'fd'
[  777.850908][T10167] device syzkaller0 entered promiscuous mode
[  778.341897][ T4289] Bluetooth: Unexpected start frame (len 14)
[  778.348057][ T4289] Bluetooth: Frame is too long (len 14, expected len 4)
[  784.074772][T10181] netlink: 'syz.5.1354': attribute type 16 has an invalid length.
[  784.606467][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1354'.
[  784.642716][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1355'.
[  784.731921][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'.
[  786.830185][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1359'.
[  787.604692][T10220] fuse: Bad value for 'fd'
[  787.688461][ T4289] Bluetooth: Frame is too long (len 14, expected len 4)
[  787.800670][T10228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1364'.
[  790.019567][   T26] audit: type=1326 audit(1784332470.338:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.6.1363" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68ab9de99 code=0x0
[  790.746007][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1367'.
[  790.758336][T10233] 9pnet_virtio: no channels available for device syz
[  790.814419][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'.
[  790.835112][T10243] SET target dimension over the limit!
[  791.081458][ T6562] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  791.122181][ T4360] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  791.312051][ T4360] usb 5-1: device descriptor read/64, error -71
[  791.993911][ T6562] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  792.017295][ T6562] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  792.026608][ T6562] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.054288][ T6562] usb 7-1: Product: syz
[  792.058580][ T6562] usb 7-1: Manufacturer: syz
[  792.063662][ T6562] usb 7-1: SerialNumber: syz
[  792.097489][ T6562] usb 7-1: config 0 descriptor??
[  792.111756][ T4360] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  792.131294][T10244] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  792.148716][ T6562] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  792.452649][ T6562] usb 7-1: USB disconnect, device number 3
[  793.359335][T10266] netlink: 'syz.6.1373': attribute type 16 has an invalid length.
[  793.367462][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1373'.
[  794.237733][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'.
[  795.060813][T10258] process 'syz.0.1372' launched '/dev/fd/11' with NULL argv: empty string added
[  795.699586][ T4289] Bluetooth: Frame is too long (len 14, expected len 4)
[  795.861480][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1378'.
[  798.464384][T10295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'.
[  798.487479][T10295] device ip6gre1 entered promiscuous mode
[  798.502134][   T26] audit: type=1326 audit(1784332478.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10300 comm="syz.1.1383" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb45399de99 code=0x0
[  798.881464][ T6562] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  799.461941][T10295] netlink: 'syz.4.1380': attribute type 6 has an invalid length.
[  799.470893][T10295] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1380'.
[  799.487200][T10308] netlink: 'syz.5.1381': attribute type 4 has an invalid length.
[  799.623479][ T6562] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  799.690745][ T6562] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  799.753318][ T6562] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.761559][ T6562] usb 2-1: Product: syz
[  799.765882][ T6562] usb 2-1: Manufacturer: syz
[  799.770644][ T6562] usb 2-1: SerialNumber: syz
[  799.778750][ T6562] usb 2-1: config 0 descriptor??
[  799.786755][T10306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  799.828020][ T6562] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  800.831236][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'.
[  801.804124][ T4319] usb 2-1: USB disconnect, device number 10
[  802.062595][ T4289] Bluetooth: Unexpected start frame (len 14)
[  802.207986][T10334] NILFS (loop6): device size too small
[  803.376941][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1392'.
[  804.479862][T10366] device syzkaller0 entered promiscuous mode
[  806.368637][   T26] audit: type=1326 audit(1784332486.688:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10383 comm="syz.5.1402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b29d9de99 code=0x0
[  806.730761][T10377] device syzkaller0 entered promiscuous mode
[  806.841434][   T22] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  807.048559][   T22] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  808.008830][   T22] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  808.021910][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.030053][   T22] usb 6-1: Product: syz
[  808.034649][   T22] usb 6-1: Manufacturer: syz
[  808.039375][   T22] usb 6-1: SerialNumber: syz
[  808.064672][   T22] usb 6-1: config 0 descriptor??
[  808.071176][T10385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  808.090540][   T22] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  808.518391][ T4289] Bluetooth: Frame is too long (len 14, expected len 4)
[  808.605436][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  808.626318][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  810.887732][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  810.908177][T10399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  810.953523][T10399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  810.982992][T10399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  811.035286][T10399] bond0: (slave bond_slave_0): Releasing backup interface
[  811.092463][T10399] bond0: (slave bond_slave_1): Releasing backup interface
[  811.288735][T10399] team0: Port device team_slave_0 removed
[  811.444664][T10399] team0: Port device team_slave_1 removed
[  811.483398][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  811.515490][T10399] batman_adv: batadv0: Removing interface: batadv_slave_0
[  811.592203][T10399] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  811.623097][T10399] batman_adv: batadv0: Removing interface: batadv_slave_1
[  811.849595][T10408] netlink: 'syz.4.1406': attribute type 4 has an invalid length.
[  812.042157][ T6562] usb 6-1: USB disconnect, device number 8
[  815.156775][T10448] bridge0: the hash_elasticity option has been deprecated and is always 16
[  816.145075][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  816.188045][T10464] device syzkaller0 entered promiscuous mode
[  817.378648][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'.
[  817.809263][T10479] netlink: 'syz.6.1420': attribute type 4 has an invalid length.
[  824.056032][T10509] NILFS (loop5): device size too small
[  825.653130][T10517] 9pnet_virtio: no channels available for device syz
[  826.407503][T10516] bridge6: the hash_elasticity option has been deprecated and is always 16
[  827.293793][T10530] fuse: Unknown parameter '0x0000000000000003'
[  827.312805][T10525] device syzkaller0 entered promiscuous mode
[  828.597153][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1434'.
[  830.071067][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'.
[  833.291119][T10568] 9pnet_virtio: no channels available for device syz
[  834.060211][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'.
[  834.074902][T10579] fuse: Unknown parameter '0x0000000000000003'
[  836.275610][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'.
[  836.723111][T10586] netlink: 'syz.0.1446': attribute type 4 has an invalid length.
[  845.967092][T10631] fuse: Unknown parameter '0x0000000000000003'
[  846.326609][T10638] 9pnet_virtio: no channels available for device syz
[  847.246667][T10639] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  847.253384][T10639] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  847.261853][T10639] vhci_hcd vhci_hcd.0: Device attached
[  847.330877][T10642] vhci_hcd: connection closed
[  847.334934][ T4378] vhci_hcd: stop threads
[  847.584511][    T7] usb 42-1: SetAddress Request (6) to port 0
[  847.883867][    T7] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  847.895489][ T4378] vhci_hcd: release socket
[  848.758268][ T4378] vhci_hcd: disconnect device
[  850.857260][   T26] audit: type=1326 audit(1784332531.178:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.1.1463" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb45399de99 code=0x0
[  851.007900][T10665] netlink: 'syz.4.1465': attribute type 4 has an invalid length.
[  851.261660][ T4321] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  852.367068][ T4321] usb 2-1: device descriptor read/all, error -71
[  852.444532][ T4456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.520988][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  852.530556][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  852.565961][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  852.574783][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  852.595083][T10683] fuse: Unknown parameter '0x0000000000000003'
[  852.693758][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  852.701107][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  852.747064][ T4456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.137744][T10688] 9pnet_virtio: no channels available for device syz
[  853.791952][    T7] usb 42-1: device descriptor read/8, error -110
[  853.921075][ T4456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  853.988280][ T4456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  854.143300][T10693] Cannot find add_set index 0 as target
[  854.334362][    T7] usb usb42-port1: attempt power cycle
[  854.751520][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[  855.714838][    T7] usb usb42-port1: unable to enumerate USB device
[  856.831425][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[  857.150773][T10674] chnl_net:caif_netlink_parms(): no params data found
[  857.161828][T10705] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  857.168494][T10705] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  857.196951][T10707] vhci_hcd: connection closed
[  857.197085][T10705] vhci_hcd vhci_hcd.0: Device attached
[  857.209639][   T56] vhci_hcd: stop threads
[  857.573198][    T7] usb 34-1: SetAddress Request (7) to port 0
[  857.733386][   T56] vhci_hcd: release socket
[  858.030113][   T56] vhci_hcd: disconnect device
[  858.581503][    T7] usb 34-1: new SuperSpeed USB device number 7 using vhci_hcd
[  858.611780][    T7] usb 34-1: enqueue for inactive port 0
[  858.911453][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[  858.929732][   T26] audit: type=1326 audit(1784332539.248:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.4.1477" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa2699de99 code=0x0
[  859.215623][    T7] usb usb34-port1: attempt power cycle
[  859.251439][ T4321] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  859.272071][ T3534] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  859.652486][ T3534] usb 1-1: Using ep0 maxpacket: 16
[  859.666543][ T3534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.669176][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  859.833684][ T3534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  860.992515][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[  861.241808][ T3534] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  861.391045][ T3534] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  861.482513][ T3534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.590169][    T7] usb usb34-port1: unable to enumerate USB device
[  861.609907][ T3534] usb 1-1: config 0 descriptor??
[  862.198504][ T3534] usbhid 1-1:0.0: can't add hid device: -71
[  862.241160][ T3534] usbhid: probe of 1-1:0.0 failed with error -71
[  862.467579][ T3534] usb 1-1: USB disconnect, device number 4
[  862.496889][ T4321] usb 5-1: string descriptor 0 read error: -71
[  862.509864][ T4321] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  862.521116][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.531443][ T4321] usb 5-1: config 0 descriptor??
[  862.539550][ T4321] usb 5-1: can't set config #0, error -71
[  862.547406][ T4321] usb 5-1: USB disconnect, device number 6
[  863.102142][T10745] 9pnet_virtio: no channels available for device syz
[  863.805721][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'.
[  864.916895][T10674] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.939966][T10674] bridge0: port 1(bridge_slave_0) entered disabled state
[  865.681980][T10674] device bridge_slave_0 entered promiscuous mode
[  865.700060][T10674] bridge0: port 2(bridge_slave_1) entered blocking state
[  865.716588][T10674] bridge0: port 2(bridge_slave_1) entered disabled state
[  865.750305][T10674] device bridge_slave_1 entered promiscuous mode
[  865.759533][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'.
[  865.818903][T10765] NILFS (loop5): device size too small
[  866.687512][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.044018][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  868.631494][T10778] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  868.638180][T10778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  868.646277][T10778] vhci_hcd vhci_hcd.0: Device attached
[  868.784949][T10779] vhci_hcd: connection closed
[  868.797796][ T4622] vhci_hcd: stop threads
[  869.091628][ T6562] usb 42-1: SetAddress Request (10) to port 0
[  869.107912][ T6562] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  869.159247][ T4622] vhci_hcd: release socket
[  869.309779][ T4622] vhci_hcd: disconnect device
[  869.611423][ T6562] usb 42-1: enqueue for inactive port 0
[  870.033764][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  870.040234][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  870.771824][ T6562] usb usb42-port1: attempt power cycle
[  871.721033][T10783] netlink: 'syz.5.1486': attribute type 4 has an invalid length.
[  871.872568][T10674] team0: Port device team_slave_0 added
[  871.904253][T10674] team0: Port device team_slave_1 added
[  872.698042][ T6562] usb usb42-port1: unable to enumerate USB device
[  876.370927][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0
[  876.405668][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  876.554238][T10817] 9pnet_virtio: no channels available for device syz
[  877.211855][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  877.234497][ T4456] device hsr_slave_0 left promiscuous mode
[  877.259542][ T4456] device hsr_slave_1 left promiscuous mode
[  877.283936][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  877.356615][T10820] NILFS (loop4): device size too small
[  877.382601][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_0
[  878.308369][ T4456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  878.328575][ T4456] batman_adv: batadv0: Removing interface: batadv_slave_1
[  879.207733][ T4456] device veth1_macvtap left promiscuous mode
[  879.214032][ T4456] device veth0_macvtap left promiscuous mode
[  879.222415][ T4456] device veth1_vlan left promiscuous mode
[  879.232085][ T4456] device veth0_vlan left promiscuous mode
[  881.574589][T10838] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  881.581275][T10838] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  881.589472][T10838] vhci_hcd vhci_hcd.0: Device attached
[  881.656040][T10839] vhci_hcd: connection closed
[  881.662984][ T4326] vhci_hcd: stop threads
[  881.723278][ T4326] vhci_hcd: release socket
[  881.869468][ T4326] vhci_hcd: disconnect device
[  883.466194][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1503'.
[  886.712750][ T4456] team0 (unregistering): Port device team_slave_1 removed
[  887.913240][ T4456] team0 (unregistering): Port device team_slave_0 removed
[  888.154283][T10875] NILFS (loop5): device size too small
[  888.170360][ T4456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  889.072583][ T4456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.133226][ T4456] bond0 (unregistering): Released all slaves
[  890.166768][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'.
[  890.180387][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1
[  890.194328][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  890.241267][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  890.261459][T10877] netlink: 'syz.1.1509': attribute type 4 has an invalid length.
[  891.398569][T10674] device hsr_slave_0 entered promiscuous mode
[  891.463519][T10674] device hsr_slave_1 entered promiscuous mode
[  892.303357][T10674] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  892.314522][T10674] Cannot create hsr debugfs directory
[  892.514280][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'.
[  892.613061][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  897.039067][T10674] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  897.119144][T10935] NILFS (loop1): device size too small
[  897.955265][T10674] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  898.100643][T10939] 9pnet_virtio: no channels available for device syz
[  898.433204][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'.
[  898.507644][T10674] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  898.635030][T10674] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  899.464852][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1524'.
[  899.713892][T10963] netlink: 'syz.1.1523': attribute type 4 has an invalid length.
[  900.728065][T10674] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.746812][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  900.842680][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  900.870505][T10971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'.
[  901.603117][T10674] 8021q: adding VLAN 0 to HW filter on device team0
[  901.722928][T10975] bridge14: the hash_elasticity option has been deprecated and is always 16
[  901.774536][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  901.824732][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  901.905639][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.912864][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.976179][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  902.526105][T10982] tmpfs: Unknown parameter 'usrquota'
[  902.965547][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  902.995804][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  903.071904][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.079122][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.205511][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  903.268390][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  903.332491][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  903.410370][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  905.189056][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  905.259097][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  905.372870][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  905.471476][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  905.567285][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  906.350537][T10674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  906.486680][T10994] 9pnet_virtio: no channels available for device syz
[  906.496425][T10674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  906.577361][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  906.610922][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  906.652239][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  906.674682][T10994] Cannot find add_set index 0 as target
[  906.873372][T11012] NILFS (loop5): device size too small
[  906.981688][ T4358] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  907.225126][ T4358] usb 1-1: device descriptor read/64, error -71
[  909.539561][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1535'.
[  909.631914][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'.
[  910.399129][T11051] bridge7: the hash_elasticity option has been deprecated and is always 16
[  911.950664][T11051] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  912.153771][T11072] netlink: 'syz.0.1542': attribute type 4 has an invalid length.
[  913.276636][T11084] NILFS (loop5): device size too small
[  914.487452][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  914.498466][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  914.507250][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  914.515840][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  914.523671][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  914.530853][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  914.895931][T11095] 9pnet_virtio: no channels available for device syz
[  914.964260][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1546'.
[  915.088325][T11099] Cannot find add_set index 0 as target
[  916.591474][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[  916.715287][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'.
[  916.724863][ T4321] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  916.901523][ T4321] usb 5-1: device descriptor read/64, error -71
[  917.191847][ T4321] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  917.371890][ T4321] usb 5-1: device descriptor read/64, error -71
[  917.501969][ T4321] usb usb5-port1: attempt power cycle
[  917.952013][ T4321] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  918.132096][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[  918.640026][ T4321] usb 5-1: device descriptor read/8, error -71
[  918.671953][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[  918.808605][T11082] chnl_net:caif_netlink_parms(): no params data found
[  920.320165][T11164] NILFS (loop1): device size too small
[  920.751566][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[  921.587908][T11166] device syzkaller0 entered promiscuous mode
[  922.813922][T11082] bridge0: port 1(bridge_slave_0) entered blocking state
[  922.830111][T11082] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.832117][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[  922.860517][T11082] device bridge_slave_0 entered promiscuous mode
[  923.071834][T11082] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.087330][T11082] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.115336][T11082] device bridge_slave_1 entered promiscuous mode
[  923.404613][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.480293][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.794900][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1562'.
[  923.862785][ T4622] device hsr_slave_0 left promiscuous mode
[  924.033139][ T4622] device hsr_slave_1 left promiscuous mode
[  924.181637][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  924.290914][ T4622] batman_adv: batadv0: Removing interface: batadv_slave_1
[  924.338668][ T4622] device bridge_slave_1 left promiscuous mode
[  924.355377][ T4622] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.400675][ T4622] device bridge_slave_0 left promiscuous mode
[  924.435862][ T4622] bridge0: port 1(bridge_slave_0) entered disabled state
[  927.507832][ T4622] team0 (unregistering): Port device team_slave_1 removed
[  927.627385][ T4622] team0 (unregistering): Port device team_slave_0 removed
[  927.676737][ T4622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  927.753013][ T4622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  928.013961][ T4622] bond0 (unregistering): Released all slaves
[  928.029782][T11246] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1573'.
[  928.192325][T11082] team0: Port device team_slave_0 added
[  928.200411][T11082] team0: Port device team_slave_1 added
[  928.457208][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  928.471462][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  928.965521][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  929.829970][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  929.838128][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  929.868062][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  930.071743][T11082] device hsr_slave_0 entered promiscuous mode
[  930.127624][T11082] device hsr_slave_1 entered promiscuous mode
[  930.138764][T11082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  930.163257][T11082] Cannot create hsr debugfs directory
[  930.287355][ T4286] Bluetooth: Unexpected start frame (len 10)
[  930.949269][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'.
[  930.982212][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'.
[  931.474805][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  931.481206][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  937.227617][T11308] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1587'.
[  937.465510][ T4286] Bluetooth: Unexpected start frame (len 10)
[  939.122454][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'.
[  939.214693][T11082] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  939.441593][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'.
[  939.583009][T11082] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  939.654756][T11082] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  940.184442][T11082] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  940.254728][T11337] NILFS (loop0): device size too small
[  941.343333][T11082] 8021q: adding VLAN 0 to HW filter on device bond0
[  941.438645][T11353] bridge7: the hash_elasticity option has been deprecated and is always 16
[  941.549433][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  941.572680][ T6562] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  941.627289][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  941.774168][T11082] 8021q: adding VLAN 0 to HW filter on device team0
[  941.794423][T11357] bridge15: the hash_elasticity option has been deprecated and is always 16
[  942.136967][ T6562] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  942.239672][ T6562] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  942.253173][ T6562] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  942.264562][ T6562] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.274931][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  942.286417][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  942.308929][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.316156][ T4436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  942.337364][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  942.609547][ T6562] usb 2-1: usb_control_msg returned -32
[  942.615405][ T6562] usbtmc 2-1:16.0: can't read capabilities
[  942.691861][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  942.722828][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  942.798415][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  942.805657][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  943.190641][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  945.667747][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  945.726059][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  945.808418][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  945.855935][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  945.885823][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  945.917115][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  945.980425][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  945.991549][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  946.000775][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  946.017063][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  946.050669][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  946.062712][ T4321] usb 2-1: USB disconnect, device number 13
[  946.228399][T11388] device syzkaller0 entered promiscuous mode
[  947.688576][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'.
[  947.898615][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'.
[  948.130769][T11407] NILFS (loop0): device size too small
[  949.696407][T11418] bridge6: the hash_elasticity option has been deprecated and is always 16
[  949.766730][T11422] bridge8: the hash_elasticity option has been deprecated and is always 16
[  949.941561][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  950.911502][    T7] usb 5-1: Using ep0 maxpacket: 16
[  951.060378][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'.
[  951.073088][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'.
[  951.083393][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'.
[  951.093116][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'.
[  951.102975][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'.
[  952.094031][    T7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  952.111386][    T7] usb 5-1: no configurations
[  952.131974][    T7] usb 5-1: can't read configurations, error -22
[  952.143839][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  952.182776][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  952.240936][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  952.392318][ T4286] Bluetooth: Unexpected start frame (len 10)
[  953.119543][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'.
[  953.707800][T11445] 9pnet_virtio: no channels available for device syz
[  953.719179][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1615'.
[  953.783397][T11455] Cannot find add_set index 0 as target
[  954.081401][   T22] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  954.912024][   T22] usb 6-1: device descriptor read/64, error -71
[  955.038091][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'.
[  955.191382][   T22] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  955.962782][T11473] NILFS (loop4): device size too small
[  956.001737][   T22] usb 6-1: device descriptor read/64, error -71
[  956.389461][   T22] usb usb6-port1: attempt power cycle
[  957.785983][T11479] device syzkaller0 entered promiscuous mode
[  958.990011][T11483] bridge8: the hash_elasticity option has been deprecated and is always 16
[  959.089120][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'.
[  959.137804][T11495] JFS: discard option not supported on device
[  959.144282][T11493] bridge7: the hash_elasticity option has been deprecated and is always 16
[  959.162232][T11495] Mount JFS Failure: -22
[  959.166663][T11495] jfs_mount failed w/return code = -22
[  959.185333][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  959.213000][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  961.069475][T11495] tty tty21: ldisc open failed (-12), clearing slot 20
[  961.077514][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  961.129346][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  961.209445][T11082] device veth0_vlan entered promiscuous mode
[  961.264690][ T4286] Bluetooth: Unexpected start frame (len 10)
[  961.304276][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  961.404585][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  962.017306][T11082] device veth1_vlan entered promiscuous mode
[  963.071873][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'.
[  964.235307][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  964.274608][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  964.333806][T11082] device veth0_macvtap entered promiscuous mode
[  964.378893][T11082] device veth1_macvtap entered promiscuous mode
[  964.529063][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  964.570802][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  964.617360][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  964.648056][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  964.693715][T11537] NILFS (loop0): device size too small
[  965.827910][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  965.839055][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  965.853020][T11082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  965.863365][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  965.961833][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  966.123264][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  967.041112][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  967.056946][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  967.067097][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  967.080255][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  967.090325][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  967.101705][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  967.113249][T11082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  967.157996][T11082] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  967.170245][T11082] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  967.197983][T11082] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  968.020116][T11082] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  968.031639][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  968.092105][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  968.159875][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  969.308514][ T6182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  969.330970][ T6182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  969.405667][T11566] bridge9: the hash_elasticity option has been deprecated and is always 16
[  969.424876][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  969.458943][ T6182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  969.473663][ T6182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  970.297527][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  970.424184][ T4286] Bluetooth: Unexpected start frame (len 10)
[  971.178588][T11575] overlayfs: overlapping lowerdir path
[  971.192873][T11575] random: crng reseeded on system resumption
[  971.244939][T11580] overlayfs: overlapping lowerdir path
[  971.816593][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'.
[  972.965706][T11595] NILFS (loop0): device size too small
[  975.122069][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  975.133790][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  975.144164][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  975.154301][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  975.163744][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  975.818927][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  975.829277][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  975.838207][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  975.848895][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  975.860653][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  975.870879][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  976.374824][T11622] NILFS (loop0): device size too small
[  977.300753][T11626] device syzkaller0 entered promiscuous mode
[  977.952560][ T4286] Bluetooth: hci5: command 0x0409 tx timeout
[  978.436611][ T4286] Bluetooth: Unexpected start frame (len 10)
[  979.212445][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.031871][ T4286] Bluetooth: hci5: command 0x041b tx timeout
[  980.916541][T11662] overlayfs: overlapping lowerdir path
[  980.928552][T11662] random: crng reseeded on system resumption
[  980.980584][T11664] overlayfs: overlapping lowerdir path
[  981.327989][T11644] bridge11: the hash_elasticity option has been deprecated and is always 16
[  981.427228][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'.
[  981.589047][T11669] NILFS (loop1): device size too small
[  982.111372][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[  982.498246][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  984.191815][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[  984.383303][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  985.582767][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  986.443731][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'.
[  986.476117][T11617] chnl_net:caif_netlink_parms(): no params data found
[  986.584151][T11617] bridge0: port 1(bridge_slave_0) entered blocking state
[  986.591715][T11617] bridge0: port 1(bridge_slave_0) entered disabled state
[  986.602226][T11617] device bridge_slave_0 entered promiscuous mode
[  986.612207][T11617] bridge0: port 2(bridge_slave_1) entered blocking state
[  986.619509][T11617] bridge0: port 2(bridge_slave_1) entered disabled state
[  986.628554][T11617] device bridge_slave_1 entered promiscuous mode
[  986.690874][T11617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  986.787310][T11617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  986.895033][T11617] team0: Port device team_slave_0 added
[  987.038761][T11617] team0: Port device team_slave_1 added
[  987.188834][ T4289] Bluetooth: Unexpected start frame (len 10)
[  988.467763][T11617] batman_adv: batadv0: Adding interface: batadv_slave_0
[  988.480103][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  988.527915][T11617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  988.608426][T11737] NILFS (loop4): device size too small
[  988.626308][T11722] bridge10: the hash_elasticity option has been deprecated and is always 16
[  989.621866][T11736] overlayfs: overlapping lowerdir path
[  990.413703][T11745] random: crng reseeded on system resumption
[  990.465696][T11730] overlayfs: overlapping lowerdir path
[  990.484221][T11617] batman_adv: batadv0: Adding interface: batadv_slave_1
[  990.496716][T11617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  990.646261][T11617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.029915][T11617] device hsr_slave_0 entered promiscuous mode
[  992.131640][T11617] device hsr_slave_1 entered promiscuous mode
[  992.148429][T11617] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  992.206076][T11617] Cannot create hsr debugfs directory
[  992.374071][T11759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[  992.868391][T11773] bridge11: the hash_elasticity option has been deprecated and is always 16
[  992.916913][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  992.927075][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  993.692053][T11781] ALSA: mixer_oss: invalid OSS volume ''
[  995.526659][T11793] bridge12: the hash_elasticity option has been deprecated and is always 16
[  995.952508][T11807] NILFS (loop4): device size too small
[  997.008265][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'.
[  997.021809][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'.
[  997.032168][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'.
[  997.042145][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'.
[  997.051522][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1686'.
[  997.065977][T11812] 9pnet_virtio: no channels available for device syz
[  997.410377][   T11] device hsr_slave_0 left promiscuous mode
[  997.567905][   T11] device hsr_slave_1 left promiscuous mode
[  997.699187][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  997.815665][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  997.877415][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  997.894338][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  998.081840][    T7] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  998.622969][   T11] device bridge_slave_1 left promiscuous mode
[  998.635410][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  998.708532][   T11] device bridge_slave_0 left promiscuous mode
[  998.757410][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  998.817935][    T7] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  999.326959][    T7] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1000.298573][    T7] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1000.388693][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.566181][T11817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1001.410889][   T11] device veth1_macvtap left promiscuous mode
[ 1001.440729][   T11] device veth0_macvtap left promiscuous mode
[ 1001.466285][   T11] device veth1_vlan left promiscuous mode
[ 1001.492948][   T11] device veth0_vlan left promiscuous mode
[ 1002.825466][T11833] ALSA: mixer_oss: invalid OSS volume 'IGAI'
[ 1004.014145][    T7] usb 5-1: USB disconnect, device number 13
[ 1004.426876][T11834] udevd[11834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1006.408680][   T11] team0 (unregistering): Port device team_slave_1 removed
[ 1006.477683][   T11] team0 (unregistering): Port device team_slave_0 removed
[ 1006.526951][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1006.573838][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1006.895119][   T11] bond0 (unregistering): Released all slaves
[ 1006.998714][T11838] bridge16: the hash_elasticity option has been deprecated and is always 16
[ 1007.043321][T11854] bridge12: the hash_elasticity option has been deprecated and is always 16
[ 1007.457115][T11866] NILFS (loop4): device size too small
[ 1008.405695][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'.
[ 1008.417159][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'.
[ 1008.427150][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'.
[ 1008.437102][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'.
[ 1008.446714][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'.
[ 1008.460745][T11869] 9pnet_virtio: no channels available for device syz
[ 1008.653433][T11617] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1008.735579][T11617] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1008.747729][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1699'.
[ 1009.590332][T11617] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1009.682898][T11874] ksmbd: Unknown IPC event: 0, ignore.
[ 1009.698177][T11617] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1009.903042][T11874] device syzkaller0 entered promiscuous mode
[ 1011.030743][T11617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1011.155413][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1011.174462][T11893] ALSA: mixer_oss: invalid OSS volume 'IGAI'
[ 1011.189488][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1011.223809][T11617] 8021q: adding VLAN 0 to HW filter on device team0
[ 1011.303890][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1011.324187][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1011.358121][ T4553] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1011.365408][ T4553] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1011.384891][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1011.400673][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1011.413006][ T4553] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1011.420240][ T4553] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1012.218289][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1012.590738][T11899] bridge13: the hash_elasticity option has been deprecated and is always 16
[ 1012.783326][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1708'.
[ 1012.794899][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1708'.
[ 1012.804827][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1708'.
[ 1012.815231][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1708'.
[ 1012.829119][T11916] 9pnet_virtio: no channels available for device syz
[ 1013.565108][T11902] bridge17: the hash_elasticity option has been deprecated and is always 16
[ 1013.574848][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1013.637204][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1013.754449][T11919] NILFS (loop4): device size too small
[ 1015.903695][T11915] __nla_validate_parse: 1 callbacks suppressed
[ 1015.903712][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1707'.
[ 1016.584127][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1016.748856][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1016.909260][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1016.947582][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1016.957216][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1016.966885][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1016.976164][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1016.998938][T11617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1017.078863][T11617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1017.101795][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1017.140982][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1017.479680][T11938] ALSA: mixer_oss: invalid OSS volume 'IGAI'
[ 1019.104510][T11945] tipc: Can't bind to reserved service type 0
[ 1019.413626][T11954] bridge14: the hash_elasticity option has been deprecated and is always 16
[ 1020.287506][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'.
[ 1020.522870][T11969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1721'.
[ 1020.841206][T11977] NILFS (loop0): device size too small
[ 1021.790957][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1021.851726][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1021.957398][T11617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1025.408905][T12012] binder: BINDER_SET_CONTEXT_MGR already set
[ 1025.596593][T12012] binder: 12010:12012 ioctl 4018620d 2000000003c0 returned -16
[ 1025.745494][T12020] bridge10: the hash_elasticity option has been deprecated and is always 16
[ 1025.875960][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'.
[ 1026.869323][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1026.898109][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1027.843342][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1027.911878][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1028.013855][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1028.063354][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1028.094143][T11617] device veth0_vlan entered promiscuous mode
[ 1028.143433][T11617] device veth1_vlan entered promiscuous mode
[ 1030.718736][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1030.776473][ T9435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1030.968754][T12051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1739'.
[ 1035.019445][T12073] bridge15: the hash_elasticity option has been deprecated and is always 16
[ 1036.265282][T12089] NILFS (loop0): device size too small
[ 1037.328882][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1037.347915][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1037.365869][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1037.379454][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1037.394462][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1037.405485][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1039.471604][ T4289] Bluetooth: hci4: command 0x0409 tx timeout
[ 1041.551910][ T4289] Bluetooth: hci4: command 0x041b tx timeout
[ 1041.741972][T12120] bridge16: the hash_elasticity option has been deprecated and is always 16
[ 1042.115024][T12121] netlink: 'syz.1.1753': attribute type 16 has an invalid length.
[ 1042.123377][T12121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1753'.
[ 1042.147626][T12091] chnl_net:caif_netlink_parms(): no params data found
[ 1042.207800][T12130] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1755'.
[ 1042.492081][T12134] overlayfs: failed to clone lowerpath
[ 1042.544101][T12137] overlayfs: failed to clone lowerpath
[ 1042.681941][T12139] NILFS (loop4): device size too small
[ 1043.257922][T12091] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.270631][T12091] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.343297][T12091] device bridge_slave_0 entered promiscuous mode
[ 1043.400663][T12091] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.420014][T12091] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.463937][T12091] device bridge_slave_1 entered promiscuous mode
[ 1043.631444][ T4289] Bluetooth: hci4: command 0x040f tx timeout
[ 1045.454586][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1045.558358][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1045.711414][ T4289] Bluetooth: hci4: command 0x0419 tx timeout
[ 1047.021834][T12173] overlayfs: failed to clone lowerpath
[ 1050.611814][T12176] netlink: 'syz.4.1766': attribute type 16 has an invalid length.
[ 1050.620148][T12176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1766'.
[ 1050.687867][T12091] team0: Port device team_slave_0 added
[ 1050.786936][T12186] NILFS (loop4): device size too small
[ 1051.732256][T12180] overlayfs: failed to clone lowerpath
[ 1051.740440][T12180] overlayfs: failed to clone lowerpath
[ 1051.928380][T12091] team0: Port device team_slave_1 added
[ 1052.007451][ T9435] device hsr_slave_0 left promiscuous mode
[ 1052.020467][ T9435] device hsr_slave_1 left promiscuous mode
[ 1052.060226][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1052.084179][ T9435] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1052.109786][ T9435] device bridge_slave_1 left promiscuous mode
[ 1052.127897][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.003157][ T9435] device bridge_slave_0 left promiscuous mode
[ 1053.031916][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.438516][ T9435] device veth1_vlan left promiscuous mode
[ 1053.547452][ T9435] device veth0_vlan left promiscuous mode
[ 1054.089986][T12220] random: crng reseeded on system resumption
[ 1054.361643][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.368088][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.155177][ T9435] team0 (unregistering): Port device team_slave_1 removed
[ 1055.201111][ T9435] team0 (unregistering): Port device team_slave_0 removed
[ 1055.270599][ T9435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1055.318959][ T9435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1055.601591][ T9435] bond0 (unregistering): Released all slaves
[ 1055.709327][T12196] bridge17: the hash_elasticity option has been deprecated and is always 16
[ 1055.784479][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1055.793640][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1055.871128][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1055.898431][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1055.934297][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1056.021844][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.288110][   T26] audit: type=1804 audit(1784332736.608:8): pid=12248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1780" name="bus" dev="ramfs" ino=61408 res=1 errno=0
[ 1056.320913][   T26] audit: type=1804 audit(1784332736.638:9): pid=12248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1780" name="bus" dev="ramfs" ino=61408 res=1 errno=0
[ 1056.427342][T12254] NILFS (loop4): device size too small
[ 1057.257690][T12091] device hsr_slave_0 entered promiscuous mode
[ 1057.346302][T12091] device hsr_slave_1 entered promiscuous mode
[ 1057.392238][T12091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1057.399862][T12091] Cannot create hsr debugfs directory
[ 1058.576942][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'.
[ 1058.653806][T12268] 9pnet_virtio: no channels available for device syz
[ 1058.816281][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'.
[ 1058.868828][T12274] Cannot find add_set index 0 as target
[ 1058.995155][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1788'.
[ 1059.114697][T12288] bridge18: the hash_elasticity option has been deprecated and is always 16
[ 1059.570296][T12292] random: crng reseeded on system resumption
[ 1064.473766][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[ 1064.484898][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[ 1064.494103][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[ 1064.503558][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[ 1064.512622][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1796'.
[ 1064.523402][T12329] 9pnet_virtio: no channels available for device syz
[ 1064.543702][T12091] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1064.573049][T12091] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1064.719887][T12335] NILFS (loop4): device size too small
[ 1064.898191][T12091] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1064.974273][T12091] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1065.236945][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1799'.
[ 1065.562856][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'.
[ 1065.668189][T12362] bridge13: the hash_elasticity option has been deprecated and is always 16
[ 1065.689777][T12091] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1065.819964][T12365] device syzkaller0 entered promiscuous mode
[ 1065.905721][T12091] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.106394][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1066.168237][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1066.219213][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1066.282760][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1066.297295][ T4492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.304471][ T4492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.329352][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1066.373140][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1066.422635][ T4492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.429824][ T4492] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1066.508123][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1067.614675][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1067.633261][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1067.645664][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1067.662744][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1067.671173][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1067.763501][T12380] random: crng reseeded on system resumption
[ 1068.039390][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1068.193254][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1068.240908][T12091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1068.442223][T12091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1068.457433][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1069.577436][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1070.463001][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1070.503471][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1070.592218][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1072.360705][T12416] NILFS (loop5): device size too small
[ 1072.767604][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'.
[ 1072.850915][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1072.870446][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1072.898677][T12091] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1073.285512][T12442] random: crng reseeded on system resumption
[ 1076.225098][T12477] bridge14: the hash_elasticity option has been deprecated and is always 16
[ 1076.798136][T12489] NILFS (loop4): device size too small
[ 1077.368970][T12501] capability: warning: `syz.5.1827' uses deprecated v2 capabilities in a way that may be insecure
[ 1077.384142][T12499] block device autoloading is deprecated and will be removed.
[ 1077.830906][T12091] device veth0_vlan entered promiscuous mode
[ 1077.842146][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1077.850996][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1077.922285][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1077.949275][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1078.048342][T12091] device veth1_vlan entered promiscuous mode
[ 1079.283674][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1079.291956][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1079.507561][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1079.539956][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1079.580985][T12091] device veth0_macvtap entered promiscuous mode
[ 1079.613932][T12091] device veth1_macvtap entered promiscuous mode
[ 1079.734513][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.812159][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.841270][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.878573][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.901301][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1079.932435][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1079.963037][T12091] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1079.972082][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1080.008006][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1080.045289][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1080.067886][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1080.096118][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1080.135797][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1080.182101][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1080.253594][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1080.299006][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1080.320044][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1080.342475][T12539] NILFS (loop0): device size too small
[ 1080.350256][T12091] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1080.366992][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1080.384384][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1080.454709][T12091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.472334][T12091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.514900][T12546] NILFS (loop5): device size too small
[ 1080.699099][T12091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.809345][T12091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.875911][T12544] bridge11: the hash_elasticity option has been deprecated and is always 16
[ 1080.995418][T12550] device syzkaller0 entered promiscuous mode
[ 1081.181035][T12555] 9pnet_virtio: no channels available for device syz
[ 1081.912614][ T4456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1081.993053][ T4456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.043584][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'.
[ 1082.529726][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1082.537825][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1844'.
[ 1082.541773][ T3598] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[ 1082.572322][ T4492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1082.583289][ T4492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1082.592366][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1082.763937][ T3598] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.785756][ T3598] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1082.816087][ T3598] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1082.918288][ T3598] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1082.984324][ T3598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1084.317612][T12559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1084.375054][ T3598] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1084.381008][ T3598] hub: probe of 6-1:1.0 failed with error -5
[ 1084.457845][ T3598] cdc_wdm 6-1:1.0: skipping garbage
[ 1084.495030][ T3598] cdc_wdm 6-1:1.0: skipping garbage
[ 1084.589541][ T3598] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1084.621400][ T3598] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1084.692841][ T3598] usb 6-1: USB disconnect, device number 12
[ 1084.788349][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'.
[ 1084.872249][T12595] ksmbd: Unknown IPC event: 0, ignore.
[ 1085.010357][T12600] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1085.045114][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[ 1085.063458][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[ 1085.073276][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[ 1085.083109][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[ 1085.092238][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[ 1085.119791][T12605] 9pnet_virtio: no channels available for device syz
[ 1085.181729][ T3598] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[ 1085.843221][T12606] netlink: 'syz.0.1852': attribute type 16 has an invalid length.
[ 1085.882961][ T3598] usb 6-1: device descriptor read/all, error -71
[ 1085.963688][T12606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'.
[ 1086.085150][T12622] 9pnet_virtio: no channels available for device syz
[ 1086.105502][T12619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1854'.
[ 1086.187613][T12618] Cannot find add_set index 0 as target
[ 1086.561991][ T3598] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1086.764345][T12649] UBIFS error (pid: 12649): cannot open "/dev/sequencer", error -22
[ 1087.442020][ T3598] usb 6-1: device descriptor read/64, error -71
[ 1087.603769][ T3598] usb usb6-port1: attempt power cycle
[ 1088.011475][ T3598] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1088.062754][ T3598] usb 6-1: device descriptor read/8, error -71
[ 1088.337733][ T3598] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1088.389125][T12677] __nla_validate_parse: 2 callbacks suppressed
[ 1088.389143][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'.
[ 1088.406454][ T3598] usb 6-1: device descriptor read/8, error -71
[ 1088.413238][T12677] ksmbd: Unknown IPC event: 0, ignore.
[ 1088.512940][T12677] device syzkaller0 entered promiscuous mode
[ 1088.532068][ T3598] usb usb6-port1: unable to enumerate USB device
[ 1089.234402][   T26] audit: type=1326 audit(1784332769.558:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12696 comm="syz.5.1871" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b29d9de99 code=0x0
[ 1089.257827][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1089.520857][T12704] fuse: Bad value for 'fd'
[ 1089.606457][T12706] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1089.613056][T12706] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1089.621268][T12706] vhci_hcd vhci_hcd.0: Device attached
[ 1089.631477][T12707] vhci_hcd: connection closed
[ 1089.632045][ T4378] vhci_hcd: stop threads
[ 1089.646495][ T4378] vhci_hcd: release socket
[ 1089.654804][ T4378] vhci_hcd: disconnect device
[ 1089.731819][ T4321] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 1089.767136][T12683] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.774582][T12683] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.923930][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1089.944516][ T4321] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1089.959772][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.970278][ T4321] usb 6-1: Product: syz
[ 1089.975749][ T4321] usb 6-1: Manufacturer: syz
[ 1089.980607][ T4321] usb 6-1: SerialNumber: syz
[ 1089.993215][ T4321] usb 6-1: config 0 descriptor??
[ 1090.000328][T12700] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1090.017627][ T4321] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[ 1090.619435][T12683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1090.717491][T12683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1091.258154][T12683] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.267185][T12683] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.277901][T12683] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.287124][T12683] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.416299][T12692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1869'.
[ 1091.432506][T12695] netlink: 'syz.0.1870': attribute type 16 has an invalid length.
[ 1091.448012][T12695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1870'.
[ 1091.524272][T12683] syz.7.1867 (12683) used greatest stack depth: 20528 bytes left
[ 1091.702266][T12742] bridge18: the hash_elasticity option has been deprecated and is always 16
[ 1092.801872][T10429] usb 6-1: USB disconnect, device number 17
[ 1093.177078][T12769] 9pnet_virtio: no channels available for device syz
[ 1093.307369][T12772] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1093.313944][T12772] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1093.322614][T12772] vhci_hcd vhci_hcd.0: Device attached
[ 1093.340645][T12774] vhci_hcd: connection closed
[ 1093.342703][ T4435] vhci_hcd: stop threads
[ 1093.353626][T12763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[ 1093.373732][ T4435] vhci_hcd: release socket
[ 1093.409673][T12769] SET target dimension over the limit!
[ 1093.418749][ T4435] vhci_hcd: disconnect device
[ 1093.772349][ T4321] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1093.954975][ T4321] usb 5-1: device descriptor read/64, error -71
[ 1094.243222][T12792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1888'.
[ 1094.303100][ T4321] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1095.163334][T12802] bridge12: the hash_elasticity option has been deprecated and is always 16
[ 1095.271308][ T4321] usb 5-1: device descriptor read/64, error -71
[ 1095.402445][ T4321] usb usb5-port1: attempt power cycle
[ 1095.811448][ T4321] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1096.401998][ T4321] usb 5-1: device descriptor read/8, error -71
[ 1096.625707][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1097.678315][T12834] device syzkaller0 entered promiscuous mode
[ 1097.697915][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'.
[ 1097.750623][T12837] ksmbd: Unknown IPC event: 0, ignore.
[ 1099.301473][T12845] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[ 1099.308168][T12845] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1099.316268][T12845] vhci_hcd vhci_hcd.0: Device attached
[ 1099.655611][T12849] vhci_hcd: connection closed
[ 1099.656314][ T4553] vhci_hcd: stop threads
[ 1099.750188][ T4553] vhci_hcd: release socket
[ 1099.870270][ T4553] vhci_hcd: disconnect device
[ 1100.449402][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[ 1100.462146][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[ 1100.472933][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[ 1100.482813][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[ 1100.492579][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1903'.
[ 1100.509363][T12861] 9pnet_virtio: no channels available for device syz
[ 1101.257700][T12863] bridge19: the hash_elasticity option has been deprecated and is always 16
[ 1102.573095][T12888] bridge15: the hash_elasticity option has been deprecated and is always 16
[ 1102.682388][T12895] JFS: discard option not supported on device
[ 1102.688929][T12895] Mount JFS Failure: -22
[ 1102.694685][T12895] jfs_mount failed w/return code = -22
[ 1102.820635][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1104.806727][T12906] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[ 1104.813408][T12906] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1104.821420][T12906] vhci_hcd vhci_hcd.0: Device attached
[ 1104.829899][T12907] vhci_hcd: connection closed
[ 1104.842278][ T4435] vhci_hcd: stop threads
[ 1105.317572][ T4435] vhci_hcd: release socket
[ 1105.322348][ T4435] vhci_hcd: disconnect device
[ 1105.351172][T12902] device syzkaller0 entered promiscuous mode
[ 1105.551166][T12916] 9pnet_virtio: no channels available for device syz
[ 1105.724702][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'.
[ 1107.283107][T12922] device syzkaller0 entered promiscuous mode
[ 1109.203481][T12932] bridge19: the hash_elasticity option has been deprecated and is always 16
[ 1109.815570][T12945] bridge20: the hash_elasticity option has been deprecated and is always 16
[ 1110.624671][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'.
[ 1110.666777][T12955] ksmbd: Unknown IPC event: 0, ignore.
[ 1111.905577][T12969] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[ 1111.912268][T12969] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1111.922325][T12969] vhci_hcd vhci_hcd.0: Device attached
[ 1112.242057][ T4321] usb 34-1: SetAddress Request (12) to port 0
[ 1112.257404][ T4321] usb 34-1: new SuperSpeed USB device number 12 using vhci_hcd
[ 1113.446749][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'.
[ 1113.459315][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'.
[ 1113.470228][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'.
[ 1113.480664][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'.
[ 1113.490645][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1930'.
[ 1113.507975][T12976] 9pnet_virtio: no channels available for device syz
[ 1113.672607][T12970] vhci_hcd: connection closed
[ 1113.673578][ T9359] vhci_hcd: stop threads
[ 1113.840569][ T9359] vhci_hcd: release socket
[ 1114.037146][ T9359] vhci_hcd: disconnect device
[ 1114.286102][T12984] device syzkaller0 entered promiscuous mode
[ 1114.343684][T12983] device syzkaller0 entered promiscuous mode
[ 1114.466213][T12987] bridge20: the hash_elasticity option has been deprecated and is always 16
[ 1115.795098][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.801592][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.816170][T13017] bridge13: the hash_elasticity option has been deprecated and is always 16
[ 1118.096297][T13021] JFS: discard option not supported on device
[ 1118.141870][T13021] Mount JFS Failure: -22
[ 1118.149860][T13021] jfs_mount failed w/return code = -22
[ 1118.360488][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'.
[ 1118.751717][ T4321] usb 34-1: device descriptor read/8, error -110
[ 1119.973757][T13034] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[ 1119.980354][T13034] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1119.990914][T13034] vhci_hcd vhci_hcd.0: Device attached
[ 1120.001098][T13035] vhci_hcd: connection closed
[ 1120.002439][ T4435] vhci_hcd: stop threads
[ 1120.113326][ T4435] vhci_hcd: release socket
[ 1120.171990][ T4321] usb 34-1: SetAddress Request (13) to port 0
[ 1120.180947][ T4321] usb 34-1: new SuperSpeed USB device number 13 using vhci_hcd
[ 1120.202258][ T4435] vhci_hcd: disconnect device
[ 1120.383309][ T4321] usb 34-1: enqueue for inactive port 0
[ 1120.592153][ T4321] usb usb34-port1: attempt power cycle
[ 1120.814896][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1121.759793][ T4321] usb usb34-port1: unable to enumerate USB device
[ 1124.436544][T13066] NILFS (loop7): device size too small
[ 1124.668236][T13071] bridge21: the hash_elasticity option has been deprecated and is always 16
[ 1124.802872][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'.
[ 1124.835151][T13077] bridge2: the hash_elasticity option has been deprecated and is always 16
[ 1124.907664][T13079] device syzkaller0 entered promiscuous mode
[ 1126.994636][T13090] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1127.001234][T13090] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1127.009456][T13090] vhci_hcd vhci_hcd.0: Device attached
[ 1127.386209][T13091] vhci_hcd: connection closed
[ 1127.386647][   T32] vhci_hcd: stop threads
[ 1127.471428][   T32] vhci_hcd: release socket
[ 1127.512192][T12719] usb 42-1: SetAddress Request (14) to port 0
[ 1127.518660][T12719] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd
[ 1127.561652][   T32] vhci_hcd: disconnect device
[ 1127.693652][T12719] usb 42-1: enqueue for inactive port 0
[ 1128.030571][T13097] netlink: 'syz.1.1958': attribute type 16 has an invalid length.
[ 1128.039160][T13097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1958'.
[ 1128.195979][T12719] usb usb42-port1: attempt power cycle
[ 1128.221387][ T6562] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1128.234931][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[ 1128.250690][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[ 1128.260826][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[ 1128.270539][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[ 1128.280319][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[ 1128.295352][T13108] 9pnet_virtio: no channels available for device syz
[ 1129.777134][T13119] NILFS (loop0): device size too small
[ 1129.904928][ T6562] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1129.924003][ T6562] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1130.027062][ T6562] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1130.100021][ T6562] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1130.157416][ T4553] bond0: (slave bond_slave_0): interface is now down
[ 1130.166894][ T6562] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1130.180888][ T4553] bond0: (slave bond_slave_1): interface is now down
[ 1130.207472][ T6562] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1130.230980][ T4553] bond0: now running without any active interface!
[ 1130.232732][ T6562] usb 6-1: Product: syz
[ 1130.262832][ T6562] usb 6-1: Manufacturer: syz
[ 1130.435002][T12719] usb usb42-port1: unable to enumerate USB device
[ 1131.208535][ T6562] usb 6-1: can't set config #1, error -71
[ 1131.224799][ T6562] usb 6-1: USB disconnect, device number 18
[ 1131.342106][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'.
[ 1131.374120][T12091] cgroup: fork rejected by pids controller in /syz7
[ 1131.420859][T13148] device syzkaller0 entered promiscuous mode
[ 1131.699792][T13150] bridge21: the hash_elasticity option has been deprecated and is always 16
[ 1131.733599][T13153] bridge14: the hash_elasticity option has been deprecated and is always 16
[ 1133.441679][T13158] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[ 1133.448284][T13158] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1133.456397][T13158] vhci_hcd vhci_hcd.0: Device attached
[ 1134.003333][T12717] usb 34-1: SetAddress Request (16) to port 0
[ 1134.011407][T13159] vhci_hcd: connection closed
[ 1134.013848][ T4378] vhci_hcd: stop threads
[ 1134.038154][T12717] usb 34-1: new SuperSpeed USB device number 16 using vhci_hcd
[ 1134.181764][ T4378] vhci_hcd: release socket
[ 1134.317903][ T4378] vhci_hcd: disconnect device
[ 1134.717455][T13170] NILFS (loop0): device size too small
[ 1134.793877][T13172] netlink: 'syz.1.1973': attribute type 16 has an invalid length.
[ 1134.802359][T13172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1973'.
[ 1135.179038][T13181] device syzkaller0 entered promiscuous mode
[ 1135.207039][T13179] device syzkaller0 entered promiscuous mode
[ 1135.635401][T13191] device syzkaller0 entered promiscuous mode
[ 1135.938942][T13199] random: crng reseeded on system resumption
[ 1137.224342][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'.
[ 1137.254728][T13206] ksmbd: Unknown IPC event: 0, ignore.
[ 1137.544839][T13215] NILFS (loop4): device size too small
[ 1137.793053][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1137.804894][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1137.822471][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1137.849958][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1137.859847][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1137.867765][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1138.097773][T13204] syz.1.1983[13204] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1138.097890][T13204] syz.1.1983[13204] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1138.168384][T13226] netlink: 'syz.4.1990': attribute type 16 has an invalid length.
[ 1138.206879][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1990'.
[ 1138.435213][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1139.311776][T12717] usb 34-1: device descriptor read/8, error -110
[ 1139.732264][T12717] usb usb34-port1: attempt power cycle
[ 1139.947588][T13236] device syzkaller0 entered promiscuous mode
[ 1139.954807][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[ 1140.051398][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'.
[ 1140.518154][T13161] device hsr_slave_0 left promiscuous mode
[ 1140.561482][T13161] device hsr_slave_1 left promiscuous mode
[ 1140.592693][T13161] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1140.620590][T13161] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1140.671405][T13161] device bridge_slave_1 left promiscuous mode
[ 1140.735466][T13161] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1140.774483][T13161] device bridge_slave_0 left promiscuous mode
[ 1140.787810][T13161] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.968538][T12717] usb usb34-port1: unable to enumerate USB device
[ 1142.032049][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[ 1143.012459][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1143.406684][T13296] overlayfs: failed to clone lowerpath
[ 1143.415775][T13296] overlayfs: failed to clone lowerpath
[ 1144.111388][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[ 1144.253421][T13161] team0 (unregistering): Port device team_slave_1 removed
[ 1144.367053][T13161] team0 (unregistering): Port device team_slave_0 removed
[ 1144.463661][T13161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1144.514392][T13161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1144.822957][T13161] bond0 (unregistering): Released all slaves
[ 1144.959575][T13273] bridge22: the hash_elasticity option has been deprecated and is always 16
[ 1145.485554][T13202] chnl_net:caif_netlink_parms(): no params data found
[ 1145.848059][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1146.191297][ T4286] Bluetooth: hci4: command 0x0419 tx timeout
[ 1146.684310][T13350] 9pnet_virtio: no channels available for device syz
[ 1146.706363][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[ 1146.784809][T13202] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1146.810837][T13202] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1146.836129][T13202] device bridge_slave_0 entered promiscuous mode
[ 1146.861845][T13202] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1146.869360][T13202] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1146.895921][T13202] device bridge_slave_1 entered promiscuous mode
[ 1146.912541][T13353] device syzkaller0 entered promiscuous mode
[ 1147.032328][T13362] bridge15: the hash_elasticity option has been deprecated and is always 16
[ 1147.067422][T13202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1147.114255][T13202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1147.183448][T13364] device syzkaller0 entered promiscuous mode
[ 1147.230885][T13202] team0: Port device team_slave_0 added
[ 1147.346141][T13202] team0: Port device team_slave_1 added
[ 1148.236568][T13367] device syzkaller0 entered promiscuous mode
[ 1148.302947][T13202] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1148.309928][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1148.389922][T13382] fuse: Bad value for 'fd'
[ 1148.459071][T13202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1148.719130][   T26] audit: type=1326 audit(1784332829.038:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13394 comm="syz.1.2029" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb45399de99 code=0x0
[ 1150.046365][T13416] 9pnet_virtio: no channels available for device syz
[ 1151.997258][T13202] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.005023][T13202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1152.032936][T13202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.066009][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2030'.
[ 1152.240044][T13202] device hsr_slave_0 entered promiscuous mode
[ 1152.277826][T13202] device hsr_slave_1 entered promiscuous mode
[ 1152.302974][T13202] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1152.311425][T13202] Cannot create hsr debugfs directory
[ 1154.432284][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'.
[ 1154.516729][T13443] device syzkaller0 entered promiscuous mode
[ 1155.703578][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'.
[ 1157.077164][T13484] 9pnet_virtio: no channels available for device syz
[ 1157.843234][T13477] device syzkaller0 entered promiscuous mode
[ 1157.892915][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'.
[ 1158.711003][   T26] audit: type=1326 audit(1784332839.028:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1158.808151][   T26] audit: type=1326 audit(1784332839.068:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1158.867005][   T26] audit: type=1326 audit(1784332839.078:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1158.930347][   T26] audit: type=1326 audit(1784332839.078:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1158.962954][   T26] audit: type=1326 audit(1784332839.078:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1159.005545][   T26] audit: type=1326 audit(1784332839.088:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1159.036579][   T26] audit: type=1326 audit(1784332839.088:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1159.071873][   T26] audit: type=1326 audit(1784332839.088:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1159.117231][   T26] audit: type=1326 audit(1784332839.088:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1159.247192][   T26] audit: type=1326 audit(1784332839.088:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13498 comm="syz.4.2046" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa2699de99 code=0x7ffc0000
[ 1161.375402][T13481] device syzkaller0 entered promiscuous mode
[ 1161.441827][T13511] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2048'.
[ 1161.553089][T13202] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1161.587681][T13202] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1161.623422][T13202] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1161.672977][T13202] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1161.919732][T13526] 9pnet_virtio: no channels available for device syz
[ 1162.727975][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2051'.
[ 1162.869127][T13202] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1163.055452][T13538] 9pnet_virtio: no channels available for device syz
[ 1163.886864][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2054'.
[ 1163.912279][T13545] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1163.918852][T13545] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1163.926710][T13545] vhci_hcd vhci_hcd.0: Device attached
[ 1163.937625][T13546] vhci_hcd: connection closed
[ 1163.937862][T13161] vhci_hcd: stop threads
[ 1163.959660][T13161] vhci_hcd: release socket
[ 1163.972400][T13161] vhci_hcd: disconnect device
[ 1163.999015][T13161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1164.028187][T13161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1166.222550][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2057'.
[ 1166.233246][T13202] 8021q: adding VLAN 0 to HW filter on device team0
[ 1166.288315][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1166.308804][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1166.346439][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1166.353653][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1166.438595][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1166.461120][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1166.506870][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1166.550902][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1166.558137][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1166.646765][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1166.653079][ T4286] Bluetooth: Frame is too long (len 10, expected len 8)
[ 1166.715349][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1167.472873][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2060'.
[ 1167.571850][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1167.626565][T13576] device syzkaller0 entered promiscuous mode
[ 1167.642254][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1167.679900][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1167.782014][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1167.790752][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1167.807746][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1167.819485][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1167.829289][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1167.861868][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1167.916128][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1167.958698][T13202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1168.131421][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1168.143989][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1168.154099][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1168.164176][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1168.174236][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[ 1168.196677][T13602] 9pnet_virtio: no channels available for device syz
[ 1169.041121][T13611] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[ 1169.047801][T13611] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1169.072439][T13611] vhci_hcd vhci_hcd.0: Device attached
[ 1169.199201][T13612] vhci_hcd: connection closed
[ 1169.200318][T13161] vhci_hcd: stop threads
[ 1169.310075][T13161] vhci_hcd: release socket
[ 1169.392329][ T4322] usb 42-1: SetAddress Request (18) to port 0
[ 1169.398864][ T4322] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[ 1169.460101][T13161] vhci_hcd: disconnect device
[ 1169.613766][ T4322] usb 42-1: enqueue for inactive port 0
[ 1170.154737][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'.
[ 1170.167927][ T4322] usb usb42-port1: attempt power cycle
[ 1171.517630][T13646] device syzkaller0 entered promiscuous mode
[ 1171.608673][ T4322] usb usb42-port1: unable to enumerate USB device
[ 1171.736714][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1171.824463][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1171.839087][T13651] device syzkaller0 entered promiscuous mode
[ 1171.859635][T13202] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1173.153291][T13667] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1173.159872][T13667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1173.168155][T13667] vhci_hcd vhci_hcd.0: Device attached
[ 1173.178147][T13669] vhci_hcd: connection closed
[ 1173.178285][ T4460] vhci_hcd: stop threads
[ 1173.199518][ T4460] vhci_hcd: release socket
[ 1173.225813][ T4460] vhci_hcd: disconnect device
[ 1173.582398][   T26] audit: type=1326 audit(1784332853.908:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.0.2086" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72bc39de99 code=0x0
[ 1173.890289][T13686] NILFS (loop4): device size too small
[ 1173.912026][T12718] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[ 1174.963136][T12718] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1175.004330][T12718] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1175.041705][T12718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.049776][T12718] usb 1-1: Product: syz
[ 1175.081429][T12718] usb 1-1: Manufacturer: syz
[ 1175.086106][T12718] usb 1-1: SerialNumber: syz
[ 1175.122092][T12718] usb 1-1: config 0 descriptor??
[ 1175.127758][T13681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1175.162656][T12718] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[ 1175.188238][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1175.210825][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1175.294707][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1175.332660][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1175.367804][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1175.396744][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1175.437715][T13202] device veth0_vlan entered promiscuous mode
[ 1175.477651][T13202] device veth1_vlan entered promiscuous mode
[ 1175.530353][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1175.563089][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1175.593136][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1175.623482][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1175.656706][T13202] device veth0_macvtap entered promiscuous mode
[ 1175.713355][T13202] device veth1_macvtap entered promiscuous mode
[ 1175.790805][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.838248][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1175.859759][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1175.968179][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.118162][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1176.266134][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.502403][T13202] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1176.693213][T13709] bridge16: the hash_elasticity option has been deprecated and is always 16
[ 1176.705922][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1176.735442][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1176.822250][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1176.877181][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1176.904809][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.927800][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1176.952513][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1176.992283][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1177.020422][T13202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1177.056101][T13202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1177.083638][T13202] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1177.107220][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1177.131754][ T4322] usb 1-1: USB disconnect, device number 7
[ 1177.163202][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1177.204515][T13202] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.236498][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.242941][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.263912][T13202] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.284107][T13202] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.303917][T13202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.435924][T13717] device syzkaller0 entered promiscuous mode
[ 1178.654673][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1178.669264][T13738] 9pnet_virtio: no channels available for device syz
[ 1178.684870][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1178.722883][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1178.778890][T13738] SET target dimension over the limit!
[ 1178.785454][T13742] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 1178.792013][T13742] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1178.799799][T13742] vhci_hcd vhci_hcd.0: Device attached
[ 1178.810512][ T4435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1178.836127][ T4435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1178.852668][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1178.895320][T13744] vhci_hcd: connection closed
[ 1178.895554][   T56] vhci_hcd: stop threads
[ 1178.915132][   T56] vhci_hcd: release socket
[ 1178.919628][   T56] vhci_hcd: disconnect device
[ 1178.964195][T13750] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2100'.
[ 1179.484518][T13763] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1181.237800][   T26] audit: type=1326 audit(1784332861.558:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.0.2106" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72bc39de99 code=0x0
[ 1181.301565][T13787] device syzkaller0 entered promiscuous mode
[ 1181.582449][ T4321] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[ 1181.773775][ T4321] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1181.809813][ T4321] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1181.915850][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'.
[ 1181.931731][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'.
[ 1181.942605][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'.
[ 1181.954074][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'.
[ 1181.964775][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2111'.
[ 1181.983192][T13799] 9pnet_virtio: no channels available for device syz
[ 1182.655990][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.664202][ T4321] usb 1-1: Product: syz
[ 1182.668471][ T4321] usb 1-1: Manufacturer: syz
[ 1182.673224][ T4321] usb 1-1: SerialNumber: syz
[ 1182.687653][ T4321] usb 1-1: config 0 descriptor??
[ 1182.694974][T13791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1182.711679][ T4321] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[ 1183.630737][T13814] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2116'.
[ 1183.701740][T13816] bridge23: the hash_elasticity option has been deprecated and is always 16
[ 1184.174802][ T4321] usb 1-1: USB disconnect, device number 8
[ 1185.338733][T13827] device syzkaller0 entered promiscuous mode
[ 1185.919786][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2126'.
[ 1186.769703][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'.
[ 1186.782042][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'.
[ 1186.795168][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'.
[ 1186.810727][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'.
[ 1186.820774][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2123'.
[ 1186.835299][T13846] 9pnet_virtio: no channels available for device syz
[ 1187.088453][T13851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1187.096349][T13851] IPv6: NLM_F_CREATE should be set when creating new route
[ 1187.103724][T13851] IPv6: NLM_F_CREATE should be set when creating new route
[ 1187.191106][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1187.225045][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1187.244898][T13853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1187.775038][T13864] bridge17: the hash_elasticity option has been deprecated and is always 16
[ 1190.218705][T13885] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2136'.
[ 1190.276534][T13886] device syzkaller0 entered promiscuous mode
[ 1190.307676][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[ 1190.394112][T13895] 9pnet_virtio: no channels available for device syz
[ 1190.429462][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[ 1190.438997][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[ 1192.764857][T13928] random: crng reseeded on system resumption
[ 1194.836259][T13948] __nla_validate_parse: 3 callbacks suppressed
[ 1194.836326][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'.
[ 1194.855335][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'.
[ 1194.865498][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'.
[ 1194.874901][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'.
[ 1194.885101][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'.
[ 1194.899877][T13948] 9pnet_virtio: no channels available for device syz
[ 1195.989295][T13952] device syzkaller0 entered promiscuous mode
[ 1196.287201][T13961] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2156'.
[ 1196.386247][   T26] audit: type=1326 audit(1784332876.698:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.5.2157" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b29d9de99 code=0x0
[ 1196.696221][ T4321] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[ 1196.897643][ T4286] Bluetooth: Frame is too long (len 10, expected len 4)
[ 1196.918756][ T4321] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1197.683884][ T4321] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1197.785228][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.825831][ T4321] usb 6-1: Product: syz
[ 1197.830067][ T4321] usb 6-1: Manufacturer: syz
[ 1197.874759][ T4321] usb 6-1: SerialNumber: syz
[ 1197.888825][ T4321] usb 6-1: config 0 descriptor??
[ 1197.905715][T13967] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1197.929831][ T4321] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[ 1198.256997][T13990] random: crng reseeded on system resumption
[ 1200.276034][T12719] usb 6-1: USB disconnect, device number 19
[ 1200.454586][T13999] device syzkaller0 entered promiscuous mode
[ 1201.139772][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1201.145957][ T4286] Bluetooth: Frame is too long (len 10, expected len 4)
[ 1202.218925][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2172'.
[ 1203.334219][T14027] netlink: 'syz.1.2174': attribute type 16 has an invalid length.
[ 1203.342758][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2174'.
[ 1203.516694][T14005] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1203.558120][T14033] overlayfs: failed to clone lowerpath
[ 1203.591658][T14033] overlayfs: failed to clone lowerpath
[ 1205.540586][ T4286] Bluetooth: Unexpected start frame (len 10)
[ 1205.546809][ T4286] Bluetooth: Frame is too long (len 10, expected len 8)
[ 1206.462343][T14067] netlink: 'syz.7.2186': attribute type 1 has an invalid length.
[ 1206.546466][T14070] netlink: 'syz.4.2187': attribute type 16 has an invalid length.
[ 1206.554508][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2187'.
[ 1207.505615][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2188'.
[ 1208.346455][T14069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2184'.
[ 1211.373142][T14097] device syzkaller0 entered promiscuous mode
[ 1212.753435][T14102] ------------[ cut here ]------------
[ 1212.759677][T14102] WARNING: CPU: 0 PID: 14102 at arch/x86/kvm/x86.c:11275 kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1212.770494][T14102] Modules linked in:
[ 1212.774499][T14102] CPU: 0 PID: 14102 Comm: syz.7.2196 Not tainted syzkaller #0
[ 1212.782053][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1212.792187][T14102] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1212.798627][T14102] Code: e8 a3 3e c3 00 e9 13 f0 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c d1 e6 ff ff 4c 89 f7 e8 68 3e c3 00 e9 c4 e6 ff ff e8 9e 18 72 00 <0f> 0b e9 f9 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 89 ec
[ 1212.818384][T14102] RSP: 0018:ffffc900048ffc98 EFLAGS: 00010283
[ 1212.824543][T14102] RAX: ffffffff81100902 RBX: ffff888073c94f80 RCX: 0000000000080000
[ 1212.832579][T14102] RDX: ffffc9000de0a000 RSI: 00000000000003be RDI: 00000000000003bf
[ 1212.840563][T14102] RBP: ffff8880597df000 R08: dffffc0000000000 R09: 1ffffffff2162071
[ 1212.848589][T14102] R10: dffffc0000000000 R11: fffffbfff2162072 R12: 1ffff9200091ffac
[ 1212.856649][T14102] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004dcb7f0
[ 1212.864706][T14102] FS:  00007fd0575b76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1212.873706][T14102] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1212.880307][T14102] CR2: 00002000001ed030 CR3: 000000005c7e6000 CR4: 00000000003526f0
[ 1212.888387][T14102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800
[ 1212.896437][T14102] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1212.904504][T14102] Call Trace:
[ 1212.907813][T14102]  <TASK>
[ 1212.910768][T14102]  ? get_task_pid+0x1e/0x300
[ 1212.915524][T14102]  ? get_task_pid+0x1e/0x300
[ 1212.920181][T14102]  ? kvm_arch_vcpu_ioctl_run+0x119/0x21f0
[ 1212.926039][T14102]  kvm_vcpu_ioctl+0x8f2/0xc10
[ 1212.930895][T14102]  ? xa_release+0x50/0x50
[ 1212.935347][T14102]  ? __fget_files+0x28/0x460
[ 1212.940034][T14102]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1212.945068][T14102]  ? security_file_ioctl+0x7c/0xa0
[ 1212.950238][T14102]  ? xa_release+0x50/0x50
[ 1212.954618][T14102]  __se_sys_ioctl+0xfa/0x170
[ 1212.959277][T14102]  do_syscall_64+0x4c/0xa0
[ 1212.963742][T14102]  ? clear_bhb_loop+0x60/0xb0
[ 1212.968440][T14102]  ? clear_bhb_loop+0x60/0xb0
[ 1212.973165][T14102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1212.979105][T14102] RIP: 0033:0x7fd05679de99
[ 1212.983594][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1213.003280][T14102] RSP: 002b:00007fd0575b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1213.011968][T14102] RAX: ffffffffffffffda RBX: 00007fd056a25fa0 RCX: 00007fd05679de99
[ 1213.019994][T14102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[ 1213.028031][T14102] RBP: 00007fd056833eaf R08: 0000000000000000 R09: 0000000000000000
[ 1213.036064][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.044098][T14102] R13: 00007fd056a26038 R14: 00007fd056a25fa0 R15: 00007ffdbe3d35f8
[ 1213.052244][T14102]  </TASK>
[ 1213.055297][T14102] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1213.062633][T14102] CPU: 0 PID: 14102 Comm: syz.7.2196 Not tainted syzkaller #0
[ 1213.070103][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1213.080172][T14102] Call Trace:
[ 1213.083467][T14102]  <TASK>
[ 1213.086425][T14102]  dump_stack_lvl+0x188/0x24e
[ 1213.091173][T14102]  ? memcpy+0x3c/0x60
[ 1213.095266][T14102]  ? show_regs_print_info+0x12/0x12
[ 1213.100506][T14102]  ? load_image+0x410/0x410
[ 1213.105051][T14102]  panic+0x2d3/0x710
[ 1213.108979][T14102]  ? bpf_jit_dump+0xd0/0xd0
[ 1213.113523][T14102]  __warn+0x2f8/0x4f0
[ 1213.117515][T14102]  ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.123364][T14102]  ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.129205][T14102]  report_bug+0x2ba/0x4f0
[ 1213.133551][T14102]  ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.139377][T14102]  handle_bug+0x3a/0x70
[ 1213.143570][T14102]  exc_invalid_op+0x16/0x40
[ 1213.148097][T14102]  asm_exc_invalid_op+0x16/0x20
[ 1213.152980][T14102] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.159447][T14102] Code: e8 a3 3e c3 00 e9 13 f0 ff ff 44 89 f1 80 e1 07 38 c1 0f 8c d1 e6 ff ff 4c 89 f7 e8 68 3e c3 00 e9 c4 e6 ff ff e8 9e 18 72 00 <0f> 0b e9 f9 fc ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 89 ec
[ 1213.179174][T14102] RSP: 0018:ffffc900048ffc98 EFLAGS: 00010283
[ 1213.185253][T14102] RAX: ffffffff81100902 RBX: ffff888073c94f80 RCX: 0000000000080000
[ 1213.193233][T14102] RDX: ffffc9000de0a000 RSI: 00000000000003be RDI: 00000000000003bf
[ 1213.201227][T14102] RBP: ffff8880597df000 R08: dffffc0000000000 R09: 1ffffffff2162071
[ 1213.209218][T14102] R10: dffffc0000000000 R11: fffffbfff2162072 R12: 1ffff9200091ffac
[ 1213.217199][T14102] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90004dcb7f0
[ 1213.225208][T14102]  ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.231039][T14102]  ? kvm_arch_vcpu_ioctl_run+0x1d52/0x21f0
[ 1213.236951][T14102]  ? get_task_pid+0x1e/0x300
[ 1213.241576][T14102]  ? get_task_pid+0x1e/0x300
[ 1213.246191][T14102]  ? kvm_arch_vcpu_ioctl_run+0x119/0x21f0
[ 1213.251938][T14102]  kvm_vcpu_ioctl+0x8f2/0xc10
[ 1213.256631][T14102]  ? xa_release+0x50/0x50
[ 1213.260979][T14102]  ? __fget_files+0x28/0x460
[ 1213.265594][T14102]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1213.270549][T14102]  ? security_file_ioctl+0x7c/0xa0
[ 1213.275691][T14102]  ? xa_release+0x50/0x50
[ 1213.280034][T14102]  __se_sys_ioctl+0xfa/0x170
[ 1213.284641][T14102]  do_syscall_64+0x4c/0xa0
[ 1213.289095][T14102]  ? clear_bhb_loop+0x60/0xb0
[ 1213.293785][T14102]  ? clear_bhb_loop+0x60/0xb0
[ 1213.298477][T14102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1213.304386][T14102] RIP: 0033:0x7fd05679de99
[ 1213.308817][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1213.328434][T14102] RSP: 002b:00007fd0575b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1213.336856][T14102] RAX: ffffffffffffffda RBX: 00007fd056a25fa0 RCX: 00007fd05679de99
[ 1213.344833][T14102] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[ 1213.352809][T14102] RBP: 00007fd056833eaf R08: 0000000000000000 R09: 0000000000000000
[ 1213.360817][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.368825][T14102] R13: 00007fd056a26038 R14: 00007fd056a25fa0 R15: 00007ffdbe3d35f8
[ 1213.376822][T14102]  </TASK>
[ 1213.380045][T14102] Kernel Offset: disabled
[ 1213.384567][T14102] Rebooting in 86400 seconds..