last executing test programs:

4m9.30867418s ago: executing program 3 (id=701):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="180000004b210000000000002100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000200008500000086000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280))
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery')

4m9.229453297s ago: executing program 3 (id=702):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000061000000850000000e0000009500000000000000505c51ee681e6e3109a34929fdba94a44519bc7d97fbe1a1faad484015234429236821c9810e020d504434a0a9386eec6f3fd56f32029c7470aa1d5f8cfd24107f16a9a4124ca447838ca9f2c4a6a64f9ac557c979a1a2b44f78b9e0e9372420e34458a4d3114724119b9f4234ae1b0448ba590c14cec4"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed39ddbe90051ec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

4m9.226992129s ago: executing program 3 (id=703):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='pvfs2\x00', 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x61e, &(0x7f0000000140)={0x0, 0x6081, 0x800, 0x0, 0x141}, &(0x7f00000001c0), &(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
io_uring_register$IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000280)={0x7}, 0x0)
read(r1, &(0x7f0000000040), 0x0)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046})
read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0xfffffdfc)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_process_wait\x00', r4, 0x0, 0x81200}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="1100"/12, @ANYRES32=r6, @ANYBLOB="d199443c3688b1d79e2a09b338ba9c000000cce6020a5cdbb117918dab4f6c1070b1e74f8d70d37d94968d", @ANYRES64=0x0], 0x20)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@host})

4m8.345107193s ago: executing program 3 (id=709):
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x30)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
ioctl$PTP_EXTTS_REQUEST(r0, 0xc4c03d16, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x35, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @fd=r1}]}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2)
write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2000000002, 0x9, 0x3}}, 0x28)
read$FUSE(r3, &(0x7f0000002440)={0x2020}, 0x2020)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x6, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x2, 0x12})
pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00')
syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e37bcdba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007f13a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff1ae0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a0064341697e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a202a991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0)

4m5.308689322s ago: executing program 3 (id=731):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m5.099090147s ago: executing program 3 (id=732):
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f00000004c0)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x5608, 0x3) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x1000b, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) (rerun: 64)
ioctl$I2C_PEC(r4, 0x708, 0x2000e)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0xfe, 0x4, &(0x7f0000000000)={0x22, "271e6c5d59ed71c24ac5b072d56010b62db2500454e1fe22469c29274cf254a6da"}})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 32)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) (async)
sendmmsg(r6, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)="1eefd9143c8d0ed717da7f5d29c0e1a2e4894e9140d76a40db7200073fb04b5e4c68cd2b9836bff8bb6cf077f0c5531bf1ba831519259f98c8143a132aa63543ed0e06d9e8860f3d96975067a4aed0a9c14ea28c4b0a65e6eaf2443ded24a082ce7fad886d526e344bc2b15c87b720f39d7161687bf8ee99037251c7531976047465104ed8eef78a50886903947067bdea2fed558df9817ece79a92e2149b72d11e0c05123fcde7196dbb9351537f2f064a568722ed6634b12", 0xb9}, {&(0x7f0000000780)="96e6b67f1efb3b57bd3cc5cf8e0c9a1b1c073d973772106a35cf52208817d5f7f7b5e10cf656be150e577a0d04d9d45b0dfb2fa659ff61e4a2111fc2af48708b178a606a70ead743db7cb2724315e28f3e9ac90dfb82fe0690a31e0b4161011f7f32d714448903a5e3e4b9241529f5a7f15bf7eb8732eafc5c80994472610b105d97db983db3156bff4a3d85c9cb5387fd0e843a6d145ea655d590a7d488d562902f5846fcc10544e7f474c7ce65250f4b151006bbf3ec7c8642b5506d4a565427181747a74b2b5088a2c408f7d9f4", 0xcf}], 0x2, &(0x7f0000000880)=[{0xbc, 0x11, 0x2, "26023a5bb2b2d8fd2d4a51c906ac34fbd1d8e67a83c38649fc763ed38a51720ee6e1d13c5b8f074679f047be67b9460879495872d28628ff29d88a9c3171784a9773fda78df0b481bb54f119f43d8e96275e5464c04f6242ad623a658e127797d66d324be25d0896f5377a2aa3a20b03e86fa0085e30b917522447a56e06dd072340fe331ad450232b37ae076f5abe77df7e6f1217bce45a7ed761bcbc1243e64b187d9dbe8ba4f0c2f6d4c2c47f69"}], 0xbc}}], 0x1, 0x48004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/231, 0xe7}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

4m5.091495106s ago: executing program 32 (id=732):
r0 = socket$unix(0x1, 0x1, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f00000004c0)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r1, 0x5608, 0x3) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x1000b, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async, rerun: 64)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) (rerun: 64)
ioctl$I2C_PEC(r4, 0x708, 0x2000e)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0xfe, 0x4, &(0x7f0000000000)={0x22, "271e6c5d59ed71c24ac5b072d56010b62db2500454e1fe22469c29274cf254a6da"}})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 32)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @multicast}) (async)
sendmmsg(r6, &(0x7f0000000400)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x3, @empty, 'vxcan1\x00'}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)="1eefd9143c8d0ed717da7f5d29c0e1a2e4894e9140d76a40db7200073fb04b5e4c68cd2b9836bff8bb6cf077f0c5531bf1ba831519259f98c8143a132aa63543ed0e06d9e8860f3d96975067a4aed0a9c14ea28c4b0a65e6eaf2443ded24a082ce7fad886d526e344bc2b15c87b720f39d7161687bf8ee99037251c7531976047465104ed8eef78a50886903947067bdea2fed558df9817ece79a92e2149b72d11e0c05123fcde7196dbb9351537f2f064a568722ed6634b12", 0xb9}, {&(0x7f0000000780)="96e6b67f1efb3b57bd3cc5cf8e0c9a1b1c073d973772106a35cf52208817d5f7f7b5e10cf656be150e577a0d04d9d45b0dfb2fa659ff61e4a2111fc2af48708b178a606a70ead743db7cb2724315e28f3e9ac90dfb82fe0690a31e0b4161011f7f32d714448903a5e3e4b9241529f5a7f15bf7eb8732eafc5c80994472610b105d97db983db3156bff4a3d85c9cb5387fd0e843a6d145ea655d590a7d488d562902f5846fcc10544e7f474c7ce65250f4b151006bbf3ec7c8642b5506d4a565427181747a74b2b5088a2c408f7d9f4", 0xcf}], 0x2, &(0x7f0000000880)=[{0xbc, 0x11, 0x2, "26023a5bb2b2d8fd2d4a51c906ac34fbd1d8e67a83c38649fc763ed38a51720ee6e1d13c5b8f074679f047be67b9460879495872d28628ff29d88a9c3171784a9773fda78df0b481bb54f119f43d8e96275e5464c04f6242ad623a658e127797d66d324be25d0896f5377a2aa3a20b03e86fa0085e30b917522447a56e06dd072340fe331ad450232b37ae076f5abe77df7e6f1217bce45a7ed761bcbc1243e64b187d9dbe8ba4f0c2f6d4c2c47f69"}], 0xbc}}], 0x1, 0x48004)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/231, 0xe7}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

1m40.537675079s ago: executing program 1 (id=1434):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=0x100)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x7, @raw_data="8a93a9bca2e7a34fd42cad7a27db2244182edb88bfb1f531061fff7f8e2167ccf1cb11a2bc849e7071c7dc5809a0e1e7a322fb50414f35f9a64a7a24e6eac6339fe77f834b71d14670185f2b582edd96ac12667b94ce5d1dab41c7702b0dd2df2800fe8ca0eb607aace9f42c6f82b97820cb0686ff8279996467f64732144e6d8a36e8848dcbc0be0fe8c515128a63995eba99cf70e5db63cb5a10703d334e05c4fcbf9910e795abe501acb4bc4ae4b30c5e2679214f982efdb31aed3ae4392d31b7177aee45dd8c"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]})
close_range(r4, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r5)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r6, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1, 0x200734}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x9084)

1m40.447813043s ago: executing program 1 (id=1435):
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x3000)=nil)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
userfaultfd(0x801) (async)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c8d000/0x1000)=nil, 0x1000}, 0x3}) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000c8d000/0x1000)=nil, 0x1000}, 0x3})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00'}) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00'})
r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x82, 0x4100)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r5, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048005}, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) (async)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000480)={'vcan0\x00'})
r6 = syz_open_dev$audion(&(0x7f0000000080), 0x7, 0xc2)
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0x1, 0x3}, 0x1}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)}, 0x1400d)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x300)
readv(r1, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/154, 0x9a}], 0x1)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000180), &(0x7f0000000240)=""/15, &(0x7f0000000380)="376c04972a2cd3cdc0a77b75fea52a934a89d77e62b4a48330ed3e6112833a5724c4ecad0e548f13f4916e90a885e48d0cc7541df9abe7cf644d88ce54c024cff7065997", &(0x7f0000000280)="3c8e58d2ec739dd6527ba020f88814557b386f9116c362a39145fa08f5430402cb0e1e89a9efc0f489c55653fbfd749b7f40237f60e6fc", 0x5, r3, 0x4}, 0x38)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000180)) (async)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000180))
syz_io_uring_setup(0x5b11, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), 0x0)
close_range(r0, r0, 0x0)

1m39.546694285s ago: executing program 1 (id=1440):
r0 = userfaultfd(0x80801)
openat$vnet(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1000})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r2 = openat$ptmx(0xffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000240)=0x7)
madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0xf0, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x4, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800900faffffff74610000000014000280080001400000000d08000240000000190900010073797a30000000000900020073797a32"], 0xb0}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"})
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r6 = syz_open_dev$vcsu(&(0x7f0000000140), 0x4, 0x3a1400)
sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x5de1c451065858d5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1)

1m38.608083763s ago: executing program 1 (id=1446):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x4}, &(0x7f00000002c0)=0x8)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
fsopen(&(0x7f0000000000)='logfs\x00', 0x0)

1m38.547929567s ago: executing program 1 (id=1447):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r0=>0x0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b742ba00000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001b1401", @ANYRES32=<r6=>r3, @ANYRES8=<r7=>r4], 0x10}, 0x1, 0x0, 0x0, 0xb70b45dfd8683747}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES64=r6, @ANYRES64=r0], 0x19, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) (async)
connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000f80)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000600)="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", 0xfe}, {&(0x7f00000000c0)="f3f6f8df5b16ab7d3f41fc9d9aef013a1abb4ec9a52f1e81c021be93e33fa61951c2398140d8dce77a8b6e151fab294239", 0x31}, {&(0x7f0000000480)="fec1ff8adefbe6ecba6334f16c68efd028b55e1416a47c55934767a40ed78ed004868218d8a1bfbdd46cd3e8afe21825ae121d9e775080383bd4896f1a463dddc10e4db540ebdd6c25a6baf7c77b209b523b86cbaa417f1b36cb87d6fee7811ab37dd7758a290326cb27c6c9edebd976fd7a792d5d8b9c", 0x77}, {&(0x7f0000000700)="5475a2bbeb232fe50e15f8548046bff4e38a9d8478c4edffcd11ae582458185947a4c3f74bb2719007dcca122cc6dfd262e4c41cc6a3875064a0ebb7da8faec319c9a5a9d78d61af3fc15bd37d6404e73b40943c00fbcc20748109a7227ea1786478f67c03e4fcdb1642eb057b332170a7e74e28fc995b47bd67e9aa51d3447db378fe9c9ecb3ec5c4d1512a75c062f625c21aac74cc037a7da77a8f62de65536878565e0595d145ec2408b34e8acf929a1de8120dafdbe2dd8ae54a8f3825ea61be7abdc7", 0xc5}], 0x4, &(0x7f0000002080)=ANY=[@ANYRES8=r7, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100000001000000000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000000100000001000000", @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="6da25b613e6bacbf2cb62e4542b1df34edad04e4e1aea08fbc55d9ba9c77aab1aaba7f0699ba75cb1ddd1da975301346f93d189619041f12ca2193ca4a10dfa5ed27821c732b82c6e6a036f4f64f933572965e0c3bcd8c5fa024e1cdc2e8213f196f2dfe8d7cea00609d6b3f5ec96da69e6796069796037bf08f5f1c909a751ca64420fe5f4bc7f28e8cd39ba58381bf7c3013a8772340493c33444690e468a6634540eec6a70ca969b080e91ca31ee3939824", @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4], 0xa0, 0x40080}}, {{&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)="c519e542ab918268af17f2f9e87a3bfd256fee3e6ff724af892b73f0d649de1c04c08b8c3f51bf15afba1efe19b254f1324e4c6b1879315cdea55dd8f1d89bc08ece772bef168c3101334c315a3f21162175bf362a6ef3f78487aae52c3e62", 0x5f}, {&(0x7f0000000bc0)="a7ac6a93502d77ea4f907edacbcd9158e4d1236c4119e9d672ab4a4781927aef8474c399bf66d148308a9cb5e8e97d333b2ebe283d8218afad905dec2b32c3443d5f2fc2cb533db6fc5168e290b1bc121a51dfc3782bc46e8c0d517f50a88e376d2ccdfa4880b7847f68c48d3f85508ef7f17f7b5d1b356d8d9d396b6d332a5ada4aacb1ca7bf72ca5b76ddf1e51efa21e0efee43be7badc9af253fe71460fa835a1b9974285a2ca0e6cb0fb7b0ee22021d784726a17f738ad68d009887b790ad013243a6f566a0f2f589045cb74ddf05f6d203f68f8eed9602603", 0xdb}, {&(0x7f0000000cc0)="5b2e83cff150ef59d1c04fa01fb870d105", 0x11}], 0x3, &(0x7f0000002300)=ANY=[@ANYBLOB="2c00001f0100eb4fbe89ead7", @ANYRES32=r9, @ANYBLOB="863047b2970147f89b839234a81a7d1850e81313c70dee489c77ce298035cca0a84d22113c90a9704945f12a5ab713eaf992273c40a6f96ad3d3d3c76a08e348f99af56168fb595c6071ee732f8e3742b47eaa6c58d2a63727897a19748b0d23ab1596129fad2a030f29ddd03ff8ee895cc08c4578a134f1519d6abccf101a5775ae8590e16a499a4a5a04373d14459cf8040f4158378da0b7be42699144d11485ca09712d81b37c8b2f4e2640335bb155d7de8b3a32887393f3ff5d29b12efb30d4a49696936375f33527aebde1", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="200000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRES32=r8, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000000010000000227400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe4, 0x20000000}}], 0x2, 0x10000800) (async)
sendmmsg$unix(r9, &(0x7f0000000f80)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000600)="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", 0xfe}, {&(0x7f00000000c0)="f3f6f8df5b16ab7d3f41fc9d9aef013a1abb4ec9a52f1e81c021be93e33fa61951c2398140d8dce77a8b6e151fab294239", 0x31}, {&(0x7f0000000480)="fec1ff8adefbe6ecba6334f16c68efd028b55e1416a47c55934767a40ed78ed004868218d8a1bfbdd46cd3e8afe21825ae121d9e775080383bd4896f1a463dddc10e4db540ebdd6c25a6baf7c77b209b523b86cbaa417f1b36cb87d6fee7811ab37dd7758a290326cb27c6c9edebd976fd7a792d5d8b9c", 0x77}, {&(0x7f0000000700)="5475a2bbeb232fe50e15f8548046bff4e38a9d8478c4edffcd11ae582458185947a4c3f74bb2719007dcca122cc6dfd262e4c41cc6a3875064a0ebb7da8faec319c9a5a9d78d61af3fc15bd37d6404e73b40943c00fbcc20748109a7227ea1786478f67c03e4fcdb1642eb057b332170a7e74e28fc995b47bd67e9aa51d3447db378fe9c9ecb3ec5c4d1512a75c062f625c21aac74cc037a7da77a8f62de65536878565e0595d145ec2408b34e8acf929a1de8120dafdbe2dd8ae54a8f3825ea61be7abdc7", 0xc5}], 0x4, &(0x7f0000002080)=ANY=[@ANYRES8=r7, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100000001000000000000", @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000000100000001000000", @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r3, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="6da25b613e6bacbf2cb62e4542b1df34edad04e4e1aea08fbc55d9ba9c77aab1aaba7f0699ba75cb1ddd1da975301346f93d189619041f12ca2193ca4a10dfa5ed27821c732b82c6e6a036f4f64f933572965e0c3bcd8c5fa024e1cdc2e8213f196f2dfe8d7cea00609d6b3f5ec96da69e6796069796037bf08f5f1c909a751ca64420fe5f4bc7f28e8cd39ba58381bf7c3013a8772340493c33444690e468a6634540eec6a70ca969b080e91ca31ee3939824", @ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4], 0xa0, 0x40080}}, {{&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)="c519e542ab918268af17f2f9e87a3bfd256fee3e6ff724af892b73f0d649de1c04c08b8c3f51bf15afba1efe19b254f1324e4c6b1879315cdea55dd8f1d89bc08ece772bef168c3101334c315a3f21162175bf362a6ef3f78487aae52c3e62", 0x5f}, {&(0x7f0000000bc0)="a7ac6a93502d77ea4f907edacbcd9158e4d1236c4119e9d672ab4a4781927aef8474c399bf66d148308a9cb5e8e97d333b2ebe283d8218afad905dec2b32c3443d5f2fc2cb533db6fc5168e290b1bc121a51dfc3782bc46e8c0d517f50a88e376d2ccdfa4880b7847f68c48d3f85508ef7f17f7b5d1b356d8d9d396b6d332a5ada4aacb1ca7bf72ca5b76ddf1e51efa21e0efee43be7badc9af253fe71460fa835a1b9974285a2ca0e6cb0fb7b0ee22021d784726a17f738ad68d009887b790ad013243a6f566a0f2f589045cb74ddf05f6d203f68f8eed9602603", 0xdb}, {&(0x7f0000000cc0)="5b2e83cff150ef59d1c04fa01fb870d105", 0x11}], 0x3, &(0x7f0000002300)=ANY=[@ANYBLOB="2c00001f0100eb4fbe89ead7", @ANYRES32=r9, @ANYBLOB="863047b2970147f89b839234a81a7d1850e81313c70dee489c77ce298035cca0a84d22113c90a9704945f12a5ab713eaf992273c40a6f96ad3d3d3c76a08e348f99af56168fb595c6071ee732f8e3742b47eaa6c58d2a63727897a19748b0d23ab1596129fad2a030f29ddd03ff8ee895cc08c4578a134f1519d6abccf101a5775ae8590e16a499a4a5a04373d14459cf8040f4158378da0b7be42699144d11485ca09712d81b37c8b2f4e2640335bb155d7de8b3a32887393f3ff5d29b12efb30d4a49696936375f33527aebde1", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="200000000100000001000000", @ANYRES32=r9, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRES32=r8, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000000010000000227400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xe4, 0x20000000}}], 0x2, 0x10000800)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) (async)
syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
setreuid(0x0, 0x0) (async)
setreuid(0x0, 0x0)
request_key(&(0x7f0000000440)='rxrpc_s\x00', 0x0, 0x0, 0xffffffffffffffff)

1m38.388115569s ago: executing program 1 (id=1448):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xffffffffffffff83)

1m38.323853634s ago: executing program 33 (id=1448):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xffffffffffffff83)

7.616425452s ago: executing program 2 (id=1887):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r3=>0x0})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x200001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xf14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x1, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
socket(0x840000000002, 0x3, 0xff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock2(&(0x7f0000341000/0x3000)=nil, 0x3000, 0x1)

6.386158386s ago: executing program 2 (id=1893):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[], 0x1df)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfe000000000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4.746544939s ago: executing program 2 (id=1903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101})
r3 = socket$alg(0x26, 0x5, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f0000000440)=ANY=[])
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="5d2c53fbef80181fae0c3c362425a3dc9c29ab06095c301a247a05663dd0339e33f937723c0e747e4b692263874b83110b47a6464cf43728c8f87a5de29499a43ba740851fece0e2073dfeeced3bb6060d5f60cd20e5e9f30ebb98ab5c138e5dc4eb01bf5c70d0f6ed942abb86e4d0d4755120dec9df1876bd842878129f92ebd35a08aa9e000000000000000000", 0x8e, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x100000}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r6, @ANYBLOB="010028bd70000000000001000000840008808000008024000100d1732899f611cd8994034d7f513dc957630e5493c285aca40065cb6311be696b5800098028000080060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a00000014000200000000000000000000000000000000000500030001000000040000801400020077673000000000000000000000000000080005000100"], 0xb4}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/78}, {&(0x7f00000009c0)=""/198}], 0xc6}, 0x20)
socket$tipc(0x1e, 0x5, 0x0)
pwritev2(r1, &(0x7f0000000880)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000000680)}, {&(0x7f0000000740)="13ece50aa2eefc79e76ed2fd2dbea839eb1fc902492f71eb14f918e56d62aba8de72d06d1304dd4729b1d6c09b74ace7c7e177898738371cc58bfa7def8337c6d1ca8e5b79cb4b6b00594984566c8a336f271db19071a0df860b6ddd36b5a73dc4cecfe175290b5b29588f269e6aed2a0ef3423c321039", 0x77}, {&(0x7f0000000840)="34a8960c250943d9776ee2", 0xb}], 0x4, 0x5, 0x401, 0x1b)
setxattr$security_capability(&(0x7f0000000640)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x1)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x7, 0x26040885}, 0x4810)
openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000007700000000000000000000000000000000000000000000000000000000000000000000000000eeff00feffffff01000000"]}, 0xe0)

4.744356563s ago: executing program 0 (id=1906):
r0 = socket(0x28, 0x5, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)
munlock(&(0x7f00002de000/0x8000)=nil, 0x8000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
ioctl$CDROMREADTOCENTRY(r0, 0x5306, &(0x7f00000001c0)={0x9, 0x2, 0x0, 0x2, @lba, 0x5})
r1 = getpid()
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x1}, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x8}, @sack_perm, @sack_perm], 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000004c000000000000000100010081120c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtaction={0x14, 0x1e, 0x109, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x2b1e}, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r5, 0x100000)

3.50551318s ago: executing program 4 (id=1911):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = epoll_create(0x6)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x3, 0x3, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000300)={0x2, 0x109dc5, 0x0, 0x0, 0x4})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000580)={0x4})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x20000005)
r3 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x68, r4, 0x5f54886fd60c8c1d, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000014}, 0x80000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x72}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1e3a}]}}}]}]}], {0x14}}, 0x78}}, 0x0)

3.149079496s ago: executing program 0 (id=1912):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
personality(0x5400004)
mmap(&(0x7f0000552000/0x2000)=nil, 0x2000, 0x9, 0x10031, 0xffffffffffffffff, 0x0)
bind$inet(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r8 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001210010000000000000000000a0100004e2200"/56, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x4c}}, 0x0)
sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
write$rfkill(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x5, 0x2, 0x1}, 0x8)
shutdown(r7, 0x1)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)="2851f7f5abcb6623c4d07cc41e30bd1d877805825c9662133935", 0x1a, 0x10, 0x1})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r9=>r0, {0xb}}, './file0\x00'})
bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0x6, @mcast1, 0x1}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x4, 0x6}, {0x2, 0xfff2}, {0xfff3, 0xa}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x4000)
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)

3.029737782s ago: executing program 4 (id=1913):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[], 0x1df)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x100000000000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

3.021454653s ago: executing program 2 (id=1914):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2001200, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})

2.925470919s ago: executing program 2 (id=1915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x39, 0x0, 0x1, 0x401}, 0x28)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={0x0, 0x0, 0x18}, 0x14)
mmap(&(0x7f0000ae9000/0x1000)=nil, 0x1000, 0x2, 0x100010, r1, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_delete(0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x802)
r5 = openat$rfkill(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0)
shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
r6 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r5, &(0x7f0000000400)={r6, r2, 0x4})

2.921199279s ago: executing program 5 (id=1916):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000600400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f0000000000000800000000000000010003000a0010001a00000000000000"], 0xc4}}, 0x8044)

2.205569577s ago: executing program 0 (id=1917):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x37}], &(0x7f0000000040)='syzkaller\x00', 0xb8e, 0x5d, &(0x7f0000000080)=""/93, 0x41000, 0x30, '\x00', r3, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x0, 0x1, 0x5}, 0x10, r4, r2, 0x7, &(0x7f0000000180)=[r1, r1, r1, r1, r1], &(0x7f00000001c0)=[{0x5, 0x1, 0xf, 0x2}, {0x1, 0x1, 0x5, 0x5}, {0x1, 0x5, 0xc, 0xa}, {0x0, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x9, 0x5}, {0x3, 0x1, 0x5}, {0x4, 0x3, 0xa, 0xb}], 0x10, 0x2}, 0x94)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)

2.117670121s ago: executing program 4 (id=1918):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
syz_open_procfs(0x0, 0x0) (async, rerun: 32)
socket$packet(0x11, 0x2, 0x300) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0xe27, 0x70bd25, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf250300000009ac00030073797a30000000000900030073797a32000076657468315f746f5f6261746164760005000400010000000900010073797a31000000000900010073797a32000000"], 0x60}, 0x1, 0x0, 0x0, 0x2000c054}, 0x48000)
ioctl$BSG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) (async)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, 0x0, 0x840) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000180)=0x800, 0x4) (async)
r2 = open$dir(0x0, 0x0, 0x1) (async)
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000003c0)={'ipvlan0\x00', {0x2, 0x4e22, @broadcast}}) (async)
r4 = creat(&(0x7f0000000580)='./file0\x00', 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000010850000000700000700"/25], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
write$qrtrtun(r4, &(0x7f0000000340)="ca0e808bb35bdabb", 0x8) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100001b, 0x12, r2, 0x100000000)

2.117367495s ago: executing program 5 (id=1919):
r0 = getpgid(0x0)
openat$nullb(0xffffff9c, &(0x7f0000000380), 0x40000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
ptrace$getenv(0x4201, r0, 0x5, &(0x7f00000000c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r4=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
r5 = socket(0x28, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
close(r6)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000013000000000000000085000000d0000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x18)
connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r4, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x20000014, 0x3f00})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10)
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)

2.027706094s ago: executing program 4 (id=1920):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x1, 0x10, 0x2, 0x100, {{0x10, 0x4, 0x1, 0x0, 0x40, 0x67, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x89, 0x2}, @ssrr={0x89, 0x17, 0x40, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2]}, @end, @generic={0x7, 0x12, "6e5900c22573d1fe33e5cb8829917d85"}]}}}}})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000060000ff0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000015000000070000007f00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
timer_create(0x0, 0x0, &(0x7f0000000300)) (async)
timer_create(0x1, 0x0, &(0x7f0000bbdffc))
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
read$FUSE(r2, &(0x7f0000003280)={0x2020}, 0x2020) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000000000058000000070000000200001e0000000902000000070000000000001103000000080000000500000000000009010000001000000000000009040000000d0000000000000a01000000010000000000000a050000000800000000000010080000000061005f612e00"], &(0x7f0000000300)=""/145, 0x77, 0x91, 0x0, 0x5, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x5, 0xdb23a2c65305772, &(0x7f000000cf3d)=""/180, 0x41100, 0x0, '\x00', 0x0, @fallback, r3, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f00000003c0)={r4, 0xffffffffffffffff, 0x1}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x0, 0x2d}, 0x28)
close(r4) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r8)

1.807513696s ago: executing program 4 (id=1921):
socket$caif_stream(0x25, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x88)
open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=0x0, @ANYBLOB="01"], 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/160, 0xa0}], 0x1}, 0x8}], 0x1, 0x2, 0x0)
connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14)
shutdown(r1, 0x1)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000000, 0x0, 0x7, 0x48}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4)
unshare(0x20000400)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r2, 0x0, 0x0})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

1.693230863s ago: executing program 0 (id=1922):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
syz_usbip_server_init(0x6) (async)
socket$netlink(0x10, 0x3, 0x15) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
pipe(&(0x7f00000001c0)) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r4, 0x1) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00')
pread64(r5, 0x0, 0x0, 0x0) (async)
execveat(r5, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000300)='ct\x00', &(0x7f0000000340)='ct\x00', &(0x7f00000003c0)='ife\x00', &(0x7f0000000400)='ife\x00', &(0x7f0000000440)='syz1\x00', &(0x7f0000000480)='ct\x00', &(0x7f0000000540)='$\'\'\x00', &(0x7f0000000580)='syz1\x00', &(0x7f00000005c0)=':\x00']}, &(0x7f0000000680)={[&(0x7f0000000640)='ife\x00']}, 0x800) (async)
r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) (async)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c0007800800124000060000050001000600000005123988c0a8f77189000400000000000900020073797a310000000014000780060004404e2400000500150005000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

1.198229465s ago: executing program 5 (id=1923):
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) (async)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000000)=0xad640000, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_buf(r5, 0x1, 0x4c, 0x0, &(0x7f0000000080))
write$khugepaged_scan(r4, &(0x7f0000000040), 0x8)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async)
bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
pipe2$9p(&(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x80)
fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1800050, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6e6f657874656e642c0600000000006e742c756e616d653d7d7d2b746769643d00"/46, @ANYRESHEX=0xee00, @ANYBLOB=',mask=MAY_WRITE,euid<', @ANYRESDEC=r8, @ANYBLOB="2c66736e616d653d2c50bf29242d242a5c3a2c00"]) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1800050, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c6e6f657874656e642c0600000000006e742c756e616d653d7d7d2b746769643d00"/46, @ANYRESHEX=0xee00, @ANYBLOB=',mask=MAY_WRITE,euid<', @ANYRESDEC=r8, @ANYBLOB="2c66736e616d653d2c50bf29242d242a5c3a2c00"])
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000340)=0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c40)={0x3a0, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfc, {0x1e}, [@generic="2dfd45fc53fe4313564d7839c5bf46f28456e66546e06f4e8ff42ee12d7317709b2c7afbc7939d96be5057c9849f1b2152012e0f70e2c586c0a6d143d82b1ede752cf17a67b53f03f45897c154fcfb42aee1171ea7bb1ea755a528b47d5f883b80325f9e0c2aea3e8acee7c4a449fdef6cb64ac7d9e6b56ff479f8de26c278678ab63a06d55f8b2cc058e8f64430d314649844eb22eac67d86e3b6981742ead5ae6ce0ac33b1ee9f467096588fd091ea8a249c592a95ea95a704e45f8eb2c6aeccc82c401507e45fbfe52efd05af58fdda8d754298fdcb5af6fe7b37bcbedb97492706c098942bcf4b4e11", @typed={0x14, 0xbf, 0x0, 0x0, @ipv6=@private2}, @nested={0xe9, 0x142, 0x0, 0x1, [@generic="9ff9aa05949fbd2c3fecfe09f6c8e1a0d22a8449636dbf17e9a814e44fc149c8002418ae84c7e44421c8361ff2244e9f0b155d97cc47e23569b4e5dfc50572bffa1e6807a98fcf2612ce78936e5f3ca43cf7cba0f1cf174472c13f81e2a2e83921df24bf6404a9ec1e468fbccfa59fca1014c5", @generic="b4e4de09f998897e3df54c6abc5c929d9809", @generic="a95126461cd52ddc3cf88643ba1f5b4ef278013ab72980e8f9a02b0492ea560360c971fc941734adf6c14c3cae30ec582c4d592b448eabf93dc639a330b80777", @nested={0x18, 0x6, 0x0, 0x1, [@typed={0x14, 0x9, 0x0, 0x0, @ipv6=@local}]}, @typed={0x8, 0x18, 0x0, 0x0, @uid=r8}]}, @typed={0x8, 0xd0, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x29}, @generic="df868d5b26f1e09867ab1dc7b6bfdc9e953530bd030cf2f8b42b4396cd796482a65ae363bc707a5cdee7e9608b6eb82e5a3f0c7a5f51c9bef9db11b67fe13315d1a6159c2be299343d517eab317d96029c33d8d69db37c2aa561043253b061fdb5f16f46232f7148c695fb8271ee6747693d4224ec99703311009fbd98fd1d7f8a4753d4e4e0db9160edc4184db23f79ebc776077c3726dc5c8d89c7271f0698c4d349a8", @generic="633bf628e41c8ae4e046685c78c4e14c809071680d", @generic="494b332674e9e3cb652b55b12e82b15f768a9dc2f7e1e01b91b30cd0d3ceae115a29b61a844c22091e869b1e3a0773e6a5b6b673f1cc87d1273284b098f281d4ed1ef541759b2d0712aa550d6d885327deee22b34accbaceb0d1e493189c13a0bdab016a5ceb79066af49a98c663e355387842d165397a5b499e2635cbffacff76940acdb2dd68d0979e2b79b2fcc46a4329c8e284cbee180165c108b4b1a113dc50488074a5eaff4f5e3bb36a50130e078e0976e1610a788e79c65a93e7a181191784c8aeaab707ca668efd271e850519cede7868dd7ed5f3"]}, 0x3a0}, 0x1, 0x0, 0x0, 0x10880}, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
bind$alg(r6, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0)

971.49452ms ago: executing program 0 (id=1924):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x17aa, &(0x7f0000000080)={0x0, 0xedd9, 0x40, 0x2, 0x116}, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r1, r1)
setpgid(0x0, r1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r2, &(0x7f00000000c0)=""/127, 0x7f)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utime(&(0x7f0000000000)='./file0\x00', 0x0)

772.012865ms ago: executing program 4 (id=1925):
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
recvfrom$inet(r2, &(0x7f0000000700)=""/164, 0xa4, 0x40000000, 0x0, 0xfe66)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000300)={0x2, &(0x7f0000000280)=[{0x5, 0x8000}, {0x400, 0x597c}]})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0xbd9, 0x0, 0x3}]})
msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000007c0)=""/87)
r6 = fsmount(r1, 0x0, 0x3)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc7a, 0x7, &(0x7f0000000080))
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000c0000000100000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000aba60d9400"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x1156, 0x300, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {}, {0x0, 0x20000000}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc})
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0)
writev(r8, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f00000003c0)="bd", 0x1}], 0x2)
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x86956090991702cc, 0x85, &(0x7f0000001e80)=""/133}, {0x0, 0x3, &(0x7f00000001c0)=""/3}]})
r9 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896d2f2ffffff7fe2bd0000aff604cb7ef87e7610bc39ef64257f5d33", 0x30314752})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

679.055382ms ago: executing program 0 (id=1926):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000600)=ANY=[], 0x1df)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x200000000000000, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

678.697158ms ago: executing program 5 (id=1927):
socket$nl_route(0x10, 0x3, 0x0)

628.445819ms ago: executing program 5 (id=1928):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='virtio_transport_alloc_pkt\x00', r4, 0x0, 0xfffe}, 0x18)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000940), 0x10)
listen(r5, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884c}, 0x0)
r7 = dup(r0)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000340)={0x9, 0x0, 0x10000000, 0x515f3157, 0x15, "78e114100985a79874342a70e113343972d01f"})

508.834142ms ago: executing program 5 (id=1929):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000002797695c712bf60c81ebc8a0e7fb"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
userfaultfd(0x80001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7, 0x7}, {0x9, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x40, 0x6}, {0xe, 0x4}, {0x2, 0x2}, {0xb4, 0x1}, {0x4, 0x3}, {0x0, 0x4}, {0xb5, 0x1}, {0x8, 0x1}, {0x8, 0x6}], "31026e2be1ba8119"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xd, 0x7}, {0x1, 0x6}, {0x0, 0x3}, {0xf2, 0x6}], "f5bc424bca232dda"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x4, 0x1}, {0xf, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x9, 0x1}, {0xf8, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x4, 0x1}], "480f73f4d361e868"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x1a, 0x5}, {0x1}, {0x9, 0x2}, {0x2, 0x1}, {0x5, 0x5}, {0x8, 0x1}], "b5242249e602de95"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8, 0x4}, {0x22, 0x6}, {0x51, 0x2}, {0xf, 0x7}, {0x8f, 0x4}, {0x0, 0x4}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x9, 0x6}, {0x7, 0x7}, {0x10, 0x2}, {0x8, 0x7}, {0x0, 0x3}, {0xe, 0x1}, {0x9, 0x5}, {0x6, 0x5}], "c98e887afc52d1ca"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "2f4441c61cdc7219"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c080)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
bind$inet(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x6, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x4, 0xd, 0x20000004}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x5}, {0x10001, 0x4, 0x9, 0x0, 0x0, 0x1d, 0x20, 0x10, 0x2, 0x0, 0x0, 0x0, 0x20000000000000}]})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

0s ago: executing program 2 (id=1930):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='f2fs_lookup_start\x00', r0, 0x0, 0x92}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r1, r1)
setpgid(0x0, r1)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f00000001c0)={0x11, 0xf6, r4, 0x1, 0xc0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0xffffffffffffffb1)
sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14)
write$cgroup_int(r2, &(0x7f0000000040)=0x1f02, 0x12)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r8}, './file0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc810a5d", @ANYRES16=r10, @ANYBLOB="01002abd7000fbdbdf25240000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40000)
r11 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)

kernel console output (not intermixed with test programs):

4][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  322.717266][   T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  322.720318][   T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  322.724956][   T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  322.729871][   T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  322.733414][   T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  322.779723][T14966] wg2 speed is unknown, defaulting to 1000
[  322.838079][T14948] vhci_hcd: connection reset by peer
[  322.840641][T14074] vhci_hcd vhci_hcd.0: stop threads
[  322.842425][T14074] vhci_hcd vhci_hcd.0: release socket
[  322.857507][T14074] vhci_hcd vhci_hcd.0: disconnect device
[  322.910740][ T4600] erspan0: left allmulticast mode
[  322.912722][ T4600] erspan0: left promiscuous mode
[  322.916010][ T4600] bridge0: port 3(erspan0) entered disabled state
[  322.943875][ T4600] bridge_slave_1: left allmulticast mode
[  322.948070][ T4600] bridge_slave_1: left promiscuous mode
[  322.956037][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.977882][ T4600] bridge_slave_0: left allmulticast mode
[  322.984541][ T4600] bridge_slave_0: left promiscuous mode
[  322.992077][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.871419][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'.
[  324.107892][ T4600] bond1 (unregistering): (slave gretap1): Releasing active interface
[  324.248515][T15035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  324.251377][T15035] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  324.266051][T15035] vhci_hcd vhci_hcd.0: Device attached
[  324.768273][ T5947] Bluetooth: hci0: command tx timeout
[  324.819000][ T4600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.825805][ T4600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.830966][ T4600] bond0 (unregistering): Released all slaves
[  324.842454][T15036] vhci_hcd: connection closed
[  324.842631][T11469] vhci_hcd vhci_hcd.0: stop threads
[  324.846000][T11469] vhci_hcd vhci_hcd.0: release socket
[  324.848965][T11469] vhci_hcd vhci_hcd.0: disconnect device
[  324.954476][ T4600] bond1 (unregistering): Released all slaves
[  325.088509][ T4600] tipc: Left network mode
[  325.270169][T14966] chnl_net:caif_netlink_parms(): no params data found
[  325.529144][T14966] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.538120][T14966] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.540507][T14966] bridge_slave_0: entered allmulticast mode
[  325.582822][T14966] bridge_slave_0: entered promiscuous mode
[  325.586745][T14966] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.597114][T14966] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.600256][T14966] bridge_slave_1: entered allmulticast mode
[  325.604036][T14966] bridge_slave_1: entered promiscuous mode
[  325.632088][T15164] netlink: 'syz.0.1460': attribute type 1 has an invalid length.
[  325.635341][T15164] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.655388][T15164] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.666680][T15164] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.682016][T15180] netlink: 'syz.0.1460': attribute type 1 has an invalid length.
[  325.684935][T15180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.688836][T15180] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.691694][T15180] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1460'.
[  325.717879][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.741918][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.801677][T14966] team0: Port device team_slave_0 added
[  325.821647][T14966] team0: Port device team_slave_1 added
[  325.866143][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.909743][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.923110][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.949240][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.951549][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.963654][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.989573][ T4600] hsr_slave_0: left promiscuous mode
[  325.996912][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.008217][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.010665][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.027226][ T4600] pim6reg (unregistering): left allmulticast mode
[  326.462171][   T40] audit: type=1326 audit(1766559851.282:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.474188][   T40] audit: type=1326 audit(1766559851.292:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.484027][   T40] audit: type=1326 audit(1766559851.292:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.493195][   T40] audit: type=1326 audit(1766559851.292:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.500404][   T40] audit: type=1326 audit(1766559851.292:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.510240][   T40] audit: type=1326 audit(1766559851.292:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.517499][   T40] audit: type=1326 audit(1766559851.292:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.524605][   T40] audit: type=1326 audit(1766559851.292:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.532128][   T40] audit: type=1326 audit(1766559851.292:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  326.539448][   T40] audit: type=1326 audit(1766559851.292:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.2.1464" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  327.006552][ T5947] Bluetooth: hci0: command tx timeout
[  327.095439][T14966] hsr_slave_0: entered promiscuous mode
[  327.109159][T14966] hsr_slave_1: entered promiscuous mode
[  327.388863][T14966] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  327.399237][T14966] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  327.409783][T14966] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  327.414260][T14966] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  327.512643][T14966] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.522690][T14966] 8021q: adding VLAN 0 to HW filter on device team0
[  327.535542][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.538002][ T3580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.544771][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.547208][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.564559][T14966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  327.572261][T14966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  327.627068][ T6032] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  327.720907][ T4600] IPVS: stop unused estimator thread 0...
[  327.968747][T15374] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  327.969814][T15382] wg2 speed is unknown, defaulting to 1000
[  328.398964][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'.
[  328.673503][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.838674][T14966] veth0_vlan: entered promiscuous mode
[  328.849544][T14966] veth1_vlan: entered promiscuous mode
[  328.871783][T14966] veth0_macvtap: entered promiscuous mode
[  328.876481][T14966] veth1_macvtap: entered promiscuous mode
[  328.917543][   T29] usb usb38-port1: attempt power cycle
[  329.050510][T14966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.068483][T14966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  329.077162][T14078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  329.077975][ T5947] Bluetooth: hci0: command tx timeout
[  329.082392][T14078] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  329.092174][T14078] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  329.101271][T14078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  329.514610][   T29] usb usb38-port1: unable to enumerate USB device
[  329.847370][T14079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.857477][T14079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.901099][  T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.904140][  T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.138071][T15507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1478'.
[  330.367021][T15508] pim6reg: entered allmulticast mode
[  330.375377][T15508] pim6reg: left allmulticast mode
[  330.421371][T15516] hub 8-0:1.0: USB hub found
[  330.423825][T15516] hub 8-0:1.0: 1 port detected
[  330.527503][ T6015] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  330.677462][ T6015] usb 7-1: Using ep0 maxpacket: 32
[  330.681918][ T6015] usb 7-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config
[  330.688037][ T6015] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  330.695838][ T6015] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  330.700090][ T6015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.703624][ T6015] usb 7-1: Product: syz
[  330.705591][ T6015] usb 7-1: Manufacturer: syz
[  330.708041][ T6015] usb 7-1: SerialNumber: syz
[  330.916394][T15514] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1479'.
[  331.157131][ T5947] Bluetooth: hci0: command tx timeout
[  331.787105][ T6032] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  331.937068][ T6032] usb 5-1: Using ep0 maxpacket: 8
[  331.940908][ T6032] usb 5-1: config 0 interface 0 has no altsetting 0
[  331.943759][ T6032] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  331.948754][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.954100][ T6032] usb 5-1: config 0 descriptor??
[  332.435750][ T6032] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  333.149025][ T6015] usb 7-1: USB disconnect, device number 13
[  333.248554][T14809] buffer_io_error: 25 callbacks suppressed
[  333.248568][T14809] Buffer I/O error on dev loop6, logical block 32767999, async page read
[  333.276336][T15605] vivid-000: disconnect
[  333.281924][T15604] vivid-000: reconnect
[  333.287365][ T6032] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  333.346830][T15610] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  333.346830][T15610]    program syz.2.1492 not setting count and/or reply_len properly
[  333.437702][ T6032] usb 10-1: Using ep0 maxpacket: 8
[  333.479949][ T6032] usb 10-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  333.482884][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.485944][ T6032] usb 10-1: Product: syz
[  333.488274][ T6032] usb 10-1: Manufacturer: syz
[  333.490291][ T6032] usb 10-1: SerialNumber: syz
[  333.530223][ T6032] usb 10-1: config 0 descriptor??
[  333.544449][ T6032] option 10-1:0.0: GSM modem (1-port) converter detected
[  333.677335][T15625] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  333.679528][T15625] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  333.682504][T15625] vhci_hcd vhci_hcd.0: Device attached
[  333.749523][ T6032] usb 10-1: USB disconnect, device number 2
[  333.752697][ T6032] option 10-1:0.0: device disconnected
[  333.958362][ T6015] usb 42-1: SetAddress Request (18) to port 0
[  333.961498][ T6015] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[  334.001089][ T6026] usb 5-1: USB disconnect, device number 11
[  334.254680][T15626] vhci_hcd: connection reset by peer
[  334.257290][T14079] vhci_hcd vhci_hcd.2: stop threads
[  334.264927][T14079] vhci_hcd vhci_hcd.2: release socket
[  334.267556][T14079] vhci_hcd vhci_hcd.2: disconnect device
[  334.350996][T15660] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  334.353859][T15660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  334.358085][T15660] vhci_hcd vhci_hcd.0: Device attached
[  334.522151][T14809] Buffer I/O error on dev loop6, logical block 32767999, async page read
[  334.637156][ T6033] usb 38-1: SetAddress Request (47) to port 0
[  334.640026][ T6033] usb 38-1: new SuperSpeed USB device number 47 using vhci_hcd
[  334.743146][T15663] hub 8-0:1.0: USB hub found
[  334.745518][T15663] hub 8-0:1.0: 1 port detected
[  334.763306][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1495'.
[  334.767290][T15663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1495'.
[  334.780887][T15673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  334.783136][T15673] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  334.786086][T15673] vhci_hcd vhci_hcd.0: Device attached
[  335.057172][ T6165] usb 48-1: SetAddress Request (2) to port 0
[  335.060033][ T6165] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[  335.355574][T15661] vhci_hcd: connection reset by peer
[  335.357600][T14075] vhci_hcd vhci_hcd.0: stop threads
[  335.359325][T14075] vhci_hcd vhci_hcd.0: release socket
[  335.361137][T14075] vhci_hcd vhci_hcd.0: disconnect device
[  335.501751][T15674] vhci_hcd: connection reset by peer
[  335.506036][T11469] vhci_hcd vhci_hcd.5: stop threads
[  335.515347][T11469] vhci_hcd vhci_hcd.5: release socket
[  335.518368][T11469] vhci_hcd vhci_hcd.5: disconnect device
[  336.308957][T15689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'.
[  336.312065][T15689] IPv6: NLM_F_CREATE should be specified when creating new route
[  336.314655][T15689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  336.317192][T15689] IPv6: NLM_F_CREATE should be set when creating new route
[  336.569681][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1506'.
[  336.952278][T15738] nftables ruleset with unbound set
[  337.560485][T15754] team0: No ports can be present during mode change
[  337.793546][T15777] netlink: 'syz.0.1521': attribute type 1 has an invalid length.
[  337.796059][T15777] netlink: 'syz.0.1521': attribute type 4 has an invalid length.
[  337.802763][T15777] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1521'.
[  337.939590][T15779] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  337.941842][T15779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  337.948719][T15779] vhci_hcd vhci_hcd.0: Device attached
[  337.972404][T15779] afs: Unknown parameter 'd'
[  338.534701][T15780] vhci_hcd: connection closed
[  338.535878][ T4600] vhci_hcd vhci_hcd.2: stop threads
[  338.542453][ T4600] vhci_hcd vhci_hcd.2: release socket
[  338.547142][ T4600] vhci_hcd vhci_hcd.2: disconnect device
[  338.808095][T15813] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  338.810057][T15813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  338.819508][T15813] vhci_hcd vhci_hcd.0: Device attached
[  338.920219][   T40] kauditd_printk_skb: 14 callbacks suppressed
[  338.920231][   T40] audit: type=1800 audit(1766559871.736:2009): pid=15813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1527" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  338.933182][T15811] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  338.935305][T15811] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  338.939153][T15811] vhci_hcd vhci_hcd.0: Device attached
[  339.005942][ T6015] usb 42-1: device descriptor read/8, error -110
[  339.034717][T15820] vhci_hcd: connection closed
[  339.034984][ T1077] vhci_hcd vhci_hcd.4: stop threads
[  339.039362][ T1077] vhci_hcd vhci_hcd.4: release socket
[  339.041263][ T1077] vhci_hcd vhci_hcd.4: disconnect device
[  339.408040][ T6015] usb usb42-port1: attempt power cycle
[  339.451703][T15852] syz_tun: entered promiscuous mode
[  339.457133][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'.
[  339.457292][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'.
[  339.464263][T15853] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  339.466151][T15854] macvlan2: entered promiscuous mode
[  339.467161][T15853] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  339.473901][T15815] vhci_hcd: connection closed
[  339.474218][T14075] vhci_hcd vhci_hcd.0: stop threads
[  339.474726][T15853] vhci_hcd vhci_hcd.0: Device attached
[  339.476341][T14075] vhci_hcd vhci_hcd.0: release socket
[  339.479289][T15852] macvlan3: entered promiscuous mode
[  339.484876][T14075] vhci_hcd vhci_hcd.0: disconnect device
[  339.491025][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.499024][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.717065][ T6033] usb 38-1: device descriptor read/8, error -110
[  339.719631][ T6007] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  339.847162][ T6007] usb 7-1: device descriptor read/64, error -71
[  339.967532][ T6015] usb usb42-port1: unable to enumerate USB device
[  340.046444][T15855] vhci_hcd: connection closed
[  340.047353][ T8554] vhci_hcd vhci_hcd.5: stop threads
[  340.057310][ T8554] vhci_hcd vhci_hcd.5: release socket
[  340.059480][ T8554] vhci_hcd vhci_hcd.5: disconnect device
[  340.087224][ T6007] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  340.110207][ T6033] usb usb38-port1: attempt power cycle
[  340.118952][ T6165] usb 48-1: device descriptor read/8, error -110
[  340.126150][T15880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1535'.
[  340.132488][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'.
[  340.227193][ T6007] usb 7-1: device descriptor read/64, error -71
[  340.342883][ T6007] usb usb7-port1: attempt power cycle
[  340.512071][ T6165] usb usb48-port1: attempt power cycle
[  340.681105][ T6033] usb usb38-port1: unable to enumerate USB device
[  340.687144][ T6007] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  340.708884][ T6007] usb 7-1: device descriptor read/8, error -71
[  340.967068][ T6007] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  340.998349][ T6007] usb 7-1: device descriptor read/8, error -71
[  341.037236][ T6015] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  341.117694][ T6165] usb usb48-port1: unable to enumerate USB device
[  341.120567][ T6007] usb usb7-port1: unable to enumerate USB device
[  341.170291][T15906] wg2 speed is unknown, defaulting to 1000
[  341.202005][ T6015] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  341.204931][ T6015] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  341.217046][ T6015] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  341.219950][ T6015] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  341.223521][ T6015] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  341.259093][ T6015] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  341.262110][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  341.264763][ T6015] usb 9-1: Product: syz
[  341.266179][ T6015] usb 9-1: Manufacturer: syz
[  341.282465][ T6015] cdc_wdm 9-1:1.0: skipping garbage
[  341.284312][ T6015] cdc_wdm 9-1:1.0: skipping garbage
[  341.301793][ T6015] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  341.303841][ T6015] cdc_wdm 9-1:1.0: Unknown control protocol
[  341.703851][T15894] mkiss: ax0: crc mode is auto.
[  341.972231][ T6015] usb 9-1: USB disconnect, device number 7
[  342.816285][T15977] lo speed is unknown, defaulting to 1000
[  342.818388][T15977] lo speed is unknown, defaulting to 1000
[  342.820845][T15977] lo speed is unknown, defaulting to 1000
[  342.830005][T15977] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  342.844653][T15977] lo speed is unknown, defaulting to 1000
[  342.847431][T15977] lo speed is unknown, defaulting to 1000
[  342.850237][T15977] lo speed is unknown, defaulting to 1000
[  342.853009][T15977] lo speed is unknown, defaulting to 1000
[  342.855590][T15977] lo speed is unknown, defaulting to 1000
[  342.989231][T15989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1542'.
[  343.079668][T16001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  343.082450][T16001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  343.097923][T16001] vhci_hcd vhci_hcd.0: Device attached
[  343.369214][T16002] vhci_hcd: connection closed
[  343.369887][   T74] vhci_hcd vhci_hcd.2: stop threads
[  343.374439][   T74] vhci_hcd vhci_hcd.2: release socket
[  343.377193][ T6007] usb 42-1: SetAddress Request (22) to port 0
[  343.382150][   T74] vhci_hcd vhci_hcd.2: disconnect device
[  343.388106][ T6007] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd
[  343.427974][ T6007] usb 42-1: enqueue for inactive port 0
[  343.818791][T16010] netlink: 'syz.0.1547': attribute type 1 has an invalid length.
[  343.871050][ T6007] usb usb42-port1: attempt power cycle
[  344.031419][T16010] bond6: entered promiscuous mode
[  344.033341][T16010] 8021q: adding VLAN 0 to HW filter on device bond6
[  344.104911][T16010] bond6: (slave bridge2): making interface the new active one
[  344.109507][T16010] bridge2: entered promiscuous mode
[  344.111950][T16010] bond6: (slave bridge2): Enslaving as an active interface with an up link
[  344.218014][T16071] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1553'.
[  344.223454][T16070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1553'.
[  344.228176][T16071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1553'.
[  344.231453][T16070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1553'.
[  344.458258][ T6007] usb usb42-port1: unable to enumerate USB device
[  344.650652][T16109] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  344.653530][T16109] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  344.682559][T16109] vhci_hcd vhci_hcd.0: Device attached
[  344.977932][ T6007] usb 38-1: SetAddress Request (51) to port 0
[  344.985187][ T6007] usb 38-1: new SuperSpeed USB device number 51 using vhci_hcd
[  345.307520][T16110] vhci_hcd: connection reset by peer
[  345.311064][   T74] vhci_hcd vhci_hcd.0: stop threads
[  345.313081][   T74] vhci_hcd vhci_hcd.0: release socket
[  345.317479][   T74] vhci_hcd vhci_hcd.0: disconnect device
[  345.684496][T16131] x_tables: duplicate underflow at hook 1
[  345.684584][T16132] x_tables: duplicate underflow at hook 1
[  345.690697][T16132] hub 8-0:1.0: USB hub found
[  345.693372][T16132] hub 8-0:1.0: 1 port detected
[  346.289549][T16164] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  348.078257][T16175] ceph: No mds server is up or the cluster is laggy
[  348.086064][   T29] libceph: connect (1)[c::]:6789 error -101
[  348.088212][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  348.450618][T16181] 8021q: adding VLAN 0 to HW filter on device .`
[  348.454740][T16181] 8021q: adding VLAN 0 to HW filter on device team0
[  348.458423][T16181] tipc: Resetting bearer <eth:team0>
[  348.465202][T16181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  348.750037][T16213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  348.752759][T16213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  348.756564][T16213] vhci_hcd vhci_hcd.0: Device attached
[  349.049086][T16225] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  349.051256][T16225] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  349.060611][T16225] vhci_hcd vhci_hcd.0: Device attached
[  349.337505][ T6015] usb 42-1: SetAddress Request (26) to port 0
[  349.339535][ T6015] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd
[  349.360771][T16214] vhci_hcd: connection closed
[  349.360956][ T8554] vhci_hcd vhci_hcd.0: stop threads
[  349.364365][ T8554] vhci_hcd vhci_hcd.0: release socket
[  349.366226][ T8554] vhci_hcd vhci_hcd.0: disconnect device
[  349.498715][T16226] vhci_hcd: connection reset by peer
[  349.500714][   T46] vhci_hcd vhci_hcd.2: stop threads
[  349.502490][   T46] vhci_hcd vhci_hcd.2: release socket
[  349.504317][   T46] vhci_hcd vhci_hcd.2: disconnect device
[  349.662539][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'.
[  349.667318][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'.
[  349.673017][T16233] binder_alloc: binder_alloc_mmap_handler: 16232 80ffd000-80fff000 already mapped failed -16
[  350.037169][ T6007] usb 38-1: device descriptor read/8, error -110
[  350.429706][T16253] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  350.431941][T16253] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  350.501873][T16253] vhci_hcd vhci_hcd.0: Device attached
[  350.517355][ T6007] usb 38-1: SetAddress Request (52) to port 0
[  350.519418][ T6007] usb 38-1: new SuperSpeed USB device number 52 using vhci_hcd
[  351.007439][ T6165] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  351.125119][T16283] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  351.909908][T16290] netlink: 'syz.4.1594': attribute type 1 has an invalid length.
[  352.658141][ T6165] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  352.677461][ T6165] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  352.681076][ T6165] usb 5-1: config 0 interface 0 has no altsetting 0
[  352.696234][ T6165] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  352.702411][ T6165] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  352.707222][ T6165] usb 5-1: Product: syz
[  352.708607][ T6165] usb 5-1: Manufacturer: syz
[  352.710069][T16362] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  352.710091][T16362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  352.710225][T16362] vhci_hcd vhci_hcd.0: Device attached
[  352.717291][ T6165] usb 5-1: SerialNumber: syz
[  352.723095][ T6165] usb 5-1: config 0 descriptor??
[  352.731544][ T6165] usb 5-1: selecting invalid altsetting 0
[  352.961896][T16384] netlink: 'syz.4.1597': attribute type 5 has an invalid length.
[  352.976405][T16382] netlink: 'syz.4.1597': attribute type 5 has an invalid length.
[  353.146258][T16394] Invalid ELF header magic: != ELF
[  353.808889][T16363] vhci_hcd: connection closed
[  353.810897][T14076] vhci_hcd vhci_hcd.2: stop threads
[  353.814381][T14076] vhci_hcd vhci_hcd.2: release socket
[  353.816519][T14076] vhci_hcd vhci_hcd.2: disconnect device
[  354.202503][ T5982] usb 5-1: USB disconnect, device number 12
[  354.210035][T16255] vhci_hcd: connection reset by peer
[  354.219765][   T74] vhci_hcd vhci_hcd.0: stop threads
[  354.221529][   T74] vhci_hcd vhci_hcd.0: release socket
[  354.230492][   T74] vhci_hcd vhci_hcd.0: disconnect device
[  354.388277][T16432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1605'.
[  354.391275][T16432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1605'.
[  354.437135][ T6015] usb 42-1: device descriptor read/8, error -110
[  354.463296][T16433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1604'.
[  354.635540][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'.
[  354.670076][T16440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1603'.
[  354.715014][T16453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.719098][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.723921][T16453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.728024][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.733134][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.747550][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.767200][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.771570][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.775429][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.780178][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.784132][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.788095][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.793826][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.798179][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.801892][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.808818][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.812952][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.816591][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.821432][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.826030][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.830165][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.834075][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.838094][ T6015] usb usb42-port1: attempt power cycle
[  354.841469][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.846234][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.851306][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.856364][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.861165][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.865440][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.871614][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.877887][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.882478][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.889742][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.895004][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.900296][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.905529][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.910756][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.916082][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.921403][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.926608][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.930684][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.934425][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.938600][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.942330][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.946027][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.949851][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.953816][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.958410][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.963234][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.968509][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.973610][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.978882][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.984308][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.989537][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.000881][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.009932][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.015872][T16455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.172458][T16466] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1612'.
[  355.183971][T16466] fuse: Unknown parameter 'grÇup_id'
[  355.201855][T16467] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  355.204607][T16467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  355.208315][T16467] vhci_hcd vhci_hcd.0: Device attached
[  355.267125][ T6015] usb 42-1: SetAddress Request (29) to port 0
[  355.269187][ T6015] usb 42-1: new SuperSpeed USB device number 29 using vhci_hcd
[  355.557273][ T6007] usb 38-1: device descriptor read/8, error -110
[  355.668060][ T6007] usb usb38-port1: attempt power cycle
[  355.747106][   T29] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  355.845111][T16468] vhci_hcd: connection reset by peer
[  355.847872][ T8554] vhci_hcd vhci_hcd.2: stop threads
[  355.849730][ T8554] vhci_hcd vhci_hcd.2: release socket
[  355.851717][ T8554] vhci_hcd vhci_hcd.2: disconnect device
[  356.025604][T16499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.317764][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'.
[  356.868297][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'.
[  357.260012][T16539] sch_tbf: burst 274 is lower than device lo mtu (1550) !
[  357.307580][ T6007] usb usb38-port1: unable to enumerate USB device
[  357.316480][T16541] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1626'.
[  357.380359][   T40] audit: type=1326 audit(1766559890.196:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.494691][T16541] xt_CT: No such helper "syz1"
[  357.737173][   T40] audit: type=1326 audit(1766559890.196:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.745193][   T40] audit: type=1326 audit(1766559890.196:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.754337][   T40] audit: type=1326 audit(1766559890.196:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.762280][   T40] audit: type=1326 audit(1766559890.196:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.770444][   T40] audit: type=1326 audit(1766559890.196:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.778422][   T40] audit: type=1326 audit(1766559890.196:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.785583][   T40] audit: type=1326 audit(1766559890.196:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.795727][   T40] audit: type=1326 audit(1766559890.196:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.805534][   T40] audit: type=1326 audit(1766559890.196:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16546 comm="syz.2.1628" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  357.984557][T16553] hub 8-0:1.0: USB hub found
[  357.987933][T16553] hub 8-0:1.0: 1 port detected
[  358.187042][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1629'.
[  358.556847][T16565] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  358.836190][T16591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1637'.
[  360.357332][ T6015] usb 42-1: device descriptor read/8, error -110
[  360.467337][ T6015] usb usb42-port1: unable to enumerate USB device
[  360.492426][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'.
[  360.559816][T16593] overlayfs: overlapping lowerdir path
[  360.586827][T16593] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  360.591491][T16593] overlayfs: overlapping lowerdir path
[  360.877138][ T6007] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  361.284247][T16627] ieee802154 phy1 wpan1: encryption failed: -90
[  361.367661][T16630] wg2 speed is unknown, defaulting to 1000
[  361.578436][ T6007] usb 10-1: config 1 has an invalid interface number: 7 but max is 0
[  361.581057][ T6007] usb 10-1: config 1 has no interface number 0
[  361.583246][ T6007] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  361.586396][ T6007] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16
[  361.590155][ T6007] usb 10-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  361.596329][ T6007] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  361.600049][ T6007] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.602583][ T6007] usb 10-1: Product: syz
[  361.604035][ T6007] usb 10-1: Manufacturer: syz
[  361.605525][ T6007] usb 10-1: SerialNumber: syz
[  361.610514][T16590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  361.612987][T16590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  361.616463][ T6007] usb 10-1: Expected 3 endpoints, found: 2
[  361.620284][ T6032] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  361.622333][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1648'.
[  361.658981][T16643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1648'.
[  361.663427][T16643] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1648'.
[  361.767766][ T6032] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  361.772076][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.776158][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.782380][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.786301][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.791105][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.796372][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.807702][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.811650][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.817369][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.822762][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.827357][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.832615][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.859533][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.862807][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.867637][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.872035][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.874988][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.878886][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.889602][ T6007] usb 10-1: USB disconnect, device number 3
[  361.900452][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.904312][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.918589][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.944999][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  361.948210][ T6032] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 197, changing to 11
[  361.951867][ T6032] usb 9-1: config 0 interface 0 has no altsetting 0
[  361.955782][ T6032] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  361.959363][ T6032] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  361.962167][ T6032] usb 9-1: Product: syz
[  361.963869][ T6032] usb 9-1: Manufacturer: syz
[  361.965699][ T6032] usb 9-1: SerialNumber: syz
[  361.968017][T16666] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  361.969941][ T6032] usb 9-1: config 0 descriptor??
[  361.970455][T16666] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  361.986456][T16666] vhci_hcd vhci_hcd.0: Device attached
[  362.059981][ T6032] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  362.144172][T16630] lo speed is unknown, defaulting to 1000
[  362.248713][ T6032] usb 38-1: SetAddress Request (55) to port 0
[  362.252440][ T6032] usb 38-1: new SuperSpeed USB device number 55 using vhci_hcd
[  362.298796][T16696] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1654'.
[  362.352304][    C3] usb 9-1: yurex_control_callback - control failed: -71
[  362.352463][ T6007] usb 9-1: USB disconnect, device number 8
[  362.367200][ T6007] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  362.371549][T16703] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19
[  362.532880][T16718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  362.537788][T16718] block device autoloading is deprecated and will be removed.
[  362.657291][T16725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1657'.
[  362.662988][T16727] netlink: 'syz.5.1658': attribute type 1 has an invalid length.
[  362.755072][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1660'.
[  362.759507][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1660'.
[  362.958202][T16667] vhci_hcd: connection reset by peer
[  362.960919][ T3683] vhci_hcd vhci_hcd.0: stop threads
[  362.962798][ T3683] vhci_hcd vhci_hcd.0: release socket
[  362.964936][ T3683] vhci_hcd vhci_hcd.0: disconnect device
[  363.578055][T16755] FAULT_INJECTION: forcing a failure.
[  363.578055][T16755] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.583670][T16755] CPU: 3 UID: 0 PID: 16755 Comm: syz.2.1665 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  363.583696][T16755] Tainted: [L]=SOFTLOCKUP
[  363.583701][T16755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  363.583712][T16755] Call Trace:
[  363.583718][T16755]  <TASK>
[  363.583725][T16755]  dump_stack_lvl+0x16c/0x1f0
[  363.583754][T16755]  should_fail_ex+0x512/0x640
[  363.583775][T16755]  _copy_from_user+0x2e/0xd0
[  363.583796][T16755]  compat_copy_ebt_replace_from_user+0x353/0x420
[  363.583820][T16755]  ? kernel_text_address+0xb0/0x100
[  363.583842][T16755]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  363.583863][T16755]  ? __lock_acquire+0x436/0x2890
[  363.583889][T16755]  ? __lock_acquire+0x436/0x2890
[  363.583908][T16755]  compat_do_replace+0xd4/0x7f0
[  363.583928][T16755]  ? __pfx_compat_do_replace+0x10/0x10
[  363.583949][T16755]  ? __pfx___might_resched+0x10/0x10
[  363.583986][T16755]  ? bpf_lsm_capable+0x9/0x10
[  363.584008][T16755]  ? security_capable+0x7e/0x260
[  363.584036][T16755]  do_ebt_set_ctl+0x362/0x460
[  363.584053][T16755]  ? sockopt_release_sock+0x52/0x60
[  363.584075][T16755]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  363.584094][T16755]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  363.584125][T16755]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  363.584157][T16755]  nf_setsockopt+0x8d/0xf0
[  363.584184][T16755]  ip_setsockopt+0xcb/0xf0
[  363.584204][T16755]  raw_setsockopt+0xb7/0x2a0
[  363.584225][T16755]  ? __pfx_raw_setsockopt+0x10/0x10
[  363.584245][T16755]  ? sock_common_setsockopt+0x2e/0xf0
[  363.584273][T16755]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  363.584302][T16755]  do_sock_setsockopt+0xf3/0x1d0
[  363.584328][T16755]  __sys_setsockopt+0x120/0x1a0
[  363.584351][T16755]  __ia32_sys_setsockopt+0xbc/0x160
[  363.584369][T16755]  ? __do_fast_syscall_32+0x9a/0x680
[  363.584394][T16755]  ? lockdep_hardirqs_on+0x7c/0x110
[  363.584421][T16755]  __do_fast_syscall_32+0xe8/0x680
[  363.584451][T16755]  do_fast_syscall_32+0x32/0x80
[  363.584466][T16755]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  363.584486][T16755] RIP: 0023:0xf70bd579
[  363.584499][T16755] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  363.584514][T16755] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  363.584530][T16755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  363.584540][T16755] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  363.584550][T16755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  363.584561][T16755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  363.584571][T16755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  363.584597][T16755]  </TASK>
[  363.972996][T16760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  363.975164][T16760] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  363.989488][T16760] vhci_hcd vhci_hcd.0: Device attached
[  364.116009][T16766] wg2 speed is unknown, defaulting to 1000
[  364.293034][T16766] lo speed is unknown, defaulting to 1000
[  364.354870][ T6135] usb 42-1: SetAddress Request (30) to port 0
[  364.358044][ T6135] usb 42-1: new SuperSpeed USB device number 30 using vhci_hcd
[  364.593794][T16761] vhci_hcd: connection reset by peer
[  364.596567][ T3683] vhci_hcd vhci_hcd.2: stop threads
[  364.599074][ T3683] vhci_hcd vhci_hcd.2: release socket
[  364.600985][ T3683] vhci_hcd vhci_hcd.2: disconnect device
[  364.659333][T16797] random: crng reseeded on system resumption
[  365.020538][T16813] comedi comedi2: pcl818: I/O port conflict (0x8001,16)
[  365.294513][T16825] FAULT_INJECTION: forcing a failure.
[  365.294513][T16825] name failslab, interval 1, probability 0, space 0, times 1
[  365.299537][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.5.1674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  365.299555][T16825] Tainted: [L]=SOFTLOCKUP
[  365.299559][T16825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  365.299566][T16825] Call Trace:
[  365.299594][T16825]  <TASK>
[  365.299600][T16825]  dump_stack_lvl+0x16c/0x1f0
[  365.299624][T16825]  should_fail_ex+0x512/0x640
[  365.299637][T16825]  ? __kmalloc_cache_node_noprof+0x62/0x830
[  365.299655][T16825]  should_failslab+0xc2/0x120
[  365.299672][T16825]  __kmalloc_cache_node_noprof+0x83/0x830
[  365.299688][T16825]  ? __get_vm_area_node+0x101/0x330
[  365.299708][T16825]  ? __get_vm_area_node+0x101/0x330
[  365.299724][T16825]  __get_vm_area_node+0x101/0x330
[  365.299742][T16825]  __vmalloc_node_range_noprof+0x247/0x16b0
[  365.299754][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.299767][T16825]  ? find_held_lock+0x2b/0x80
[  365.299781][T16825]  ? __might_fault+0xe3/0x190
[  365.299793][T16825]  ? __might_fault+0x13b/0x190
[  365.299807][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.299826][T16825]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.299838][T16825]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  365.299851][T16825]  ? bpf_trace_run2+0x2ab/0x5c0
[  365.299871][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.299883][T16825]  __vmalloc_node_noprof+0xad/0xf0
[  365.299893][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.299906][T16825]  compat_do_replace+0x1af/0x7f0
[  365.299917][T16825]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  365.299930][T16825]  ? __pfx_compat_do_replace+0x10/0x10
[  365.299943][T16825]  ? __pfx___might_resched+0x10/0x10
[  365.299964][T16825]  ? bpf_lsm_capable+0x9/0x10
[  365.299979][T16825]  ? security_capable+0x7e/0x260
[  365.300011][T16825]  do_ebt_set_ctl+0x362/0x460
[  365.300023][T16825]  ? sockopt_release_sock+0x52/0x60
[  365.300039][T16825]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  365.300052][T16825]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  365.300069][T16825]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  365.300089][T16825]  nf_setsockopt+0x8d/0xf0
[  365.300108][T16825]  ip_setsockopt+0xcb/0xf0
[  365.300121][T16825]  raw_setsockopt+0xb7/0x2a0
[  365.300135][T16825]  ? __pfx_raw_setsockopt+0x10/0x10
[  365.300149][T16825]  ? sock_common_setsockopt+0x2e/0xf0
[  365.300165][T16825]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  365.300183][T16825]  do_sock_setsockopt+0xf3/0x1d0
[  365.300201][T16825]  __sys_setsockopt+0x120/0x1a0
[  365.300216][T16825]  __ia32_sys_setsockopt+0xbc/0x160
[  365.300229][T16825]  ? __do_fast_syscall_32+0x9a/0x680
[  365.300246][T16825]  ? lockdep_hardirqs_on+0x7c/0x110
[  365.300262][T16825]  __do_fast_syscall_32+0xe8/0x680
[  365.300281][T16825]  do_fast_syscall_32+0x32/0x80
[  365.300291][T16825]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  365.300304][T16825] RIP: 0023:0xf7f85579
[  365.300313][T16825] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  365.300324][T16825] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  365.300335][T16825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  365.300342][T16825] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  365.300348][T16825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  365.300354][T16825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  365.300361][T16825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  365.300374][T16825]  </TASK>
[  365.300588][T16825] syz.5.1674: vmalloc error: size 128, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null)
[  365.371804][   T40] kauditd_printk_skb: 276 callbacks suppressed
[  365.371816][   T40] audit: type=1326 audit(1766559898.186:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16824 comm="syz.2.1675" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bd579 code=0x0
[  365.389444][T16825] ,cpuset=/,mems_allowed=0-1
[  365.434481][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.5.1674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  365.434498][T16825] Tainted: [L]=SOFTLOCKUP
[  365.434502][T16825] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  365.434509][T16825] Call Trace:
[  365.434513][T16825]  <TASK>
[  365.434518][T16825]  dump_stack_lvl+0x16c/0x1f0
[  365.434541][T16825]  warn_alloc+0x248/0x3a0
[  365.434556][T16825]  ? __pfx_warn_alloc+0x10/0x10
[  365.434568][T16825]  ? trace_kmalloc+0x2b/0xb0
[  365.434585][T16825]  ? __get_vm_area_node+0x101/0x330
[  365.434604][T16825]  ? __kasan_kmalloc+0x8a/0xb0
[  365.434619][T16825]  ? __get_vm_area_node+0x208/0x330
[  365.434639][T16825]  __vmalloc_node_range_noprof+0xbe0/0x16b0
[  365.434650][T16825]  ? find_held_lock+0x2b/0x80
[  365.434666][T16825]  ? __might_fault+0xe3/0x190
[  365.434678][T16825]  ? __might_fault+0x13b/0x190
[  365.434691][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.434707][T16825]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  365.434719][T16825]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  365.434732][T16825]  ? bpf_trace_run2+0x2ab/0x5c0
[  365.434751][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.434762][T16825]  __vmalloc_node_noprof+0xad/0xf0
[  365.434773][T16825]  ? compat_do_replace+0x1af/0x7f0
[  365.434791][T16825]  compat_do_replace+0x1af/0x7f0
[  365.434802][T16825]  ? __pfx___bpf_trace_contention_end+0x10/0x10
[  365.434814][T16825]  ? __pfx_compat_do_replace+0x10/0x10
[  365.434828][T16825]  ? __pfx___might_resched+0x10/0x10
[  365.434848][T16825]  ? bpf_lsm_capable+0x9/0x10
[  365.434863][T16825]  ? security_capable+0x7e/0x260
[  365.434882][T16825]  do_ebt_set_ctl+0x362/0x460
[  365.434894][T16825]  ? sockopt_release_sock+0x52/0x60
[  365.434909][T16825]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  365.434922][T16825]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  365.434947][T16825]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  365.434977][T16825]  nf_setsockopt+0x8d/0xf0
[  365.435005][T16825]  ip_setsockopt+0xcb/0xf0
[  365.435026][T16825]  raw_setsockopt+0xb7/0x2a0
[  365.435048][T16825]  ? __pfx_raw_setsockopt+0x10/0x10
[  365.435070][T16825]  ? sock_common_setsockopt+0x2e/0xf0
[  365.435097][T16825]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  365.435124][T16825]  do_sock_setsockopt+0xf3/0x1d0
[  365.435153][T16825]  __sys_setsockopt+0x120/0x1a0
[  365.435180][T16825]  __ia32_sys_setsockopt+0xbc/0x160
[  365.435202][T16825]  ? __do_fast_syscall_32+0x9a/0x680
[  365.435230][T16825]  ? lockdep_hardirqs_on+0x7c/0x110
[  365.435257][T16825]  __do_fast_syscall_32+0xe8/0x680
[  365.435287][T16825]  do_fast_syscall_32+0x32/0x80
[  365.435304][T16825]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  365.435327][T16825] RIP: 0023:0xf7f85579
[  365.435342][T16825] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  365.435359][T16825] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  365.435376][T16825] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  365.435386][T16825] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  365.435397][T16825] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  365.435407][T16825] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  365.435418][T16825] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  365.435443][T16825]  </TASK>
[  365.435450][T16825] Mem-Info:
[  365.554183][T16825] active_anon:1254 inactive_anon:1014 isolated_anon:0
[  365.554183][T16825]  active_file:1919 inactive_file:7156 isolated_file:0
[  365.554183][T16825]  unevictable:1768 dirty:227 writeback:0
[  365.554183][T16825]  slab_reclaimable:6317 slab_unreclaimable:58848
[  365.554183][T16825]  mapped:32263 shmem:1864 pagetables:1600
[  365.554183][T16825]  sec_pagetables:338 bounce:0
[  365.554183][T16825]  kernel_misc_reclaimable:0
[  365.554183][T16825]  free:41611 free_pcp:12947 free_cma:0
[  365.568897][T16825] Node 0 active_anon:252kB inactive_anon:356kB active_file:12kB inactive_file:140kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9748kB pagetables:1580kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB
[  365.582378][T16825] Node 1 active_anon:4760kB inactive_anon:3700kB active_file:7664kB inactive_file:28484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:129040kB dirty:904kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5208kB pagetables:4724kB sec_pagetables:176kB all_unreclaimable? no Balloon:0kB
[  365.592574][T16825] Node 0 DMA free:2104kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:152kB local_pcp:132kB free_cma:0kB
[  365.602553][T16825] lowmem_reserve[]: 0 289 289 289 289
[  365.604426][T16825] Node 0 DMA32 free:18532kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:252kB inactive_anon:348kB active_file:12kB inactive_file:140kB unevictable:3536kB writepending:4kB zspages:3300kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:6784kB local_pcp:3496kB free_cma:0kB
[  365.615907][T16825] lowmem_reserve[]: 0 0 0 0 0
[  365.618909][T16825] Node 1 DMA32 free:145808kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4760kB inactive_anon:3700kB active_file:7664kB inactive_file:28484kB unevictable:3536kB writepending:904kB zspages:3304kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:45252kB local_pcp:22564kB free_cma:0kB
[  365.633264][T16825] lowmem_reserve[]: 0 0 0 0 0
[  365.635376][T16825] Node 0 DMA: 18*4kB (U) 14*8kB (UM) 8*16kB (U) 10*32kB (UM) 1*64kB (M) 1*128kB (M) 1*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2104kB
[  365.644804][T16825] Node 0 DMA32: 409*4kB (UE) 418*8kB (UME) 167*16kB (UM) 28*32kB (M) 40*64kB (UM) 32*128kB (UM) 11*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18532kB
[  365.652442][T16825] Node 1 DMA32: 3040*4kB (UME) 1727*8kB (UME) 654*16kB (UME) 101*32kB (UME) 55*64kB (UME) 45*128kB (UME) 26*256kB (UME) 116*512kB (UM) 24*1024kB (UM) 3*2048kB (UM) 0*4096kB = 145720kB
[  365.660525][T16825] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.664659][T16825] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  365.668827][T16825] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  365.672466][T16825] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  365.675971][T16825] 12043 total pagecache pages
[  365.677583][T16825] 1108 pages in swap cache
[  365.679050][T16825] Free swap  = 95292kB
[  365.680551][T16825] Total swap = 124996kB
[  365.682138][T16825] 524155 pages RAM
[  365.683370][T16825] 0 pages HighMem/MovableOnly
[  365.685080][T16825] 209059 pages reserved
[  365.686448][T16825] 0 pages cma reserved
[  365.694174][T16807] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  365.698207][T16807] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  365.718377][T16807] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  365.769797][T16838] 9pnet_fd: Insufficient options for proto=fd
[  366.927308][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  367.317115][ T6032] usb 38-1: device descriptor read/8, error -110
[  367.466363][T16873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  367.468971][T16873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  367.473488][T16873] vhci_hcd vhci_hcd.0: Device attached
[  367.476818][T16877] FAULT_INJECTION: forcing a failure.
[  367.476818][T16877] name failslab, interval 1, probability 0, space 0, times 0
[  367.481381][T16877] CPU: 2 UID: 0 PID: 16877 Comm: syz.4.1684 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  367.481406][T16877] Tainted: [L]=SOFTLOCKUP
[  367.481412][T16877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  367.481421][T16877] Call Trace:
[  367.481427][T16877]  <TASK>
[  367.481434][T16877]  dump_stack_lvl+0x16c/0x1f0
[  367.481463][T16877]  should_fail_ex+0x512/0x640
[  367.481482][T16877]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  367.481508][T16877]  should_failslab+0xc2/0x120
[  367.481530][T16877]  kmem_cache_alloc_node_noprof+0x86/0x800
[  367.481544][T16877]  ? alloc_vmap_area+0x66f/0x2a50
[  367.481562][T16877]  ? alloc_vmap_area+0x66f/0x2a50
[  367.481577][T16877]  alloc_vmap_area+0x66f/0x2a50
[  367.481604][T16877]  ? __pfx_alloc_vmap_area+0x10/0x10
[  367.481623][T16877]  __get_vm_area_node+0x1ca/0x330
[  367.481648][T16877]  __vmalloc_node_range_noprof+0x247/0x16b0
[  367.481665][T16877]  ? compat_do_replace+0x1af/0x7f0
[  367.481686][T16877]  ? find_held_lock+0x2b/0x80
[  367.481709][T16877]  ? __might_fault+0xe3/0x190
[  367.481728][T16877]  ? __might_fault+0x13b/0x190
[  367.481749][T16877]  ? compat_do_replace+0x1af/0x7f0
[  367.481768][T16877]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  367.481779][T16877]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  367.481797][T16877]  ? compat_do_replace+0x1af/0x7f0
[  367.481807][T16877]  __vmalloc_node_noprof+0xad/0xf0
[  367.481818][T16877]  ? compat_do_replace+0x1af/0x7f0
[  367.481831][T16877]  compat_do_replace+0x1af/0x7f0
[  367.481843][T16877]  ? __pfx_compat_do_replace+0x10/0x10
[  367.481858][T16877]  ? __pfx___might_resched+0x10/0x10
[  367.481880][T16877]  ? bpf_lsm_capable+0x9/0x10
[  367.481894][T16877]  ? security_capable+0x7e/0x260
[  367.481913][T16877]  do_ebt_set_ctl+0x362/0x460
[  367.481925][T16877]  ? sockopt_release_sock+0x52/0x60
[  367.481940][T16877]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  367.481953][T16877]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  367.481969][T16877]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  367.481990][T16877]  nf_setsockopt+0x8d/0xf0
[  367.482008][T16877]  ip_setsockopt+0xcb/0xf0
[  367.482021][T16877]  raw_setsockopt+0xb7/0x2a0
[  367.482034][T16877]  ? __pfx_raw_setsockopt+0x10/0x10
[  367.482048][T16877]  ? sock_common_setsockopt+0x2e/0xf0
[  367.482064][T16877]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  367.482081][T16877]  do_sock_setsockopt+0xf3/0x1d0
[  367.482099][T16877]  __sys_setsockopt+0x120/0x1a0
[  367.482115][T16877]  __ia32_sys_setsockopt+0xbc/0x160
[  367.482127][T16877]  ? __do_fast_syscall_32+0x9a/0x680
[  367.482145][T16877]  ? lockdep_hardirqs_on+0x7c/0x110
[  367.482161][T16877]  __do_fast_syscall_32+0xe8/0x680
[  367.482180][T16877]  do_fast_syscall_32+0x32/0x80
[  367.482190][T16877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  367.482204][T16877] RIP: 0023:0xf7fe4579
[  367.482213][T16877] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  367.482223][T16877] RSP: 002b:00000000f54d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  367.482234][T16877] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  367.482241][T16877] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  367.482247][T16877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  367.482254][T16877] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  367.482260][T16877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  367.482273][T16877]  </TASK>
[  367.654894][T16879] batman_adv: batadv0: Adding interface: dummy0
[  367.657053][T16879] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.665102][T16879] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  367.718440][ T6032] usb usb38-port1: attempt power cycle
[  367.811090][ T5947] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  367.819583][T16874] vhci_hcd: connection closed
[  367.819869][ T4600] vhci_hcd vhci_hcd.2: stop threads
[  367.824463][ T4600] vhci_hcd vhci_hcd.2: release socket
[  367.827386][ T4600] vhci_hcd vhci_hcd.2: disconnect device
[  367.961756][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1688'.
[  367.964792][T16886] lo: left allmulticast mode
[  367.970221][T16886] tunl0: left allmulticast mode
[  367.972841][T16886] gre0: left allmulticast mode
[  367.975729][T16886] gretap0: left allmulticast mode
[  367.981078][T16886] ip_vti0: left allmulticast mode
[  367.983341][T16886] ip6_vti0: left allmulticast mode
[  367.985728][T16886] sit0: left allmulticast mode
[  367.996383][T16886] ip6tnl0: left allmulticast mode
[  367.999215][T16886] ip6gre0: left allmulticast mode
[  368.001594][T16886] syz_tun: left allmulticast mode
[  368.012038][T16886] ip6gretap0: left allmulticast mode
[  368.016771][T16886] bridge0: left allmulticast mode
[  368.019479][T16886] bond0: left allmulticast mode
[  368.021126][T16886] bond_slave_1: left allmulticast mode
[  368.023895][T16886] 8021q: adding VLAN 0 to HW filter on device bond0
[  368.026472][T16886] team0: left allmulticast mode
[  368.028917][T16886] 8021q: adding VLAN 0 to HW filter on device team0
[  368.031926][T16886] dummy0: left allmulticast mode
[  368.034419][T16886] batman_adv: batadv0: Interface activated: dummy0
[  368.037796][T16886] nlmon0: left allmulticast mode
[  368.041897][T16886] caif0: left allmulticast mode
[  368.044117][T16886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.116695][T16902] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  368.118995][T16902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  368.123056][T16902] vhci_hcd vhci_hcd.0: Device attached
[  368.152985][T16902] tmpfs: Unknown parameter ''
[  368.266113][   T40] audit: type=1326 audit(1766559901.076:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.273838][   T40] audit: type=1326 audit(1766559901.076:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.281367][   T40] audit: type=1326 audit(1766559901.076:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.288499][   T40] audit: type=1326 audit(1766559901.076:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.297295][   T40] audit: type=1326 audit(1766559901.076:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.299192][ T6032] usb usb38-port1: unable to enumerate USB device
[  368.306726][   T40] audit: type=1326 audit(1766559901.086:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.318767][   T40] audit: type=1326 audit(1766559901.076:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.328369][   T40] audit: type=1326 audit(1766559901.086:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.337996][   T40] audit: type=1326 audit(1766559901.086:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.0.1692" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f66579 code=0x7ffc0000
[  368.387130][ T6007] usb 48-1: SetAddress Request (6) to port 0
[  368.390094][ T6007] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd
[  368.397213][ T6165] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  368.547859][ T6165] usb 10-1: Using ep0 maxpacket: 8
[  368.551830][ T6165] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  368.556613][ T6165] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  368.560865][ T6165] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.570769][ T6165] usb 10-1: config 0 descriptor??
[  368.883790][ T6165] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  369.004115][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  369.397108][ T6135] usb 42-1: device descriptor read/8, error -110
[  369.797570][ T6135] usb usb42-port1: attempt power cycle
[  370.104900][T16948] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  370.107224][T16948] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  370.110829][T16948] vhci_hcd vhci_hcd.0: Device attached
[  370.267612][ T6165] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  370.437099][ T6165] usb 9-1: Using ep0 maxpacket: 32
[  370.461323][ T6165] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  370.465976][ T6165] usb 9-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  370.488929][ T6165] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  370.492968][ T6165] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.496114][ T6165] usb 9-1: Product: syz
[  370.498047][ T6165] usb 9-1: Manufacturer: syz
[  370.500242][ T6165] usb 9-1: SerialNumber: syz
[  370.562818][ T6165] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  370.566473][ T6165] imon 9-1:155.0: unable to initialize intf0, err -19
[  370.569883][ T6165] imon:imon_probe: failed to initialize context!
[  370.572795][ T6165] imon 9-1:155.0: unable to register, err -19
[  370.674973][T16949] vhci_hcd: connection closed
[  370.675692][ T3683] vhci_hcd vhci_hcd.2: stop threads
[  370.680266][ T3683] vhci_hcd vhci_hcd.2: release socket
[  370.682149][ T3683] vhci_hcd vhci_hcd.2: disconnect device
[  370.717337][ T6135] usb 42-1: enqueue for inactive port 0
[  370.888155][ T5982] usb 10-1: USB disconnect, device number 4
[  370.893871][T16904] vhci_hcd: connection reset by peer
[  370.899337][   T46] vhci_hcd vhci_hcd.5: stop threads
[  370.901294][   T46] vhci_hcd vhci_hcd.5: release socket
[  370.906433][   T46] vhci_hcd vhci_hcd.5: disconnect device
[  370.987253][T16965] Cannot find add_set index 2 as target
[  371.077112][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  371.363368][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1700'.
[  371.860744][T17039] ebtables: wrong size: *len 264, entries_size 144, replsz 144
[  372.080768][T17042] fuse: Unknown parameter 'group_i00000000000000000000'
[  372.149662][ T6135] usb usb42-port1: unable to enumerate USB device
[  372.263157][T17048] bridge_slave_0: left allmulticast mode
[  372.265085][T17048] bridge_slave_0: left promiscuous mode
[  372.267483][T17048] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.273434][T17048] bridge_slave_1: left allmulticast mode
[  372.275306][T17048] bridge_slave_1: left promiscuous mode
[  372.282064][T17048] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.289009][T17048] bond0: (slave bond_slave_0): Releasing backup interface
[  372.294197][T17048] bond0: (slave bond_slave_1): Releasing backup interface
[  372.301231][T17048] team0: Port device team_slave_0 removed
[  372.305955][T17051] netlink: 'syz.5.1706': attribute type 10 has an invalid length.
[  372.311221][T17048] team0: Port device team_slave_1 removed
[  372.311401][T17051] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1706'.
[  372.314313][T17048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.319984][T17048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.326389][T17048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.329784][T17048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.335719][T17048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  372.346754][T17051] team0: entered promiscuous mode
[  372.350779][T17051] bridge0: port 1(team0) entered blocking state
[  372.353298][T17051] bridge0: port 1(team0) entered disabled state
[  372.355586][T17051] team0: entered allmulticast mode
[  372.373158][T17048] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  372.376583][T17048] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock
[  372.380346][T17048] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  372.383638][T17048] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock
[  372.987644][ T6165] usb 9-1: USB disconnect, device number 9
[  373.043554][T17062] Unsupported ieee802154 address type: 0
[  373.186113][T17072] wg1: entered promiscuous mode
[  373.188129][T17072] wg1: entered allmulticast mode
[  373.477601][ T6007] usb 48-1: device descriptor read/8, error -110
[  373.760569][T17110] FAULT_INJECTION: forcing a failure.
[  373.760569][T17110] name failslab, interval 1, probability 0, space 0, times 0
[  373.764777][T17110] CPU: 0 UID: 0 PID: 17110 Comm: syz.2.1724 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  373.764799][T17110] Tainted: [L]=SOFTLOCKUP
[  373.764803][T17110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  373.764810][T17110] Call Trace:
[  373.764814][T17110]  <TASK>
[  373.764819][T17110]  dump_stack_lvl+0x16c/0x1f0
[  373.764839][T17110]  should_fail_ex+0x512/0x640
[  373.764852][T17110]  ? __kmalloc_cache_node_noprof+0x62/0x830
[  373.764870][T17110]  should_failslab+0xc2/0x120
[  373.764887][T17110]  __kmalloc_cache_node_noprof+0x83/0x830
[  373.764901][T17110]  ? __pfx_vmap_small_pages_range_noflush+0x10/0x10
[  373.764919][T17110]  ? __get_vm_area_node+0x101/0x330
[  373.764938][T17110]  ? __get_vm_area_node+0x101/0x330
[  373.764954][T17110]  __get_vm_area_node+0x101/0x330
[  373.764973][T17110]  __vmalloc_node_range_noprof+0x247/0x16b0
[  373.764984][T17110]  ? compat_do_replace+0x23c/0x7f0
[  373.765001][T17110]  ? compat_do_replace+0x23c/0x7f0
[  373.765015][T17110]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  373.765027][T17110]  ? __pfx_compat_copy_ebt_replace_from_user+0x10/0x10
[  373.765044][T17110]  ? compat_do_replace+0x23c/0x7f0
[  373.765055][T17110]  __vmalloc_node_noprof+0xad/0xf0
[  373.765066][T17110]  ? compat_do_replace+0x23c/0x7f0
[  373.765079][T17110]  compat_do_replace+0x23c/0x7f0
[  373.765092][T17110]  ? __pfx_compat_do_replace+0x10/0x10
[  373.765105][T17110]  ? __pfx___might_resched+0x10/0x10
[  373.765126][T17110]  ? bpf_lsm_capable+0x9/0x10
[  373.765141][T17110]  ? security_capable+0x7e/0x260
[  373.765161][T17110]  do_ebt_set_ctl+0x362/0x460
[  373.765172][T17110]  ? sockopt_release_sock+0x52/0x60
[  373.765187][T17110]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  373.765200][T17110]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  373.765217][T17110]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  373.765236][T17110]  nf_setsockopt+0x8d/0xf0
[  373.765255][T17110]  ip_setsockopt+0xcb/0xf0
[  373.765268][T17110]  raw_setsockopt+0xb7/0x2a0
[  373.765294][T17110]  ? __pfx_raw_setsockopt+0x10/0x10
[  373.765309][T17110]  ? sock_common_setsockopt+0x2e/0xf0
[  373.765325][T17110]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  373.765342][T17110]  do_sock_setsockopt+0xf3/0x1d0
[  373.765360][T17110]  __sys_setsockopt+0x120/0x1a0
[  373.765376][T17110]  __ia32_sys_setsockopt+0xbc/0x160
[  373.765389][T17110]  ? __do_fast_syscall_32+0x9a/0x680
[  373.765406][T17110]  ? lockdep_hardirqs_on+0x7c/0x110
[  373.765422][T17110]  __do_fast_syscall_32+0xe8/0x680
[  373.765441][T17110]  do_fast_syscall_32+0x32/0x80
[  373.765451][T17110]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  373.765464][T17110] RIP: 0023:0xf70bd579
[  373.765473][T17110] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  373.765484][T17110] RSP: 002b:00000000f54ad55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  373.765495][T17110] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  373.765502][T17110] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  373.765508][T17110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  373.765515][T17110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  373.765521][T17110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  373.765535][T17110]  </TASK>
[  373.867966][ T6007] usb usb48-port1: attempt power cycle
[  373.936191][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'.
[  373.937068][ T6015] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  374.110418][ T6015] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  374.113144][ T6015] usb 9-1: config 1 has no interface number 0
[  374.115259][ T6015] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16
[  374.118643][ T6015] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 16
[  374.121995][ T6015] usb 9-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  374.128042][ T6015] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  374.131092][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.133784][ T6015] usb 9-1: Product: syz
[  374.135667][ T6015] usb 9-1: Manufacturer: syz
[  374.139913][ T6015] usb 9-1: SerialNumber: syz
[  374.240178][T17088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  374.242653][T17088] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  374.265531][ T6015] usb 9-1: Expected 3 endpoints, found: 2
[  374.458078][ T6007] usb usb48-port1: unable to enumerate USB device
[  375.127078][ T6135] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  375.307117][ T6135] usb 10-1: Using ep0 maxpacket: 32
[  375.310940][ T6135] usb 10-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  375.315267][ T6135] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  375.340489][ T6135] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  375.343658][ T6135] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.346507][ T6135] usb 10-1: Product: syz
[  375.348333][ T6135] usb 10-1: Manufacturer: syz
[  375.350049][ T6135] usb 10-1: SerialNumber: syz
[  375.353351][T17132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13)
[  375.354223][ T6135] usb 10-1: config 0 descriptor??
[  375.356214][T17132] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  375.363239][T17132] vhci_hcd vhci_hcd.0: Device attached
[  375.481282][T17137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  375.483640][T17137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  375.498858][T17133] vhci_hcd: connection closed
[  375.499031][T14075] vhci_hcd vhci_hcd.2: stop threads
[  375.499414][T17137] vhci_hcd vhci_hcd.0: Device attached
[  375.500792][T14075] vhci_hcd vhci_hcd.2: release socket
[  375.502578][T17111] ALSA: mixer_oss: invalid OSS volume ''
[  375.504392][T14075] vhci_hcd vhci_hcd.2: disconnect device
[  375.583244][ T6165] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  375.777401][ T5982] usb 38-1: SetAddress Request (59) to port 0
[  375.779742][ T5982] usb 38-1: new SuperSpeed USB device number 59 using vhci_hcd
[  376.012079][T17138] vhci_hcd: connection reset by peer
[  376.015102][ T4600] vhci_hcd vhci_hcd.0: stop threads
[  376.017719][ T4600] vhci_hcd vhci_hcd.0: release socket
[  376.019705][ T4600] vhci_hcd vhci_hcd.0: disconnect device
[  376.267513][   T29] usb 9-1: USB disconnect, device number 10
[  376.625185][T17161] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  377.679122][T17166] bond0: entered promiscuous mode
[  377.680819][T17166] bond0: entered allmulticast mode
[  377.683041][T17166] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.695901][T17166] x_tables: duplicate underflow at hook 1
[  377.698454][T17166] hub 8-0:1.0: USB hub found
[  377.700265][T17166] hub 8-0:1.0: 1 port detected
[  377.729154][T14079] bond4: (slave macvlan2): speed changed to 0 on port 1
[  377.801423][T14079] bond4: (slave macvlan2): link status definitely down, disabling slave
[  377.861875][ T6135] usb 10-1: USB disconnect, device number 5
[  377.977075][T17179] netlink: 'syz.5.1735': attribute type 3 has an invalid length.
[  377.981882][T17179] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1735'.
[  378.054110][T17178] syz.5.1735 (17178): drop_caches: 1
[  378.060992][T17179] syz.5.1735 (17179): drop_caches: 1
[  378.076770][T17178] syz.5.1735 (17178): drop_caches: 1
[  378.589496][T17215] siw: device registration error -23
[  380.124399][T17252] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  380.262594][T17256] comedi comedi2: pcl818: I/O port conflict (0x8001,16)
[  380.837164][ T5982] usb 38-1: device descriptor read/8, error -110
[  381.134211][T17263] pim6reg1: entered promiscuous mode
[  381.136425][T17263] pim6reg1: entered allmulticast mode
[  381.142954][T17263] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1750'.
[  381.469916][ T5982] usb usb38-port1: attempt power cycle
[  381.969811][T17287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  381.972046][T17287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  381.974812][T17287] vhci_hcd vhci_hcd.0: Device attached
[  382.006293][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  382.046922][T17290] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  382.084734][T17290] CIFS mount error: No usable UNC path provided in device string!
[  382.084734][T17290] 
[  382.097120][T17290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  382.127131][ T5982] usb 38-1: SetAddress Request (62) to port 0
[  382.129908][ T5982] usb 38-1: new SuperSpeed USB device number 62 using vhci_hcd
[  382.350850][T17288] vhci_hcd: connection reset by peer
[  382.358068][ T3580] vhci_hcd vhci_hcd.0: stop threads
[  382.360494][ T3580] vhci_hcd vhci_hcd.0: release socket
[  382.363689][ T3580] vhci_hcd vhci_hcd.0: disconnect device
[  382.366596][T17303] Bluetooth: MGMT ver 1.23
[  382.472112][T17309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1754'.
[  382.503172][T17317] futex_wake_op: syz.4.1759 tries to shift op by -1; fix this program
[  382.727448][T17323] IPVS: Error connecting to the multicast addr
[  382.734913][T17323] fuse: Bad value for 'user_id'
[  382.736941][T17323] fuse: Bad value for 'user_id'
[  382.757696][ T6007] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  382.913990][ T6007] usb 10-1: config index 0 descriptor too short (expected 39, got 27)
[  382.927967][ T6007] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  382.938610][ T6007] usb 10-1: config 0 interface 0 has no altsetting 0
[  382.949088][ T6007] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  382.952294][ T6007] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  382.955118][ T6007] usb 10-1: Product: syz
[  382.956647][ T6007] usb 10-1: Manufacturer: syz
[  382.958596][ T6007] usb 10-1: SerialNumber: syz
[  382.968395][ T6007] usb 10-1: config 0 descriptor??
[  382.974683][ T6007] hub 10-1:0.0: bad descriptor, ignoring hub
[  382.977213][ T6007] hub 10-1:0.0: probe with driver hub failed with error -5
[  382.983069][ T6007] usb 10-1: selecting invalid altsetting 0
[  383.178464][ T1414] ieee802154 phy1 wpan1: encryption failed: -22
[  383.250407][T17340] binder: 17325:17340 ioctl 4018620d 0 returned -22
[  383.253985][T17340] binder: 17325:17340 ioctl c018620c 80000380 returned -1
[  384.565208][T17365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'.
[  385.114857][T17380] QAT: failed to copy from user.
[  385.566611][T17393] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  385.569618][T17393] tipc: Enabled bearer <eth:veth0_macvtap>, priority 0
[  385.579833][   T40] kauditd_printk_skb: 236 callbacks suppressed
[  385.579987][   T40] audit: type=1326 audit(1766560174.388:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.660620][   T40] audit: type=1326 audit(1766560174.388:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.670007][   T40] audit: type=1326 audit(1766560174.388:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.678303][   T40] audit: type=1326 audit(1766560174.388:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.685703][   T40] audit: type=1326 audit(1766560174.388:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.692821][   T40] audit: type=1326 audit(1766560174.388:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.699778][   T40] audit: type=1326 audit(1766560174.388:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.706813][   T40] audit: type=1326 audit(1766560174.388:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.713749][   T40] audit: type=1326 audit(1766560174.388:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.722662][   T40] audit: type=1326 audit(1766560174.388:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17392 comm="syz.2.1772" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  385.771032][ T6165] usb 10-1: USB disconnect, device number 6
[  385.995759][T17413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'.
[  386.098546][T17415] fuse: Bad value for 'user_id'
[  386.100354][T17415] fuse: Bad value for 'user_id'
[  386.351132][ T6135] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  387.020169][ T6015] IPVS: starting estimator thread 0...
[  387.111910][T17429] IPVS: using max 28 ests per chain, 67200 per kthread
[  387.342143][ T6135] usb 5-1: Using ep0 maxpacket: 8
[  387.346419][ T6135] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  387.349755][ T6135] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  387.354828][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  387.359721][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.365003][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  387.369765][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  387.374840][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  387.380733][ T6135] usb 5-1: config 168 interface 0 has no altsetting 0
[  387.385020][ T6135] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  387.388220][ T6135] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  387.391869][ T5982] usb 38-1: device descriptor read/8, error -110
[  387.396690][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  387.401562][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.406838][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  387.412659][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  387.419131][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  387.425310][ T6135] usb 5-1: config 168 interface 0 has no altsetting 0
[  387.429519][ T6135] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  387.434285][ T6135] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  387.439197][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  387.444185][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.449365][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  387.454358][ T6135] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  387.459272][ T6135] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  387.467480][ T6135] usb 5-1: config 168 interface 0 has no altsetting 0
[  387.474005][ T6135] usb 5-1: string descriptor 0 read error: -22
[  387.476997][ T6135] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  387.480988][ T6135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.498896][ T6135] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  387.513433][ T5982] usb usb38-port1: unable to enumerate USB device
[  387.642732][   T64] Bluetooth: hci4: command 0x1003 tx timeout
[  387.646132][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  387.745598][ T6165] usb 5-1: USB disconnect, device number 13
[  387.795765][T17460] loop7: detected capacity change from 0 to 16384
[  387.965935][T17415] batadv0: port 1(erspan1) entered blocking state
[  387.969340][T17415] batadv0: port 1(erspan1) entered disabled state
[  387.972157][T17415] erspan1: entered allmulticast mode
[  387.977414][T17415] erspan1: entered promiscuous mode
[  387.993497][T17415] x_tables: duplicate underflow at hook 1
[  388.151788][T17472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1781'.
[  388.279782][T17472] nbd: socks must be embedded in a SOCK_ITEM attr
[  389.646129][T17512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  389.648281][T17512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  389.651108][T17512] vhci_hcd vhci_hcd.0: Device attached
[  389.704807][T17514] ALSA: mixer_oss: invalid OSS volume ''
[  389.751735][T17514] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  389.753885][T17514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  389.756745][T17514] vhci_hcd vhci_hcd.0: Device attached
[  389.924697][ T6007] usb 42-1: SetAddress Request (34) to port 0
[  389.934611][ T6007] usb 42-1: new SuperSpeed USB device number 34 using vhci_hcd
[  389.945796][ T6032] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  390.015295][ T6032] usb 37-1: new low-speed USB device number 9 using vhci_hcd
[  390.030843][T17533] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  390.132168][T17525] vhci_hcd: connection reset by peer
[  390.137981][ T3683] vhci_hcd vhci_hcd.0: stop threads
[  390.140464][ T3683] vhci_hcd vhci_hcd.0: release socket
[  390.143067][ T3683] vhci_hcd vhci_hcd.0: disconnect device
[  390.290577][T17516] vhci_hcd: connection reset by peer
[  390.295364][ T3580] vhci_hcd vhci_hcd.2: stop threads
[  390.297568][ T3580] vhci_hcd vhci_hcd.2: release socket
[  390.304987][ T3580] vhci_hcd vhci_hcd.2: disconnect device
[  390.470433][ T3580] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.474734][ T3580] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.482783][ T3580] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  390.494586][ T3580] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  391.900318][T17582] ALSA: mixer_oss: invalid OSS volume ''
[  392.520175][T14034] Buffer I/O error on dev loop6, logical block 32767999, async page read
[  393.098466][T17628] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  393.183189][T17635] macsec0: entered promiscuous mode
[  393.185587][T17635] macsec0: left allmulticast mode
[  393.207420][T17638] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  393.209610][T17638] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  393.212642][T17638] vhci_hcd vhci_hcd.0: Device attached
[  393.267738][T17645] fuse: Unknown parameter 'rootlode'
[  393.320726][T17645] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa)
[  393.608795][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1812'.
[  394.033355][T17643] vhci_hcd: connection closed
[  394.033693][T14076] vhci_hcd vhci_hcd.2: stop threads
[  394.037064][T14076] vhci_hcd vhci_hcd.2: release socket
[  394.038997][T14076] vhci_hcd vhci_hcd.2: disconnect device
[  394.232449][T17655] netlink: 'syz.4.1814': attribute type 1 has an invalid length.
[  394.243918][T17655] bond1: entered promiscuous mode
[  394.245792][T17655] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.300001][T17655] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.302453][T17655] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  394.305974][T17655] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  394.332584][T17655] bond1: (slave gre1): making interface the new active one
[  394.335837][T17655] gre1: entered promiscuous mode
[  394.342538][T17655] bond1: (slave gre1): Enslaving as an active interface with an up link
[  394.632806][T17707] batman_adv: batadv0: Interface deactivated: dummy0
[  394.637534][T17707] batadv0: left allmulticast mode
[  394.639585][T17707] vxcan0: left allmulticast mode
[  394.641323][T17707] vxcan1: left allmulticast mode
[  394.643069][T17707] veth0: left allmulticast mode
[  394.645653][T17707] veth1: left allmulticast mode
[  394.647363][T17707] wg0: left allmulticast mode
[  394.669467][T17707] wg1: left allmulticast mode
[  394.671154][T17707] wg2: left allmulticast mode
[  394.672802][T17707] veth0_to_bridge: left allmulticast mode
[  394.674887][T17707] veth1_to_bridge: left allmulticast mode
[  394.676978][T17707] veth0_to_bond: left allmulticast mode
[  394.689288][T17707] bond_slave_0: left allmulticast mode
[  394.691186][T17707] veth1_to_bond: left allmulticast mode
[  394.693169][T17707] veth0_to_team: left allmulticast mode
[  394.695052][T17707] team_slave_0: left allmulticast mode
[  394.696964][T17707] veth1_to_team: left allmulticast mode
[  394.698796][T17707] team_slave_1: left allmulticast mode
[  394.709932][T17707] veth0_to_batadv: left allmulticast mode
[  394.711977][T17707] batadv_slave_0: left allmulticast mode
[  394.713940][T17707] veth1_to_batadv: left allmulticast mode
[  394.715884][T17707] batadv_slave_1: left allmulticast mode
[  394.717804][T17707] xfrm0: left allmulticast mode
[  394.729213][T17707] veth0_to_hsr: left allmulticast mode
[  394.731216][T17707] veth1_to_hsr: left allmulticast mode
[  394.733164][T17707] ªªªªª»: left allmulticast mode
[  394.734699][T17707] hsr_slave_0: left allmulticast mode
[  394.736390][T17707] hsr_slave_1: left allmulticast mode
[  394.738209][T17707] veth1_virt_wifi: left allmulticast mode
[  394.749208][T17707] veth0_virt_wifi: left allmulticast mode
[  394.754014][T17707] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  394.756350][T17707] veth1_vlan: left allmulticast mode
[  394.758211][T17707] vlan1: left allmulticast mode
[  394.769689][T17707] macvlan0: left allmulticast mode
[  394.771913][T17707] macvlan1: left allmulticast mode
[  394.773750][T17707] ipvlan0: left allmulticast mode
[  394.775488][T17707] ipvlan1: left allmulticast mode
[  394.780608][T17707] veth1_macvtap: left allmulticast mode
[  394.783600][T17714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1817'.
[  394.789666][T17707] veth0_macvtap: left allmulticast mode
[  394.791599][T17707] macvtap0: left allmulticast mode
[  394.793349][T17707] macsec0: left promiscuous mode
[  394.795034][T17707] geneve0: left allmulticast mode
[  394.796752][T17707] geneve1: left allmulticast mode
[  394.798479][T17707] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  394.818600][T17707] vti0: left allmulticast mode
[  394.821297][T17707] mac80211_hwsim hwsim14 wlan1: left allmulticast mode
[  394.821331][T17714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1817'.
[  394.823631][T17707] erspan0.1: left allmulticast mode
[  394.838910][T17707] erspan0: left allmulticast mode
[  394.841660][T17707] vxcan3: left promiscuous mode
[  394.843500][T17707] vxcan3: left allmulticast mode
[  394.846309][T17707] bond1: left promiscuous mode
[  394.847935][T17707] gre1: left promiscuous mode
[  395.019433][ T6007] usb 42-1: device descriptor read/8, error -110
[  395.160656][ T6032] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  395.412668][ T6007] usb usb42-port1: attempt power cycle
[  396.176923][ T6007] usb usb42-port1: unable to enumerate USB device
[  396.769711][T17753] 9pnet_virtio: no channels available for device syz
[  396.773579][T17753] overlayfs: overlapping lowerdir path
[  396.776787][T17753] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  396.779701][T17753] overlayfs: overlapping lowerdir path
[  398.729706][T17766] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  398.763437][T17766] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  398.767828][T17766] overlayfs: failed to look up (tracing) for ino (-66)
[  398.940952][T17777] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  398.943915][T17777] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  398.995100][T17777] vhci_hcd vhci_hcd.0: Device attached
[  399.293566][ T6007] usb 48-1: SetAddress Request (10) to port 0
[  399.296174][ T6007] usb 48-1: new SuperSpeed USB device number 10 using vhci_hcd
[  399.370168][T17780] vhci_hcd: connection reset by peer
[  399.373091][T11469] vhci_hcd vhci_hcd.5: stop threads
[  399.376028][T11469] vhci_hcd vhci_hcd.5: release socket
[  399.376796][T17782] wg2 speed is unknown, defaulting to 1000
[  399.378927][T11469] vhci_hcd vhci_hcd.5: disconnect device
[  399.565958][T17782] lo speed is unknown, defaulting to 1000
[  400.127848][T17822] futex_wake_op: syz.5.1835 tries to shift op by -1; fix this program
[  400.131919][   T40] kauditd_printk_skb: 4 callbacks suppressed
[  400.131931][   T40] audit: type=1326 audit(1766560188.924:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.142538][   T40] audit: type=1326 audit(1766560188.944:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.161822][   T40] audit: type=1326 audit(1766560188.944:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f855a7 code=0x7ffc0000
[  400.184746][   T40] audit: type=1326 audit(1766560188.944:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.194837][   T40] audit: type=1326 audit(1766560188.944:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.227244][   T40] audit: type=1326 audit(1766560188.944:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.249647][   T40] audit: type=1326 audit(1766560188.954:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.258428][   T40] audit: type=1326 audit(1766560188.954:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f855a7 code=0x7ffc0000
[  400.267574][   T40] audit: type=1326 audit(1766560188.954:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.277159][   T40] audit: type=1326 audit(1766560188.954:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17821 comm="syz.5.1835" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f85579 code=0x7ffc0000
[  400.810948][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  400.818980][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.210227][T17838] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  402.212390][T17838] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  402.236350][T17838] vhci_hcd vhci_hcd.0: Device attached
[  402.337541][T17840] vhci_hcd: connection closed
[  402.337780][ T8554] vhci_hcd vhci_hcd.5: stop threads
[  402.341836][ T8554] vhci_hcd vhci_hcd.5: release socket
[  402.344472][ T8554] vhci_hcd vhci_hcd.5: disconnect device
[  403.173723][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'.
[  403.180285][T17864] macvlan4: entered promiscuous mode
[  403.182279][T17864] team0: Device macvlan4 is already an upper device of the team interface
[  403.787001][T17877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1845'.
[  404.379009][ T6007] usb 48-1: device descriptor read/8, error -110
[  404.500929][T17893] syzkaller1: entered promiscuous mode
[  404.502904][T17893] syzkaller1: entered allmulticast mode
[  404.789592][ T6007] usb usb48-port1: attempt power cycle
[  404.845212][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'.
[  405.372638][ T6007] usb usb48-port1: unable to enumerate USB device
[  406.007783][T17919] xt_bpf: check failed: parse error
[  406.402643][T17925] xt_CT: You must specify a L4 protocol and not use inversions on it
[  406.419477][   T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.429145][   T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  406.656592][T17936] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1855'.
[  406.667527][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'.
[  406.710554][T17936] syz_tun: left promiscuous mode
[  407.093778][T17936] tipc: Resetting bearer <eth:team0>
[  407.095917][T17936] tipc: Resetting bearer <eth:team0>
[  407.124705][T17936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  407.468547][T17950] tipc: Started in network mode
[  407.470634][T17950] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  407.474646][T17950] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  408.341155][T17966] x_tables: duplicate underflow at hook 1
[  408.535655][T17970] nr0: entered promiscuous mode
[  409.241566][T17997] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  409.244535][T17997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  409.253415][T17997] vhci_hcd vhci_hcd.0: Device attached
[  409.563410][ T6007] usb 46-1: SetAddress Request (26) to port 0
[  409.566693][ T6007] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd
[  410.004471][T17998] vhci_hcd: connection reset by peer
[  410.012453][T11469] vhci_hcd vhci_hcd.4: stop threads
[  410.015565][T11469] vhci_hcd vhci_hcd.4: release socket
[  410.019322][T11469] vhci_hcd vhci_hcd.4: disconnect device
[  411.390754][T18029] syzkaller1: tun_chr_ioctl cmd 1074025677
[  411.392997][T18029] syzkaller1: Linktype set failed because interface is up
[  411.399655][T18029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1873'.
[  411.415867][ T6165] syzkaller1: tun_net_xmit 76
[  411.995591][   T40] kauditd_printk_skb: 184 callbacks suppressed
[  411.995603][   T40] audit: type=1326 audit(1766560200.793:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.005467][   T40] audit: type=1326 audit(1766560200.793:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.026091][   T40] audit: type=1326 audit(1766560200.803:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.033145][   T40] audit: type=1326 audit(1766560200.803:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.047490][T18065] wg2 speed is unknown, defaulting to 1000
[  412.055988][   T40] audit: type=1326 audit(1766560200.803:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.063187][   T40] audit: type=1326 audit(1766560200.813:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.070851][   T40] audit: type=1326 audit(1766560200.813:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.085451][   T40] audit: type=1326 audit(1766560200.813:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.092742][   T40] audit: type=1326 audit(1766560200.813:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.110623][   T40] audit: type=1326 audit(1766560200.813:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18056 comm="syz.2.1878" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd579 code=0x7ffc0000
[  412.136733][T18071] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  412.138904][T18071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  412.146062][T18071] vhci_hcd vhci_hcd.0: Device attached
[  412.276432][T18065] lo speed is unknown, defaulting to 1000
[  412.616351][ T6135] usb 48-1: SetAddress Request (14) to port 0
[  412.622292][ T6135] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd
[  412.790234][T18072] vhci_hcd: connection reset by peer
[  412.793057][ T6841] vhci_hcd vhci_hcd.5: stop threads
[  412.794822][ T6841] vhci_hcd vhci_hcd.5: release socket
[  412.796821][ T6841] vhci_hcd vhci_hcd.5: disconnect device
[  412.800844][T18106] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  412.804260][T18106] overlayfs: failed to set xattr on upper
[  412.806708][T18106] overlayfs: ...falling back to redirect_dir=nofollow.
[  412.809132][T18106] overlayfs: ...falling back to index=off.
[  412.811017][T18106] overlayfs: ...falling back to uuid=null.
[  412.812924][T18106] overlayfs: ...falling back to xino=off.
[  412.842656][T18108] SET target dimension over the limit!
[  413.121522][T18115] wg2 speed is unknown, defaulting to 1000
[  413.401195][T18115] lo speed is unknown, defaulting to 1000
[  414.235174][T18172] FAULT_INJECTION: forcing a failure.
[  414.235174][T18172] name failslab, interval 1, probability 0, space 0, times 0
[  414.240210][T18172] CPU: 0 UID: 0 PID: 18172 Comm: syz.0.1892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.240237][T18172] Tainted: [L]=SOFTLOCKUP
[  414.240243][T18172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  414.240253][T18172] Call Trace:
[  414.240259][T18172]  <TASK>
[  414.240267][T18172]  dump_stack_lvl+0x16c/0x1f0
[  414.240300][T18172]  should_fail_ex+0x512/0x640
[  414.240321][T18172]  ? __kmalloc_node_noprof+0xcd/0x930
[  414.240349][T18172]  should_failslab+0xc2/0x120
[  414.240378][T18172]  __kmalloc_node_noprof+0xee/0x930
[  414.240401][T18172]  ? __get_vm_area_node+0x208/0x330
[  414.240426][T18172]  ? __vmalloc_node_range_noprof+0x405/0x16b0
[  414.240448][T18172]  ? __vmalloc_node_range_noprof+0x405/0x16b0
[  414.240465][T18172]  __vmalloc_node_range_noprof+0x405/0x16b0
[  414.240484][T18172]  ? ebt_buf_add+0x149/0x1b0
[  414.240511][T18172]  ? rcu_is_watching+0x12/0xc0
[  414.240540][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.240566][T18172]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  414.240590][T18172]  ? __pfx_compat_copy_entries+0x10/0x10
[  414.240613][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.240631][T18172]  __vmalloc_node_noprof+0xad/0xf0
[  414.240648][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.240670][T18172]  compat_do_replace+0x390/0x7f0
[  414.240692][T18172]  ? __pfx_compat_do_replace+0x10/0x10
[  414.240715][T18172]  ? __pfx___might_resched+0x10/0x10
[  414.240750][T18172]  ? bpf_lsm_capable+0x9/0x10
[  414.240774][T18172]  ? security_capable+0x7e/0x260
[  414.240805][T18172]  do_ebt_set_ctl+0x362/0x460
[  414.240824][T18172]  ? sockopt_release_sock+0x52/0x60
[  414.240850][T18172]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  414.240871][T18172]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  414.240899][T18172]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  414.240934][T18172]  nf_setsockopt+0x8d/0xf0
[  414.240964][T18172]  ip_setsockopt+0xcb/0xf0
[  414.240987][T18172]  raw_setsockopt+0xb7/0x2a0
[  414.241009][T18172]  ? __pfx_raw_setsockopt+0x10/0x10
[  414.241031][T18172]  ? sock_common_setsockopt+0x2e/0xf0
[  414.241057][T18172]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  414.241085][T18172]  do_sock_setsockopt+0xf3/0x1d0
[  414.241123][T18172]  __sys_setsockopt+0x120/0x1a0
[  414.241149][T18172]  __ia32_sys_setsockopt+0xbc/0x160
[  414.241170][T18172]  ? __do_fast_syscall_32+0x9a/0x680
[  414.241198][T18172]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.241224][T18172]  __do_fast_syscall_32+0xe8/0x680
[  414.241255][T18172]  do_fast_syscall_32+0x32/0x80
[  414.241272][T18172]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  414.241295][T18172] RIP: 0023:0xf7f66579
[  414.241309][T18172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  414.241326][T18172] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  414.241342][T18172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  414.241353][T18172] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  414.241364][T18172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  414.241374][T18172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  414.241384][T18172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  414.241409][T18172]  </TASK>
[  414.241418][T18172] warn_alloc: 2 callbacks suppressed
[  414.241428][T18172] syz.0.1892: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  414.379999][T18172] CPU: 0 UID: 0 PID: 18172 Comm: syz.0.1892 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.380027][T18172] Tainted: [L]=SOFTLOCKUP
[  414.380033][T18172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  414.380044][T18172] Call Trace:
[  414.380050][T18172]  <TASK>
[  414.380056][T18172]  dump_stack_lvl+0x16c/0x1f0
[  414.380100][T18172]  warn_alloc+0x248/0x3a0
[  414.380123][T18172]  ? __pfx_warn_alloc+0x10/0x10
[  414.380141][T18172]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.380166][T18172]  ? dump_stack_lvl+0x1a1/0x1f0
[  414.380191][T18172]  ? should_fail_ex+0x354/0x640
[  414.380211][T18172]  ? rcu_is_watching+0x12/0xc0
[  414.380251][T18172]  ? trace_kmalloc+0x2b/0xb0
[  414.380276][T18172]  ? __kmalloc_node_noprof+0x372/0x930
[  414.380299][T18172]  ? __get_vm_area_node+0x208/0x330
[  414.380327][T18172]  ? __vmalloc_node_range_noprof+0x405/0x16b0
[  414.380352][T18172]  __vmalloc_node_range_noprof+0x1309/0x16b0
[  414.380377][T18172]  ? ebt_buf_add+0x149/0x1b0
[  414.380405][T18172]  ? rcu_is_watching+0x12/0xc0
[  414.380434][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.380460][T18172]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  414.380484][T18172]  ? __pfx_compat_copy_entries+0x10/0x10
[  414.380508][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.380526][T18172]  __vmalloc_node_noprof+0xad/0xf0
[  414.380544][T18172]  ? compat_do_replace+0x390/0x7f0
[  414.380566][T18172]  compat_do_replace+0x390/0x7f0
[  414.380588][T18172]  ? __pfx_compat_do_replace+0x10/0x10
[  414.380610][T18172]  ? __pfx___might_resched+0x10/0x10
[  414.380646][T18172]  ? bpf_lsm_capable+0x9/0x10
[  414.380670][T18172]  ? security_capable+0x7e/0x260
[  414.380703][T18172]  do_ebt_set_ctl+0x362/0x460
[  414.380721][T18172]  ? sockopt_release_sock+0x52/0x60
[  414.380746][T18172]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  414.380768][T18172]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  414.380796][T18172]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  414.380829][T18172]  nf_setsockopt+0x8d/0xf0
[  414.380859][T18172]  ip_setsockopt+0xcb/0xf0
[  414.380881][T18172]  raw_setsockopt+0xb7/0x2a0
[  414.380904][T18172]  ? __pfx_raw_setsockopt+0x10/0x10
[  414.380928][T18172]  ? sock_common_setsockopt+0x2e/0xf0
[  414.380955][T18172]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  414.380984][T18172]  do_sock_setsockopt+0xf3/0x1d0
[  414.381014][T18172]  __sys_setsockopt+0x120/0x1a0
[  414.381041][T18172]  __ia32_sys_setsockopt+0xbc/0x160
[  414.381062][T18172]  ? __do_fast_syscall_32+0x9a/0x680
[  414.381090][T18172]  ? lockdep_hardirqs_on+0x7c/0x110
[  414.381115][T18172]  __do_fast_syscall_32+0xe8/0x680
[  414.381144][T18172]  do_fast_syscall_32+0x32/0x80
[  414.381161][T18172]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  414.381183][T18172] RIP: 0023:0xf7f66579
[  414.381197][T18172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  414.381215][T18172] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e
[  414.381233][T18172] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  414.381243][T18172] RDX: 0000000000000080 RSI: 00000000800001c0 RDI: 00000000000000e0
[  414.381254][T18172] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  414.381264][T18172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  414.381274][T18172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  414.381299][T18172]  </TASK>
[  414.381353][T18172] Mem-Info:
[  414.382899][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1891'.
[  414.536698][T18172] active_anon:7021 inactive_anon:805 isolated_anon:450
[  414.536698][T18172]  active_file:11028 inactive_file:1142 isolated_file:0
[  414.536698][T18172]  unevictable:1318 dirty:163 writeback:0
[  414.536698][T18172]  slab_reclaimable:6384 slab_unreclaimable:59310
[  414.536698][T18172]  mapped:33546 shmem:8370 pagetables:1621
[  414.536698][T18172]  sec_pagetables:340 bounce:0
[  414.536698][T18172]  kernel_misc_reclaimable:0
[  414.536698][T18172]  free:34775 free_pcp:10257 free_cma:0
[  414.555960][T18172] Node 0 active_anon:44kB inactive_anon:360kB active_file:1528kB inactive_file:404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:1400kB dirty:88kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9676kB pagetables:1580kB sec_pagetables:1176kB all_unreclaimable? yes Balloon:0kB
[  414.570141][T18172] Node 1 active_anon:29140kB inactive_anon:2860kB active_file:42584kB inactive_file:4064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:133884kB dirty:564kB writeback:0kB shmem:31044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5168kB pagetables:4904kB sec_pagetables:184kB all_unreclaimable? no Balloon:0kB
[  414.583102][T18172] Node 0 DMA free:2360kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB
[  414.593674][T18172] lowmem_reserve[]: 0 289 289 289 289
[  414.595733][T18172] Node 0 DMA32 free:18516kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:352kB active_file:1528kB inactive_file:404kB unevictable:3536kB writepending:88kB zspages:3280kB present:1032196kB managed:296812kB mlocked:0kB bounce:0kB free_pcp:7512kB local_pcp:252kB free_cma:0kB
[  414.610438][T18172] lowmem_reserve[]: 0 0 0 0 0
[  414.612028][T18168] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  414.613012][T18172] Node 1 DMA32 free:115408kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30740kB inactive_anon:2860kB active_file:42084kB inactive_file:4164kB unevictable:3536kB writepending:564kB zspages:4004kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:35336kB local_pcp:4772kB free_cma:0kB
[  414.635314][T18172] lowmem_reserve[]: 0 0 0 0 0
[  414.637077][T18172] Node 0 DMA: 30*4kB (U) 18*8kB (U) 11*16kB (U) 10*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2360kB
[  414.637845][ T6007] usb 46-1: device descriptor read/8, error -110
[  414.642620][T18172] Node 0 DMA32: 557*4kB (UME) 440*8kB (UE) 162*16kB (U) 46*32kB (U) 20*64kB (U) 28*128kB (UM) 13*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18516kB
[  414.649865][T18172] Node 1 DMA32: 2298*4kB (UE) 1273*8kB (UME) 558*16kB (UE) 181*32kB (UME) 135*64kB (UME) 88*128kB (UME) 18*256kB (UE) 68*512kB (U) 18*1024kB (U) 0*2048kB 0*4096kB = 111856kB
[  414.655898][T18172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  414.659446][T18172] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  414.662621][T18172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  414.665946][T18172] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  414.669827][T18172] 24195 total pagecache pages
[  414.671530][T18172] 909 pages in swap cache
[  414.673424][T18172] Free swap  = 92196kB
[  414.674851][T18172] Total swap = 124996kB
[  414.676310][T18172] 524155 pages RAM
[  414.677618][T18172] 0 pages HighMem/MovableOnly
[  414.679753][T18172] 209059 pages reserved
[  414.681207][T18172] 0 pages cma reserved
[  415.055922][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1898'.
[  415.184305][T18203] netlink: 'syz.4.1894': attribute type 16 has an invalid length.
[  415.187539][T18203] netlink: 'syz.4.1894': attribute type 17 has an invalid length.
[  415.400459][ T6007] usb usb46-port1: attempt power cycle
[  415.848470][T18203] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.889538][T18203] 8021q: adding VLAN 0 to HW filter on device team0
[  415.893643][T18203] batman_adv: batadv0: Interface activated: dummy0
[  415.901060][T18203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  415.921192][T18216] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  415.928259][T18216] syzkaller0: entered promiscuous mode
[  415.939191][T18216] syzkaller0: entered allmulticast mode
[  416.210192][ T6007] usb usb46-port1: unable to enumerate USB device
[  416.455281][T18238] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  416.457501][T18238] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  416.461235][T18238] vhci_hcd vhci_hcd.0: Device attached
[  416.628614][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout
[  416.728846][   T29] usb 38-1: SetAddress Request (63) to port 0
[  416.734677][   T29] usb 38-1: new SuperSpeed USB device number 63 using vhci_hcd
[  417.147418][T18239] vhci_hcd: connection reset by peer
[  417.150963][T10758] vhci_hcd vhci_hcd.0: stop threads
[  417.153308][T10758] vhci_hcd vhci_hcd.0: release socket
[  417.155897][T10758] vhci_hcd vhci_hcd.0: disconnect device
[  417.462917][T18253] netlink: 'syz.4.1911': attribute type 3 has an invalid length.
[  417.747531][ T6135] usb 48-1: device descriptor read/8, error -110
[  418.356973][ T6007] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  418.523768][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  418.534771][ T6007] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  418.540634][ T6007] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.549676][ T6007] usb 7-1: Product: syz
[  418.551612][ T6007] usb 7-1: Manufacturer: syz
[  418.553861][ T6007] usb 7-1: SerialNumber: syz
[  418.580431][ T6135] usb usb48-port1: attempt power cycle
[  418.594127][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1916'.
[  418.820981][ T6007] usb 7-1: config 0 descriptor??
[  418.918759][ T6007] hub 7-1:0.0: bad descriptor, ignoring hub
[  418.970757][ T6007] hub 7-1:0.0: probe with driver hub failed with error -5
[  419.130517][ T6007] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input28
[  419.261625][ T6007] input: failed to attach handler mousedev to device input28, error: -5
[  419.943766][ T6135] usb usb48-port1: unable to enumerate USB device
[  420.133934][T18327] Invalid/unusable pipe
[  420.918181][T18354] 
[  420.919220][T18354] ======================================================
[  420.922052][T18354] WARNING: possible circular locking dependency detected
[  420.924914][T18354] syzkaller #0 Tainted: G             L     
[  420.927319][T18354] ------------------------------------------------------
[  420.929846][T18354] syz.2.1930/18354 is trying to acquire lock:
[  420.931912][T18354] ffff888024540068 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0
[  420.934904][T18354] 
[  420.934904][T18354] but task is already holding lock:
[  420.937334][T18354] ffff8880765ff148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  420.940527][T18354] 
[  420.940527][T18354] which lock already depends on the new lock.
[  420.940527][T18354] 
[  420.943971][T18354] 
[  420.943971][T18354] the existing dependency chain (in reverse order) is:
[  420.946899][T18354] 
[  420.946899][T18354] -> #3 (&sbi->pipe_mutex){+.+.}-{4:4}:
[  420.949453][T18354]        __mutex_lock+0x1aa/0x1ca0
[  420.951164][T18354]        autofs_notify_daemon+0x4a6/0xd60
[  420.953066][T18354]        autofs_wait+0x10f3/0x1ac0
[  420.954784][T18354]        autofs_mount_wait+0x132/0x3c0
[  420.956589][T18354]        autofs_d_automount+0x4b2/0x960
[  420.958401][T18354]        __traverse_mounts+0x1b9/0x830
[  420.960199][T18354]        step_into_slowpath+0x772/0xf50
[  420.962023][T18354]        path_lookupat+0x627/0xc40
[  420.963745][T18354]        filename_lookup+0x224/0x5f0
[  420.965492][T18354]        kern_path+0x35/0x50
[  420.967025][T18354]        lookup_bdev+0xd8/0x280
[  420.968703][T18354]        resume_store+0x1d6/0x490
[  420.970366][T18354]        kobj_attr_store+0x58/0x80
[  420.972081][T18354]        sysfs_kf_write+0xf2/0x150
[  420.973771][T18354]        kernfs_fop_write_iter+0x3af/0x570
[  420.975715][T18354]        vfs_write+0x7d3/0x11d0
[  420.977330][T18354]        ksys_write+0x12a/0x250
[  420.978954][T18354]        __do_fast_syscall_32+0xe8/0x680
[  420.980810][T18354]        do_fast_syscall_32+0x32/0x80
[  420.982600][T18354]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  420.984867][T18354] 
[  420.984867][T18354] -> #2 (&of->mutex){+.+.}-{4:4}:
[  420.987245][T18354]        __mutex_lock+0x1aa/0x1ca0
[  420.988988][T18354]        kernfs_seq_start+0x4f/0x2a0
[  420.990773][T18354]        seq_read_iter+0x2c1/0x12d0
[  420.992525][T18354]        kernfs_fop_read_iter+0x46c/0x610
[  420.994415][T18354]        copy_splice_read+0x618/0xc20
[  420.996206][T18354]        do_splice_read+0x285/0x370
[  420.997926][T18354]        splice_file_to_pipe+0x109/0x120
[  420.999805][T18354]        do_sendfile+0x400/0xe50
[  421.001480][T18354]        __ia32_compat_sys_sendfile+0x1e5/0x220
[  421.003582][T18354]        __do_fast_syscall_32+0xe8/0x680
[  421.005453][T18354]        do_fast_syscall_32+0x32/0x80
[  421.007230][T18354]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.009471][T18354] 
[  421.009471][T18354] -> #1 (&p->lock){+.+.}-{4:4}:
[  421.011789][T18354]        __mutex_lock+0x1aa/0x1ca0
[  421.013484][T18354]        seq_read_iter+0xe1/0x12d0
[  421.015209][T18354]        kernfs_fop_read_iter+0x46c/0x610
[  421.017085][T18354]        copy_splice_read+0x618/0xc20
[  421.018873][T18354]        do_splice_read+0x285/0x370
[  421.020650][T18354]        splice_file_to_pipe+0x109/0x120
[  421.022526][T18354]        do_sendfile+0x400/0xe50
[  421.024199][T18354]        __ia32_compat_sys_sendfile+0x1e5/0x220
[  421.026272][T18354]        __do_fast_syscall_32+0xe8/0x680
[  421.028141][T18354]        do_fast_syscall_32+0x32/0x80
[  421.029963][T18354]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.032456][T18354] 
[  421.032456][T18354] -> #0 (&pipe->mutex){+.+.}-{4:4}:
[  421.035003][T18354]        __lock_acquire+0x1669/0x2890
[  421.036823][T18354]        lock_acquire+0x179/0x330
[  421.038558][T18354]        __mutex_lock+0x1aa/0x1ca0
[  421.040259][T18354]        anon_pipe_write+0x15d/0x1bd0
[  421.042100][T18354]        __kernel_write_iter+0x720/0xb10
[  421.044032][T18354]        __kernel_write+0xf5/0x140
[  421.045796][T18354]        autofs_notify_daemon+0x4db/0xd60
[  421.047747][T18354]        autofs_wait+0x10f3/0x1ac0
[  421.049452][T18354]        autofs_mount_wait+0x132/0x3c0
[  421.051337][T18354]        autofs_d_automount+0x4b2/0x960
[  421.053154][T18354]        __traverse_mounts+0x1b9/0x830
[  421.054963][T18354]        step_into_slowpath+0x772/0xf50
[  421.056789][T18354]        path_lookupat+0x627/0xc40
[  421.058485][T18354]        filename_lookup+0x224/0x5f0
[  421.060236][T18354]        kern_path+0x35/0x50
[  421.061781][T18354]        lookup_bdev+0xd8/0x280
[  421.063414][T18354]        resume_store+0x1d6/0x490
[  421.065094][T18354]        kobj_attr_store+0x58/0x80
[  421.066785][T18354]        sysfs_kf_write+0xf2/0x150
[  421.068500][T18354]        kernfs_fop_write_iter+0x3af/0x570
[  421.070494][T18354]        vfs_write+0x7d3/0x11d0
[  421.072263][T18354]        ksys_write+0x12a/0x250
[  421.074395][T18354]        __do_fast_syscall_32+0xe8/0x680
[  421.076827][T18354]        do_fast_syscall_32+0x32/0x80
[  421.079133][T18354]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.082053][T18354] 
[  421.082053][T18354] other info that might help us debug this:
[  421.082053][T18354] 
[  421.085595][T18354] Chain exists of:
[  421.085595][T18354]   &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex
[  421.085595][T18354] 
[  421.089698][T18354]  Possible unsafe locking scenario:
[  421.089698][T18354] 
[  421.092175][T18354]        CPU0                    CPU1
[  421.094129][T18354]        ----                    ----
[  421.095911][T18354]   lock(&sbi->pipe_mutex);
[  421.097441][T18354]                                lock(&of->mutex);
[  421.099685][T18354]                                lock(&sbi->pipe_mutex);
[  421.102621][T18354]   lock(&pipe->mutex);
[  421.104419][T18354] 
[  421.104419][T18354]  *** DEADLOCK ***
[  421.104419][T18354] 
[  421.107838][T18354] 5 locks held by syz.2.1930/18354:
[  421.109578][T18354]  #0: ffff888027aacb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370
[  421.112525][T18354]  #1: ffff88804b01c420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[  421.115541][T18354]  #2: ffff88805ff03088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570
[  421.119133][T18354]  #3: ffff888040e940f8 (kn->active#65){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570
[  421.122780][T18354]  #4: ffff8880765ff148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60
[  421.126543][T18354] 
[  421.126543][T18354] stack backtrace:
[  421.128755][T18354] CPU: 3 UID: 0 PID: 18354 Comm: syz.2.1930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.128773][T18354] Tainted: [L]=SOFTLOCKUP
[  421.128778][T18354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  421.128786][T18354] Call Trace:
[  421.128791][T18354]  <TASK>
[  421.128796][T18354]  dump_stack_lvl+0x116/0x1f0
[  421.128816][T18354]  print_circular_bug+0x275/0x340
[  421.128836][T18354]  check_noncircular+0x146/0x160
[  421.128856][T18354]  __lock_acquire+0x1669/0x2890
[  421.128868][T18354]  ? __kasan_check_byte+0x13/0x50
[  421.128885][T18354]  lock_acquire+0x179/0x330
[  421.128895][T18354]  ? anon_pipe_write+0x15d/0x1bd0
[  421.128912][T18354]  ? __pfx___might_resched+0x10/0x10
[  421.128927][T18354]  ? rcu_is_watching+0x12/0xc0
[  421.128943][T18354]  __mutex_lock+0x1aa/0x1ca0
[  421.128961][T18354]  ? anon_pipe_write+0x15d/0x1bd0
[  421.128976][T18354]  ? is_bpf_text_address+0x94/0x1a0
[  421.128990][T18354]  ? kernel_text_address+0x8d/0x100
[  421.129003][T18354]  ? anon_pipe_write+0x15d/0x1bd0
[  421.129019][T18354]  ? unwind_get_return_address+0x59/0xa0
[  421.129033][T18354]  ? __bfs+0x148/0x290
[  421.129047][T18354]  ? __pfx___mutex_lock+0x10/0x10
[  421.129070][T18354]  ? check_irq_usage+0xe8/0xbc0
[  421.129095][T18354]  ? anon_pipe_write+0x15d/0x1bd0
[  421.129125][T18354]  anon_pipe_write+0x15d/0x1bd0
[  421.129149][T18354]  ? lockdep_unlock+0x64/0xd0
[  421.129171][T18354]  ? __lock_acquire+0x12c2/0x2890
[  421.129189][T18354]  ? __pfx_anon_pipe_write+0x10/0x10
[  421.129217][T18354]  ? lock_acquire+0x179/0x330
[  421.129235][T18354]  ? __pfx_anon_pipe_write+0x10/0x10
[  421.129259][T18354]  __kernel_write_iter+0x720/0xb10
[  421.129284][T18354]  ? __pfx___kernel_write_iter+0x10/0x10
[  421.129308][T18354]  ? __mutex_lock+0x27b/0x1ca0
[  421.129332][T18354]  ? __kernel_text_address+0xd/0x40
[  421.129353][T18354]  ? autofs_notify_daemon+0x45a/0xd60
[  421.129374][T18354]  __kernel_write+0xf5/0x140
[  421.129397][T18354]  ? __pfx___kernel_write+0x10/0x10
[  421.129421][T18354]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  421.129449][T18354]  autofs_notify_daemon+0x4db/0xd60
[  421.129469][T18354]  ? __pfx_autofs_notify_daemon+0x10/0x10
[  421.129487][T18354]  ? kernfs_fop_write_iter+0x3af/0x570
[  421.129512][T18354]  ? vfs_write+0x7d3/0x11d0
[  421.129528][T18354]  ? ksys_write+0x12a/0x250
[  421.129548][T18354]  ? lockdep_init_map_type+0x5c/0x270
[  421.129559][T18354]  ? lockdep_init_map_type+0x5c/0x270
[  421.129570][T18354]  autofs_wait+0x10f3/0x1ac0
[  421.129583][T18354]  ? __pfx_autofs_wait+0x10/0x10
[  421.129594][T18354]  ? __pfx_path_check_mount+0x10/0x10
[  421.129605][T18354]  ? find_held_lock+0x2b/0x80
[  421.129618][T18354]  ? path_has_submounts+0xcf/0x120
[  421.129630][T18354]  ? do_raw_spin_unlock+0x172/0x230
[  421.129643][T18354]  ? find_held_lock+0x2b/0x80
[  421.129657][T18354]  autofs_mount_wait+0x132/0x3c0
[  421.129671][T18354]  autofs_d_automount+0x4b2/0x960
[  421.129689][T18354]  __traverse_mounts+0x1b9/0x830
[  421.129702][T18354]  step_into_slowpath+0x772/0xf50
[  421.129716][T18354]  ? __up_read+0x2d1/0x700
[  421.129727][T18354]  ? __pfx_step_into_slowpath+0x10/0x10
[  421.129741][T18354]  ? __lookup_slow+0x420/0x460
[  421.129754][T18354]  path_lookupat+0x627/0xc40
[  421.129769][T18354]  filename_lookup+0x224/0x5f0
[  421.129785][T18354]  ? __pfx_filename_lookup+0x10/0x10
[  421.129803][T18354]  ? getname_kernel+0x52/0x370
[  421.129814][T18354]  ? __asan_memcpy+0x3c/0x60
[  421.129827][T18354]  kern_path+0x35/0x50
[  421.129841][T18354]  lookup_bdev+0xd8/0x280
[  421.129852][T18354]  ? __pfx_lookup_bdev+0x10/0x10
[  421.129863][T18354]  ? __asan_memcpy+0x3c/0x60
[  421.129876][T18354]  resume_store+0x1d6/0x490
[  421.129889][T18354]  ? __pfx_resume_store+0x10/0x10
[  421.129904][T18354]  ? find_held_lock+0x2b/0x80
[  421.129918][T18354]  ? __pfx_resume_store+0x10/0x10
[  421.129930][T18354]  kobj_attr_store+0x58/0x80
[  421.129947][T18354]  ? __pfx_kobj_attr_store+0x10/0x10
[  421.129963][T18354]  sysfs_kf_write+0xf2/0x150
[  421.129974][T18354]  kernfs_fop_write_iter+0x3af/0x570
[  421.129990][T18354]  ? __pfx_sysfs_kf_write+0x10/0x10
[  421.130001][T18354]  vfs_write+0x7d3/0x11d0
[  421.130016][T18354]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[  421.130033][T18354]  ? __pfx_vfs_write+0x10/0x10
[  421.130047][T18354]  ? find_held_lock+0x2b/0x80
[  421.130064][T18354]  ksys_write+0x12a/0x250
[  421.130079][T18354]  ? __pfx_ksys_write+0x10/0x10
[  421.130094][T18354]  ? fput+0x70/0xf0
[  421.130104][T18354]  __do_fast_syscall_32+0xe8/0x680
[  421.130128][T18354]  do_fast_syscall_32+0x32/0x80
[  421.130138][T18354]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.130153][T18354] RIP: 0023:0xf70bd579
[  421.130164][T18354] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  421.130175][T18354] RSP: 002b:00000000f548c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  421.130186][T18354] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  421.130193][T18354] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000
[  421.130200][T18354] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  421.130206][T18354] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  421.130212][T18354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  421.130222][T18354]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  421.364783][T18354] PM: Image not found (code -6)
[  421.434164][   T64] Bluetooth: hci0: command 0x0c1a tx timeout
[  421.767116][T13377] caif:caif_disconnect_client(): nothing to disconnect
[  421.774046][ T1077] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.777384][ T1077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.780582][ T1077] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  421.823601][   T29] usb 38-1: device descriptor read/8, error -110
[  421.934895][ T1077] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.938282][ T1077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.941474][ T1077] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  421.995354][ T1077] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  421.998891][ T1077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.002088][ T1077] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  422.076735][ T1077] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  422.081058][ T1077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.085374][ T1077] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  422.197481][ T1077] erspan1: left allmulticast mode
[  422.199254][ T1077] erspan1: left promiscuous mode
[  422.201077][ T1077] batadv0: port 1(erspan1) entered disabled state
[  422.213605][   T29] usb usb38-port1: attempt power cycle
[  422.252932][ T1077] bond5 (unregistering): (slave geneve2): Releasing active interface
[  422.454446][ T1077] bond6 (unregistering): (slave bridge2): Releasing backup interface
[  422.457775][ T1077] bridge2 (unregistering): left promiscuous mode
[  422.584839][ T1077] bond4 (unregistering): (slave macvlan2): Releasing backup interface
[  422.589860][ T1077] bond0 (unregistering): Released all slaves
[  422.665455][ T1077] bond1 (unregistering): Released all slaves
[  422.669322][ T1077] bond2 (unregistering): Released all slaves
[  422.673458][ T1077] bond3 (unregistering): Released all slaves
[  422.761365][ T1077] bond4 (unregistering): Released all slaves
[  422.765342][ T1077] bond5 (unregistering): Released all slaves
[  422.787889][   T29] usb usb38-port1: unable to enumerate USB device
[  422.846129][ T1077] bond6 (unregistering): Released all slaves
[  422.933324][ T1077] tipc: Left network mode
[  423.136472][ T1077] hsr_slave_0: left promiscuous mode
[  423.139348][ T1077] hsr_slave_1: left promiscuous mode
[  423.145170][ T1077] veth1_vlan: left allmulticast mode
[  423.147633][ T1077] veth1_macvtap: left promiscuous mode
[  423.150123][ T1077] veth1_vlan: left promiscuous mode
[  423.152996][ T1077] veth0_vlan: left promiscuous mode
[  423.202314][ T1077] team0 (unregistering): Port device batadv1 removed
[  423.440573][ T1077] lo (unregistering): left allmulticast mode
[  423.448053][   T10] lo speed is unknown, defaulting to 1000
[  423.449968][   T10] infiniband syz0: ib_query_port failed (-19)
[  423.816060][ T1077] IPVS: stop unused estimator thread 0...
[  423.973734][ T6015] usb 7-1: USB disconnect, device number 18
[  424.887961][ T1077] bridge_slave_1: left allmulticast mode
[  424.890229][ T1077] bridge_slave_1: left promiscuous mode
[  424.893352][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.896581][ T1077] bridge_slave_0: left allmulticast mode
[  424.898701][ T1077] bridge_slave_0: left promiscuous mode
[  424.901241][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.915532][ T1077] team0: left allmulticast mode
[  424.917341][ T1077] team0: left promiscuous mode
[  424.919254][ T1077] bridge0: port 1(team0) entered disabled state
[  425.037511][ T1077] bond1 (unregistering): (slave gre1): Releasing backup interface
[  425.166101][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.170328][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.173808][ T1077] bond0 (unregistering): Released all slaves
[  425.258325][ T1077] bond1 (unregistering): Released all slaves
[  425.371003][ T1077] dvmrp1 (unregistering): left allmulticast mode
[  425.378732][ T1077] bond2 (unregistering): (slave geneve2): Releasing backup interface
[  425.409582][ T1077] team0: Port device bridge0 removed
[  425.466618][ T1077] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  425.470132][ T1077] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  425.473198][ T1077] .` (unregistering): Released all slaves
[  425.555551][ T1077] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  425.558756][ T1077] bond1 (unregistering): Released all slaves
[  425.643858][ T1077] bond0 (unregistering): Released all slaves
[  425.647791][ T1077] bond2 (unregistering): Released all slaves
[  425.722150][ T1077] bond3 (unregistering): Released all slaves
[  425.795280][ T1077] bond4 (unregistering): (slave veth5): Releasing active interface
[  425.798241][ T1077] bond4 (unregistering): Released all slaves
[  425.870248][ T1077] bond5 (unregistering): Released all slaves
[  426.056707][ T1077] bond0 (unregistering): Released all slaves
[  426.135130][ T1077] tipc: Left network mode
[  426.141471][ T1077] tipc: Disabling bearer <udp:syz2>
[  426.149626][ T1077] tipc: Disabling bearer <eth:team0>
[  426.158289][ T1077] tipc: Disabling bearer <eth:veth0_macvtap>
[  426.166542][ T1077] tipc: Left network mode
[  426.187940][ T1077] IPVS: stopping master sync thread 6741 ...
[  426.870931][ T1077] hsr_slave_0: left promiscuous mode
[  426.873174][ T1077] hsr_slave_1: left promiscuous mode
[  426.875231][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.877942][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.881070][ T1077] batman_adv: batadv0: Interface deactivated: dummy0
[  426.883314][ T1077] batman_adv: batadv0: Removing interface: dummy0
[  426.887823][ T1077] hsr_slave_0: left promiscuous mode
[  426.899261][ T1077] hsr_slave_1: left promiscuous mode
[  426.901984][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.906168][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.918604][ T1077] hsr_slave_0: left promiscuous mode
[  426.922058][ T1077] hsr_slave_1: left promiscuous mode
[  427.145345][ T1077] team0 (unregistering): Port device team_slave_1 removed
[  427.168391][ T1077] team0 (unregistering): Port device team_slave_0 removed
[  427.460815][ T1077] pim6reg (unregistering): left allmulticast mode
[  427.695691][ T1077] team0 (unregistering): Port device team_slave_1 removed
[  427.719436][ T1077] team0 (unregistering): Port device team_slave_0 removed
[  427.824760][T10758] smc: removing ib device syz2
[  429.462483][ T1077] IPVS: stop unused estimator thread 0...
[  429.466495][ T1077] IPVS: stop unused estimator thread 0...
[  429.469789][ T1077] IPVS: stop unused estimator thread 0...