last executing test programs:

4m22.227370148s ago: executing program 0 (id=667):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3, r1, 0x4}, 0x38)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001200578300"/19, @ANYRES32=0x0, @ANYBLOB='\x00b'], 0x24}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x40800)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
splice(r4, &(0x7f0000000000)=0x202000000000000, r1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x4, 0x2)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r6 = io_uring_setup(0x5d8a, &(0x7f0000000340)={0x0, 0xdb14, 0x1, 0x1, 0x28})
io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000019c0)={0x1, 0x1, 0x0, &(0x7f0000001940)=[{0x0}], 0x0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', <r7=>0x0, 0x0, 0x0, 0xf, 0x80000001, 0x4c, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x7, 0x2, 0x2}})
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="20002cbd7000fbdbdf250b000000440001801400020076657468315f896f5f68737200000000080003000100000014000200776c616e300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="3c00018008000300030000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r9, @ANYBLOB="140002006272696467655f736c6176655f300000"], 0xa0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40004)

4m22.168086635s ago: executing program 0 (id=668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xfffffffa, 0xea9, 0x8, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', <r4=>0x0, 0x4, 0x19, 0x1c, 0x5, 0x5, @empty, @private2, 0x10, 0x7, 0x5, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg2\x00', <r5=>0x0})
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r7], 0x4c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xa, 0xf, 0x6, 0x40, @private1, @private1, 0x0, 0x8000, 0x18, 0x9}})
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000004, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="94040000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf250e000000d0010280dc0003802000018004000300100002005c2d5b2a25635d2bee40b5000400030004000300140001800800010000000200060002007d00000028000180080001000700000008000100800000000a0002007d2f5d2626000000040003000400030004000180180001800800020023257b000400030008000100080000003c000180040003000800010006000000060002005e000000040003000800010001ffffff08000100a4d500000800010053060000080001008b000000100001800400030008000100090000001400018004000300080001000500000004000300d8000380100001800500020000000000040003005400018008000100000000000800020047504c00080001000400000004000300040003000e0002003a7b5e23292b295b240000000800020047504c000a000200295d7b215c0000000800010008000000040003000800018004000300180001800800010000100000040003000800020047504c0020000180080001000180000008000100d81cffff04000300080002007dfc8600300001800800020047504c00070002005d27000004000300080001000000000008000100d80400000800020047504c000800020007000000080002000000010008000200ddc9475b680001801400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300000000001400020073797a6b616c6c65723000000000000008000300060000001400020076657468305f746f5f62617461647600080003000200000058000180080003000300000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0800030001000000080003000200000008000300000000001400020064766d7270300000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="1400020076657468305f746f5f626f6e64000000140002007866726d3000"/40], 0x494}, 0x1, 0x0, 0x0, 0x4000}, 0x8890)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
r12 = io_uring_setup(0x1d48, &(0x7f00000017c0)={0x0, 0xe948, 0x1880, 0x2, 0x1a7})
r13 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r13, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01)
fchmod(r13, 0xcc)
syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r13, 0xc0405665, &(0x7f0000000280)={0x8, 0x3, 0x9, 0x1000})
close_range(r12, 0xffffffffffffffff, 0x0)
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
r15 = getuid()
fsetxattr$security_capability(r14, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0x5d69f4ba}, {0x5, 0x8}], r15}, 0x18, 0x0)
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r15, &(0x7f0000000200))

4m21.298918244s ago: executing program 0 (id=670):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28)
ioctl$VIDIOC_DQEVENT(r1, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080)
fsopen(&(0x7f0000000100)='sockfs\x00', 0x0)

4m19.577119003s ago: executing program 0 (id=674):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e)
fcntl$setsig(r1, 0xa, 0x2a)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x10, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@call={0x85, 0x0, 0x0, 0x59}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r7)
sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002dbd70e0fddbdf25010000000500070008000000a8227987f34462c254d8e5cf911371dd7ca493cdb5489816aae45ccaaf13fba234e636687b07a2598c736cf4be"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000800)
syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x101040)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6)

4m18.715093513s ago: executing program 0 (id=679):
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socket$netlink(0x10, 0x3, 0x14) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) (async, rerun: 32)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff45, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x107, 0x8}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4) (async)
getsockname$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000280))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
close(r3) (async)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0) (async, rerun: 64)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x403, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000340)={0x3, 0xfffffffffffffffe, 0x200100000000, 0x86, 0x0, 0x0, 0x1000001003, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x3, 0xfffffffffffffffb, 0x3, 0x0, 0x56, 0x80000006, 0xfffffffffffffffe}, 0x0, 0x0)
mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) (async, rerun: 32)
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) (rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000)

4m18.405731052s ago: executing program 0 (id=684):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x30, 0xffffffffffffffff, 0x6ac3000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xc)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f46ad154cf9276", 0x2d}, {&(0x7f0000000180)="d3340081ba60ccbb9d0000000000", 0xe}], 0x2}}], 0x1, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000500)={0x7, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x674, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb)
r5 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1})
r6 = syz_open_dev$swradio(0x0, 0x1, 0x2)
read(r6, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7ffefffd}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000200)=""/50)

4m18.247471284s ago: executing program 32 (id=684):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x30, 0xffffffffffffffff, 0x6ac3000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xc)
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000440)="a905008efd891d7b8613d33cc1aac36e8801000000cf45cbd85e6641e46f5535d6a5c55a77a6f46ad154cf9276", 0x2d}, {&(0x7f0000000180)="d3340081ba60ccbb9d0000000000", 0xe}], 0x2}}], 0x1, 0x4004040)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x4040080)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000500)={0x7, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x674, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)=""/218)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
madvise(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xb)
r5 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[0x0], 0x0, 0x0, 0x0, 0x1})
r6 = syz_open_dev$swradio(0x0, 0x1, 0x2)
read(r6, 0x0, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7ffefffd}]})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f0000000200)=""/50)

41.937524385s ago: executing program 2 (id=1905):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(0x0, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r6, 0x40044160, &(0x7f0000000200)=0xfffffffe)
r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1})
r8 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
close_range(r2, 0xffffffffffffffff, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r9 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r9, 0xc0045516, &(0x7f0000000000)=0x639)
readv(r9, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

40.624409947s ago: executing program 2 (id=1914):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x2f93, 0x10100, 0x3}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) (async)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) (async)
r5 = dup2(r4, r4)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x4000}) (async)
write$vhost_msg_v2(r5, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xfffffd1f, 0x0, 0x1, 0x2}}, 0x48)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r1, 0x25e7, 0x4000, 0x0, 0x0, 0x0) (async)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r10}, 0x18) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

40.510493908s ago: executing program 2 (id=1915):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40850) (async)
read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = getegid()
setresuid(0x0, 0x0, 0x0) (async)
fchown(r0, 0x0, r3) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xaf) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async)
syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0}) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x20) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x1)
ioctl$TCXONC(r6, 0x540a, 0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delchain={0x544, 0x65, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x4}, {0xd, 0x7}, {0xf, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_u32={{0x8}, {0x4a0, 0x2, [@TCA_U32_SEL={0x414, 0x5, {0x4, 0x1, 0x9, 0xaf, 0x2, 0x2, 0x9915, 0xf9, [{0x0, 0x8, 0x1, 0x6}, {0x10, 0x0, 0x7, 0x3}, {0x8, 0x400, 0x0, 0x6}, {0x4, 0x7, 0x81, 0x9}, {0x6, 0xa, 0x0, 0x10}, {0x7, 0x0, 0x2f240, 0x8}, {0x1, 0x2, 0x400, 0x4}, {0x1000, 0x10000, 0x48, 0x753e}, {0x9, 0x8, 0x1, 0x31000000}, {0x1, 0xba8, 0x3, 0x1}, {0xfffff801, 0x1, 0xc0, 0x4}, {0x4, 0x3, 0xf, 0x4}, {0x80000000, 0x9, 0x4, 0x6}, {0xfffffffa, 0xc58, 0xfffffff6, 0xe55}, {0x0, 0x100, 0xe5, 0x6}, {0x3, 0x4, 0x5, 0x200}, {0x0, 0x81d51600, 0x100, 0xb0}, {0x5, 0x3, 0x2, 0x1}, {0x3, 0x5c4d, 0x9, 0x9}, {0x8, 0x7ff, 0xbab, 0x10000000}, {0x31, 0x4, 0x1, 0x5}, {0x3, 0x0, 0x8, 0x3}, {0x7fff, 0x35fdf7ed, 0x80000001, 0xec77}, {0x3, 0xffffffff, 0xffff, 0x8c}, {0x7, 0xf8, 0x446, 0x6}, {0x8, 0x2, 0x885, 0x8}, {0xc, 0x0, 0x2, 0x200}, {0x6, 0x4, 0x8, 0x725}, {0x6, 0x80000001, 0x1, 0x6}, {0x78, 0x6ed76beb, 0xffff8000, 0x81}, {0x2, 0x9, 0x3, 0x7}, {0xa49, 0x230, 0x1, 0x8}, {0x0, 0x2, 0x2a, 0x4ed}, {0x7f, 0x2, 0x6, 0x7}, {0x7, 0xf1, 0x2, 0x19a}, {0x3, 0x3ff, 0x9a, 0xc}, {0xd, 0x8, 0x4c, 0x7659b1bd}, {0x81, 0x0, 0x3ff, 0xc6f}, {0x3, 0x9, 0x6, 0x9}, {0x8f5a, 0x2, 0xa6, 0xa38f}, {0xffff, 0x3a83, 0x99, 0x3}, {0x63d7, 0xca6, 0x26, 0x3}, {0x1000, 0x6, 0x0, 0x5}, {0xa, 0x2, 0x8, 0xffffffbf}, {0x767c, 0x5, 0x1, 0x80000000}, {0x81, 0x5, 0x3, 0x49e}, {0x21, 0xb4c, 0xf9, 0xa}, {0x8, 0x3, 0x0, 0x4}, {0x9, 0xc7b, 0x0, 0x2}, {0x3ff, 0x400, 0x10, 0x1}, {0x6, 0x4, 0x80, 0x10001}, {0x2, 0x6, 0x3, 0x40}, {0xa, 0xdc, 0x0, 0xc}, {0x221, 0xf5, 0x6, 0x1ff}, {0x0, 0x5, 0x7}, {0xe3, 0xfffffffe, 0x86e, 0xbd39}, {0x7d80, 0x6, 0x7, 0x8}, {0x0, 0x4, 0x6, 0x1f3f}, {0x7, 0x9, 0xff, 0x1ff}, {0x15, 0x6, 0x800, 0x10}, {0xa130, 0x80, 0x28, 0x1}, {0x1, 0x9, 0x9d, 0x7e}, {0x2, 0x6, 0x3, 0x50}, {0x1, 0x0, 0x0, 0x5}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5}}, @TCA_U32_HASH={0x8, 0x2, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0x37}, @TCA_U32_HASH={0x8, 0x2, 0x8917}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_FLAGS={0x8, 0xb, 0x200}, @TCA_U32_MARK={0x10, 0xa, {0xb, 0x10}}, @TCA_U32_FLAGS={0x8}, @TCA_U32_POLICE={0x38, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xfc, 0x8}}, @filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_POLICE={0x34, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0xe}}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x4}}]}}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_CHAIN={0x8, 0xb, 0xe61}]}, 0x544}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0)

40.240114966s ago: executing program 2 (id=1918):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x5000, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4018aee3, &(0x7f0000000140)=@arm64_core={0x0, 0x0})

40.090062599s ago: executing program 2 (id=1921):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
clock_nanosleep(0x1, 0x1, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}})
sched_setaffinity(0x0, 0x28, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
r6 = getpgrp(r2)
sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x8406, 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @xdp=0x25, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/199, 0xc7}], 0x1)
write$P9_RSETATTR(r0, &(0x7f0000000280)={0x7, 0x1b, 0x1}, 0x7)

39.965164453s ago: executing program 2 (id=1923):
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40000, 0x11)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1452c2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlilit=3,noswap'])
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f00000004c0)="76e1f0408b784413a040cacc73d574e3b938977984663b7a91ddcd04886fc59c6abc3a3b154c436f347a9c21e20e01c94f5d5ad281ec384341329de89a467bd4fc6a70099662749fcf96bf140d7c9f6d353686f13d056e7c66f95b3dc63dbc5360757b26a120decb1c8522fe846546e156ac866b259afe382c36f43590976aa24836361c4926cf5ea6b0a013cf168758fc22e7df9c4b80e6850cf271efbcb1328134ca9a144b38a53c07521dbb3e7345415fe11e7c54d0c59332ff7cf8b114c71c67f686002652c64efd314cf8e75cbd2c39cce954b025c73752c31dd9b8500dafd1e65da3432b0928195d226a8d2f53d2e8158a674b1a", &(0x7f00000000c0)=""/15, &(0x7f0000000380)="118fb848c66865b2b949cb0e38bb6344abfc6fb3cf1b49d8dd7b259b2893423c4b67cc0eb0b2ae9f932bb8865b0c9bcc4f6a3b56ca74a05ef27c29a8b04b50fe1e028a2e7ff4a63c78e61eeb528f7c8c556114e2c270404ff5e0bc1690316bdf11ce4800f022", &(0x7f00000005c0)="ec19060ba0b7932fef8d43d18bc0ad580fec9dfb42161dd698a64b02247fc070d6d82c0d54a7f7ff11e8432b5e26c061f62e450562d647f885eb9ac549fc28d1679cf2b4f086744b020c9a9df7cbc811514c63550a912bc757c482bae33249ec34413834398da15792424a2e3b16cafaab", 0x1, r0, 0x4}, 0x38)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getegid()
syz_open_dev$usbfs(&(0x7f0000000480), 0xb4, 0x80002)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
socket(0x10, 0x80002, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000800)={0x2, 0x20, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0]})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYRES64=r4], 0x44}}, 0x0)
r5 = syz_open_pts(r1, 0x0)
dup3(r5, r1, 0x0)
fanotify_init(0x20, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB="bdc2be36ff84921c2ecbe3709966fa5925cc4be2610c2a0c84e00c4feedbb86ca0ab025897ded9c2cadba0a6e523303cde8b1edff6ae27b6ab1978a3429d12af500130a51e484a4b81e8bcddcc6fe9c15f306e79f65b4170edbc6606efd9b6c3d727d9bda59084b2939862d25f057706e20d28ae72b56241e1a98bedad180e65314bf7d60333919581a289e2bd1cacd079e86e40"])
openat$rfkill(0xffffff9c, &(0x7f0000000300), 0x10000, 0x0)

39.861214282s ago: executing program 33 (id=1923):
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40000, 0x11)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"})
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1452c2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlilit=3,noswap'])
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000280)={&(0x7f00000004c0)="76e1f0408b784413a040cacc73d574e3b938977984663b7a91ddcd04886fc59c6abc3a3b154c436f347a9c21e20e01c94f5d5ad281ec384341329de89a467bd4fc6a70099662749fcf96bf140d7c9f6d353686f13d056e7c66f95b3dc63dbc5360757b26a120decb1c8522fe846546e156ac866b259afe382c36f43590976aa24836361c4926cf5ea6b0a013cf168758fc22e7df9c4b80e6850cf271efbcb1328134ca9a144b38a53c07521dbb3e7345415fe11e7c54d0c59332ff7cf8b114c71c67f686002652c64efd314cf8e75cbd2c39cce954b025c73752c31dd9b8500dafd1e65da3432b0928195d226a8d2f53d2e8158a674b1a", &(0x7f00000000c0)=""/15, &(0x7f0000000380)="118fb848c66865b2b949cb0e38bb6344abfc6fb3cf1b49d8dd7b259b2893423c4b67cc0eb0b2ae9f932bb8865b0c9bcc4f6a3b56ca74a05ef27c29a8b04b50fe1e028a2e7ff4a63c78e61eeb528f7c8c556114e2c270404ff5e0bc1690316bdf11ce4800f022", &(0x7f00000005c0)="ec19060ba0b7932fef8d43d18bc0ad580fec9dfb42161dd698a64b02247fc070d6d82c0d54a7f7ff11e8432b5e26c061f62e450562d647f885eb9ac549fc28d1679cf2b4f086744b020c9a9df7cbc811514c63550a912bc757c482bae33249ec34413834398da15792424a2e3b16cafaab", 0x1, r0, 0x4}, 0x38)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getegid()
syz_open_dev$usbfs(&(0x7f0000000480), 0xb4, 0x80002)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r4=>0x0})
socket(0x10, 0x80002, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000140), 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000800)={0x2, 0x20, '\x00', 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0]})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYRES64=r4], 0x44}}, 0x0)
r5 = syz_open_pts(r1, 0x0)
dup3(r5, r1, 0x0)
fanotify_init(0x20, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB="bdc2be36ff84921c2ecbe3709966fa5925cc4be2610c2a0c84e00c4feedbb86ca0ab025897ded9c2cadba0a6e523303cde8b1edff6ae27b6ab1978a3429d12af500130a51e484a4b81e8bcddcc6fe9c15f306e79f65b4170edbc6606efd9b6c3d727d9bda59084b2939862d25f057706e20d28ae72b56241e1a98bedad180e65314bf7d60333919581a289e2bd1cacd079e86e40"])
openat$rfkill(0xffffff9c, &(0x7f0000000300), 0x10000, 0x0)

33.342635339s ago: executing program 4 (id=1980):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x701000)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0xb285f305e6b16ca5)
bpf$PROG_LOAD(0x4, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800, 0x8, 0x2}, 0x1c)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6d9311000000f8dbdf25010000000c00030003"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000009500000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a00)=[{0x5, 0x4, 0x7, 0x9}, {0x2, 0x4, 0xb, 0xb}, {0x2, 0x2, 0x8, 0x5}], 0x10, 0x6}, 0x94)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r6}, 0x10)
bind$xdp(r2, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
syz_io_uring_setup(0x492c, 0x0, &(0x7f0000000140), &(0x7f0000000340))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCGSKNS(r8, 0x894c, &(0x7f0000000040)={'gretap0\x00', 0x200})

31.766110292s ago: executing program 4 (id=1983):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x7fffffff, 0x45894b99, 0x3, 0x4002004c2, 0xffffffffffffffff, 0x654, 0x0, 0x3fffff, 0xfffffffffffffebd, 0x5, 0x20000000008, 0x6, 0xfffffffffffffff7], 0x100000})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x90)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
splice(r1, &(0x7f0000000000)=0x70, r2, &(0x7f0000000040)=0x8, 0xfffffc00, 0xa)

31.60035594s ago: executing program 4 (id=1984):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x5, 0x1, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r1, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f13050000d8186dd6", 0xf}], 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000884}, 0x40c0080)

31.469816804s ago: executing program 4 (id=1986):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000080), 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xffff}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xffff}, 0x8)
r1 = accept4$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x80800)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={<r2=>0x0, 0x1, 0x5}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x100, 0x6, [0x7, 0x6, 0x1, 0x0, 0xa6c, 0x8]}, &(0x7f0000000300)=0x14)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x11d, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800476a010f006800000606907800000000ac1414bb861900000000000207110540aeaffbdcba3d1873f05c317ca79404000044247351e000000200000080e000000200000006ac1414aa0000000bac1414bb0000011d0707cdac1e00014e214e22b1d1ac1611d92e094c02f84e0b755d7c57d010377a0c9772b3c801bbc3f059c769d207506a4522a79cd7e3d12f4e647e20f0b63d33c8a1827e27bcafaf273b61145e53aae83b8ff885d912ed8e854d7658843086ff10ea4c71", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="218000ea9078000813124026cf09dc892e00bf39cea0f311dcc0fe05f989c31312dd88102d365675aadb1838e76f0d56ec02040700fe06e2d4c3d901577322f267f3de20a54fe71a070cf9574c3053ff7f6ac58a5c98517468fbec367998b9a9a2d0b0385a3c4e5a57ba35a4447d2f22dce2b5973573e7514f7af94f44fa5e561f93504afc0d7b76ed6fec7cb72c8340d73cd0ef8bcf7b3f23c81340b17c926506de6177aa95d5"], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x22, 0xa, 0x0) (async)
r6 = socket(0x22, 0xa, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_cmd={0x1d, 0x2, 0xffff, 0x0, 0x10, 0x6, 0x8, 0x6, 0x8b, 0x9, 0x3, 0x1, 0x45, 0x7, 0x0, 0x4, [0x2, 0x6]}})
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async)
r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid() (async)
r9 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
tkill(r9, 0xb) (async)
tkill(r9, 0xb)
close_range(r7, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000313000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f00003e4000/0x4000)=nil) (async)
mremap(&(0x7f0000313000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f00003e4000/0x4000)=nil)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg$inet(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c000)

31.331041951s ago: executing program 4 (id=1990):
r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000080)={0x80000001, 0x0, 0x1, {0x2, @raw_data="ee0dfe619f9a96c0a8b1afe652e2de70ed596d847909cb5aa5cba7f2ee9efd75f4e7c54e3e0ebe142bc76d6bde4ea9b95c443089394686734a028a5015ac3686a21c7db12d20de2d4e606ce950c5decf84b7f087d83bf2968c9b7a67bf3c328e6c937f2fc18eb38b63bb89d617bde66e2dc0e51f6624a8e6387d90aacd826c6c0d46544578ed9ccc19e470d76e5230bc78772c1d6d1bc34e0a9115920298eedd81f388cf08ab162f0f85ff7ca9559b177e95471530d924939416411ec50927ffd8dce700"}, 0xff})

31.25968836s ago: executing program 4 (id=1992):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000064}, 0xc010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
connect$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)

30.125254898s ago: executing program 5 (id=1997):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000020e125732800"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x10}, 0xc)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000300)=ANY=[], 0x100}}, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x32, 0x9})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, <r5=>r3, 0x1})
setregid(0xffffffffffffffff, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
ioctl$DMA_BUF_SET_NAME_A(r5, 0x40046201, &(0x7f0000000440)='gpuse\a\x00\x00\x00\x00\x00\x00\x00ched_re\xaf\x87lax_domain_lR\xd8\xf8\xb3_}\x16|\xee\xf9\xff\xff\xff\xff\xff\xff\xffL\x115\xda\xd7\xed\xa4\x1b,A\x96\x99\x9c\xc7hI:\xff\xe3\xb3Z\x99\xecq\xfb\x8d\x88\xd4\x1b\x05q\xa1\b\x93\xc7\xb6\x893\x9c\xa6T\x8fU\x8f2\xfa\xca\x86\x81\xbb\x15J\x8d\"\xc7\xe8\x8c\xde\\\xbe6=\x83G\x02\x00\x00\x00\t\xec\xfb\xb9\xc9\xedw\xb0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd9P\x1b[\xb5f\x10\x1d\xa9\xce#\xb7\xb9\xa7\x8f2]\xc5\xdc\xb7\xbe\xb5\xe4 b#Z\xd2\xa2L\xa67w\xa9i\x93\x12\x1d\x1b?Ilt\xc9IKc\xeew6\x9c\x88\x90\xe5\x10\xda\xe5\xaf@Y(\xc7\xa6#\xd9\xe4\a\xbf\xeb\xa5L\x15\xf8\xd9L\xcf/X\xd2\xd8M\xa8\xa1!\xf0\xcar\xdbk\xe6\bH&\x1a,\t\x85\x1e\xb7\xfe')
preadv(r2, &(0x7f0000001240)=[{&(0x7f0000000300)=""/19, 0x13}], 0x1, 0x7d9, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x7fff7ffc}]})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
unshare(0x2020600)
readv(r8, 0x0, 0x0)
r9 = getpid()
r10 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r6, &(0x7f0000000180)={r10, r2, 0xaa})
write$binfmt_script(r8, 0x0, 0x0)
setitimer(0x2, &(0x7f0000000000)={{0x0, 0xb00}, {0xffffffff}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

29.947596211s ago: executing program 5 (id=2003):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
lseek(r0, 0xfffffffffffffffe, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000003b40), 0xa8c, 0x2080)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r7 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7)
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000007000390229bd7000fbdbdf2507000000", @ANYRES32=r9, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file1\x00', 0x0, 0x8010, r6}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xccc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x96, &(0x7f0000000180)=""/150, 0x40f00, 0x2, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000380)=[r0, r0, r10, r0, r0, r0, r0], &(0x7f00000003c0)=[{0x1, 0x5, 0x9, 0x6}, {0x3, 0x3, 0xf, 0x7}, {0x0, 0x1, 0x3, 0x6}, {0x5, 0x2, 0x1, 0x1}, {0x5, 0x1, 0xe, 0x5}, {0x4, 0x3, 0xf, 0xc}, {0x3, 0x1, 0x7, 0x6}, {0x0, 0x1, 0x5, 0x1}], 0x10, 0x7}, 0x94)

29.872053764s ago: executing program 5 (id=2006):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
syz_io_uring_setup(0x1e1e, &(0x7f0000000140)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.stat\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0)
close(r12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0))
ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18)
ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_delneigh={0x4c, 0x1d, 0x20, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, r5, 0x10, 0x44, 0xb}, [@NDA_CACHEINFO={0x14, 0x3, {0x0, 0x2, 0xcf7, 0x5}}, @NDA_PROBES={0x8, 0x4, 0x4}, @NDA_CACHEINFO={0x14, 0x3, {0x8, 0x7ff, 0x7, 0x81}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

29.370296946s ago: executing program 5 (id=2010):
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2000000002, 0x9, 0x3}}, 0x28)
read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x2020)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r3, 0x0, r2, 0x0, 0x6, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000140)={0x1, 0x2, 0x12})
pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00')
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f0000000300)={0x0, <r5=>0x0})
ioprio_get$pid(0x2, r5)

26.339761804s ago: executing program 5 (id=2020):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (rerun: 64)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) (async)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[0x0, &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) (async)
r2 = getpid()
syz_pidfd_open(r2, 0x0) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000380)=ANY=[@ANYBLOB="2f0b00000000000007500000000112050000030000000000000004000000000000000d0000000000000080000000000000000104000000000000ff070000000000000300000000000000810000000000000002000000000000000502740001030000000001000000"], 0x68) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000e1c6af13e3cbc974f28e714a1fc7dd9c609d7b93d00b927404a0a0c4d5afdb98335e988dcb6f6c32b3d486b1385cf7939be967030194c7a6927838569feead7b1394b4f3a1fba8cb525a3c49c6e90434c611e6a6b80015ae6f3100791d76c70e0b946e72a99cba22f4ae0c66cbce7625cc5d1de5bdd91b110e30b320b039641b000a4887214db2b0ce61a09c0d85fe0d1155a46b32709998e25f183da119cc06c13d777bc5fec2cbff658c09d3140300000000000000825839711e59614f3b1a20ab7d138525821aa3b601581e78ca096f5291f04b47d2c601fdb03a18251c00119f21a611b282661eaa532b4cff30194204", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ee09000008009f0002000000080026006c090000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
listen(0xffffffffffffffff, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async, rerun: 32)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r7, 0xf5)
syz_fuse_handle_req(r7, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d14566d540bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2fad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654a7aaef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x408, 0x6, 0x0, 0x0, 0x6000, '\x00', 0x7ffd, 0x7ff, 0x100000000, 0x6, {0x6, 0xe}, {0x20000000000004}, {0x100000000, 0x9}, {0x8, 0xf}, 0x4, 0x80000b, 0x5, 0x3}}}}) (async)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7}, 0x1, 0x8, 0xffffffff, 0x8, r2, r2, 0x6f8a})

26.090120797s ago: executing program 5 (id=2022):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1c000000)

25.949139699s ago: executing program 34 (id=2022):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x1c000000)

16.22971236s ago: executing program 35 (id=1992):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000064}, 0xc010)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = dup(r5)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7])
connect$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)

3.040070487s ago: executing program 7 (id=2162):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x290040, 0x80)
r2 = openat$vsock(0xffffff9c, &(0x7f00000000c0), 0x18000, 0x0)
renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0xfffffffe, 0x4, {0xa, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xf9b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xb, 0x0, 0xffffffffffffffff, @void, @value, @void, @void, r8}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x19, 0x10, 0x0, @void, @value, @void, @void, r8}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0d00000018000000", @ANYBLOB="84f2f6772866a8106b934ffd020062deb0f7", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r8], 0x20)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./bus\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r9, 0xffffffffffffffff, 0x30, 0x8, 0x0, @void, @value, @void, @void, r8}, 0x20)
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@netkit={@void, @value=r10, @void, @void, r8}}, 0x1c)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r11=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r11, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r2, r2, 0xd, 0x2028, 0x0, @void, @void, @value=r11, @void, r8}, 0x20)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r0)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="40e11b34", @ANYRES16=r12, @ANYBLOB="030a29bd7000ffdbdf251100000008001500c000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20048000}, 0x44000)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r15=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r13, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x80)

2.938911304s ago: executing program 7 (id=2164):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008007691", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0xfffffffc, {0x8}}, 0x14}}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x35)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x6)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x3c, r10, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xe4, r10, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r11 = openat$hwrng(0xffffff9c, &(0x7f00000003c0), 0x81, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x12, &(0x7f00000005c0)=@raw=[@exit, @btf_id={0x18, 0xc2f9e30e9c402372, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x3, 0x6, 0x4, 0x8, 0xfffffffffffffffc}], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94)

2.880116032s ago: executing program 7 (id=2165):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x90, 0x30, 0x8, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x34, 0x2, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xc41a}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x3a06c3b2d08020d4)
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0xb4)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/156, 0x9c}, {&(0x7f0000002480)=""/165, 0xa5}, {&(0x7f0000002540)=""/74, 0x4a}], 0x5, &(0x7f00000025c0)=""/184, 0xb8}, 0xdb}], 0x1, 0x2, 0x0)
syz_usbip_server_init(0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002840)={0x11, 0xb, &(0x7f0000002900)=ANY=[@ANYBLOB="407ff0183ebbd7bb032682388e1bc99568ff0a00000000000000fc9ef74b1fa522d3e1146d1f7f22dd45a80067cd2c4be9213a9b2092dba16ab1821a142483d235592e02c06635ba9a040cdaaa50defb9da145edcaabae1306be1b7c48d12df3e0f36448964e6c811f"], &(0x7f0000002780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x10200, 0x0)
close(0x3)
open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000002000062320000000000000009ffff0000000000"], 0x0)
read$FUSE(r4, &(0x7f0000006500)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3, 0x0, 0x1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18)
rseq(0x0, 0x0, 0x0, 0x0)
r6 = mq_open(&(0x7f00000026c0)='bvtadv_qlave_1\xbb\x96$X\x86\v\xe0v\xa1\xc8\x90\xd7\xc84\xb9u\xec4[\x14\xac\xd1\xdbn5\xf3U\fJ\xcbV\xec\xc9\xdck\xfa\x11\xcd\x14\xb7\x94\xfd\xa7R\v\xa0\xf6\x8e\xaa\xf7\x11\x1a\xfe\xe0z\x80\xa0\xeb\x9d\xb9\x1b8\xc8\xd6\x955\vy\x1f\xbf\b\xac\xf8\xf1\xf9M_:\xebvM\xcf\xc8\xe5DE|\x1e\xb9\x98\xef\xf8\x97\xec\x89~\x01\x7f\xd0\xfdi', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r6, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)

1.879977186s ago: executing program 6 (id=2171):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x8, 0x0, [{0x1, 0x5, 0x0, 0x0, @sint={0x627, 0x7}}, {0x8, 0x1, 0x0, 0x0, @adapter={0x8, 0x3a6, 0x6, 0xfffffc00, 0xfffffff9}}, {0x10, 0x1, 0x1, 0x0, @sint={0x2, 0xffffffff}}, {0x484, 0x3, 0x0, 0x0, @adapter={0x1, 0xb9, 0xfffffffffffffff5, 0x2, 0x24727da}}, {0x7ff, 0x4, 0x1, 0x0, @adapter={0x6, 0x100, 0x7, 0xffffffff, 0x8}}, {0xe, 0x5, 0x0, 0x0, @irqchip={0xfffffff7, 0x7}}, {0x7f, 0x3, 0x0, 0x0, @irqchip={0x1, 0xc6}}, {0x7, 0x1, 0xa7d10c9d6c810da5, 0x0, @msi={0x7180, 0x7ff, 0x8, 0x6}}]})
r1 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40)
getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = openat$vcsu(0xffffff9c, &(0x7f00000002c0), 0xa00, 0x0)
connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x6)
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000380)=0x4)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000003c0)={0x3, 'gre0\x00', {0x8001}, 0x2})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='siox_set_data\x00', r2, 0x0, 0x4}, 0x18)
ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000480))
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000004c0)=""/248, &(0x7f00000005c0)=0xf8)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000600)={0x10201, 0x0, 0x10000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc0fc4111, &(0x7f0000000640)={0x9, [0x6, 0x10001, 0xb1], [{0x8, 0x10, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x100}, {0x7f, 0x7ff, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xe, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4}, {0xfffffffa, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x10001, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x5, 0x1, 0x1, 0x1}, {0xfff, 0xe8d, 0x1, 0x0, 0x1}, {0x3, 0xfffffff1, 0x1, 0x1, 0x1, 0x1}, {0x25, 0x9, 0x0, 0x0, 0x1, 0x1}], 0xfffffffd})
ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0)
r4 = openat$cgroup(r2, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000b80)={{r3}, 0x0, 0x1a, @unused=[0x8000000000000001, 0xd3, 0x5], @devid=r5})
sendmsg$nl_route(r2, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)=@ipv6_getnetconf={0x24, 0x52, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x80000000}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000)
socket$kcm(0x29, 0x7, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80))
r6 = socket(0x8, 0xa, 0x7)
mknodat(r2, &(0x7f0000001cc0)='./file0\x00', 0xc000, 0xf)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3dcd}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x58848)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001e40)={0x10001, 0x0, 0x58000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000001e80))

1.664527631s ago: executing program 7 (id=2173):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_helper', 0x149a82, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000540)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x7, 0x7, 0xffff, 0x7, 0x4}}, 0x118)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)

1.660767256s ago: executing program 7 (id=2175):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r5 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x4cbe8)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@empty}, @typed={0x15, 0x0, 0x0, 0x0, @binary="855eb45b5a76b1ca6e824228e67e092af8"}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$packet(0x11, 0x3, 0x300) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async)
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f0000000400)={0xa3, 0x0, &(0x7f0000000340)})
recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100))

1.529935837s ago: executing program 6 (id=2176):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000009700000085000000070000009500000800000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0)
r5 = openat$ipvs(0xffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002540)={{{@in6=@loopback, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe4)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0xf37, 0x4e24, 0xb90, 0x2, 0x20, 0x40, 0x11, r1, r6}, {0x3, 0x9, 0xe884, 0x5a, 0xc8f6, 0x7fffffff, 0x80000001, 0x7fffffff}, {0xfffffffffffffff8, 0x0, 0x8, 0x4}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x3506, 0x2, 0x2, 0x8, 0x2, 0x3, 0x9}}, 0xe4)
r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001040))
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000010c0)={0x60, 0x0, &(0x7f000045d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x70, 0x0, 0xe4, 0x1, 0x3a, 0x0, 0xa}) (async)
ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000010c0)={0x60, 0x0, &(0x7f000045d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x70, 0x0, 0xe4, 0x1, 0x3a, 0x0, 0xa})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) (async)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) (async)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r11, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
r12 = socket(0x2, 0x3, 0x1)
setresuid(0xee00, 0xee01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r13=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x85, 0x0, 0x2, 0x0, 0xc, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2}, 0x94)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a})
getsockopt(r12, 0xff, 0x100000000000001, 0x0, 0x0) (async)
getsockopt(r12, 0xff, 0x100000000000001, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000002640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="08002bbd7000fddbdf250d000000060028000200000008002b000800000008000b00ae0adada1609e37c3d794e0b0000080039000d000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r9, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40054}, 0x10)

1.528982823s ago: executing program 6 (id=2177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0xa, 0x0, 0x11)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x1, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xffffff15})
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x40010, 0xffffffffffffffff, 0x219bb000)
fchown(r3, 0xee01, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x22041)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

1.433687561s ago: executing program 1 (id=2178):
socket$inet_sctp(0x2, 0xb54e8e36cc2dc254, 0x84) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async, rerun: 32)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32)
sigaltstack(&(0x7f00000001c0)={&(0x7f0000005c40)=""/4069, 0x80000000, 0xfe5}, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x751d01, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x4, 0x9}) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "e2599803"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async, rerun: 32)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xaaa, @local, 0x103, 0x801}, 0x20) (async, rerun: 32)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async, rerun: 32)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67725b26865f69643d", @ANYRES8=r1]) (async)
read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x5, 0x34014c40, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x10}}, 0x50)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0xad0, 0x7fff, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0xa, 0xffffffffffffffff, 0x9, 0xe0, 0x2, 0x80800006}, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

1.432279524s ago: executing program 3 (id=2179):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0)

1.422490304s ago: executing program 6 (id=2180):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, {[@end]}}}}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
socket$key(0xf, 0x3, 0x2)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe4)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000880)=ANY=[@ANYBLOB="c472577318eaae43cdb525350000002f0000e4111ae427ff000086c280b8c49b959600", @ANYRES32=r1, @ANYBLOB="79be11ef7e1ef2347cf12193879b518f7b518d185ca5a7a87889f8801ad6e6de311c6eb5e5093bce4e44907d9086dfe8086e6d38103c5a8884feaa2ee92a7847b87bad1c558dc1b210262c3d17f90a7d9dcd325dfaf6a527369cbed6c54bd913f9181e9da001943eac2bf2ee90253e559a63f6f2afeb0748ff5b0dc196b6b507d815abd13fece70e4e46d8a9e3d028c4f372e5fbffaa44df61d33a8f83e05b99b49d5a31dac2e800"], 0xc4}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vga_arbiter(0xffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYBLOB="05000000000000000000000056e744e03ad3d831b3365857524ce33459f7403668bc74f33f658e03b137ec1e26e085d3de2dac571bc1a1caccdb8d993adc06be6973e0914aac2c8b9c2fc611a46c6f5aa9a8ab5503db3f1e5f", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40585414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x20)
setfsgid(0xee00)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')

1.422171795s ago: executing program 3 (id=2181):
fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000800010000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5421400020077673000000000000000000000000000060006004e230000"], 0x54}}, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x4008000) (async, rerun: 32)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (rerun: 32)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x2000000}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x48) (async)
migrate_pages(r0, 0xa94b, &(0x7f0000000b80), &(0x7f0000000bc0)=0x27e04079) (async)
umount2(&(0x7f0000000340)='./file0\x00', 0x0) (async)
r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000b00)=0x6) (async)
openat$dsp(0xffffff9c, &(0x7f0000000300), 0x400000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) (rerun: 64)
mount(&(0x7f0000000040)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100)='hfs\x00', 0x18001, 0x0)

1.360128608s ago: executing program 1 (id=2182):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000001c0))
mprotect(&(0x7f000041c000/0x4000)=nil, 0x4000, 0x4000008)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0x0, 0x11, 0x148, 0xf4, 0x0, 0x184, 0x2a8, 0x2a8, 0x184, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {}, {}, 0x67, 0x3, 0x2}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x9}}, @common=@unspec=@limit={{0x3c}, {0x10001, 0x2, 0xa, 0x8, 0x5, 0x4}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0x4, 0x4, 0x6}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'macvtap0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x274)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8, &(0x7f0000000200)=[{0x0, 0x100000be63, 0x9}], 0x1, 0x1000009b, 0x0, 0x0, 0x0, 0xfc})

1.168310568s ago: executing program 3 (id=2183):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbff00001400000000000000850000000e00000085000000070000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18)
mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) (async)
mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = socket(0x1e, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xfffffffc}, 0x1c)
getsockname$packet(r0, 0x0, &(0x7f0000000440)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (rerun: 32)
getsockname$netrom(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async, rerun: 32)
r1 = socket(0x1, 0x803, 0x0) (rerun: 32)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000100000100001400128009000100626f6e64000000000400028008000300", @ANYRES32=r2, @ANYBLOB="729b3f175ea39955dcb09a1ecec34a4144d0ef711c4f8f79b0ded6b6bac5d32f132671e87990ecedb7de2fbde54e523eeb2bf981100e2876055d9178ead9997ca1c84f86805a558b13c1ab8f5aebd89e3dff4b741686440f2e23e622ac0f63b0d80f74f416aeb39ce669839a763a8b2f955d9c7f4d513c4fb224bc8a9a33bd40eda4b5d3fcb311a42b0b5d5b576e202d55aeb16179bd33cb05d3b7a0cb454c3f5a5e658f8fe17a2a90fe65b71f96d421e4b70022a8122bc70257db2ff89f7e398f713cabe90f4ab22064ab4308d3c3"], 0x3c}}, 0x24000840) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x80}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r5, &(0x7f0000001540), 0x0, 0x0) (async, rerun: 32)
r7 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) (rerun: 32)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x0, 0x8, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0xfffffffb, 0x1c4ba80ff697ec1, 0x3, 0x0})
close(r6)

1.049673858s ago: executing program 7 (id=2184):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
creat(0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000001700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001280)="57c5", 0x2}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
open$dir(0x0, 0x1e9240, 0x180) (async)
open$dir(0x0, 0x1e9240, 0x180)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x3}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sendmmsg$inet6(r7, &(0x7f0000002940), 0x40000000000017d, 0x811)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.049484103s ago: executing program 1 (id=2185):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x1410, 0x20, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)

874.73074ms ago: executing program 1 (id=2186):
r0 = syz_clone(0x24008000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, <r3=>0xffffffffffffffff}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) (async)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r7 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x70e9, 0xffffffff, 0x8000, 0x3e, 0x1, 0x3e, 0xdc, {0x0, @in6={{0xa, 0x4e23, 0xfffff801, @mcast1, 0xcb5}}, 0x7f, 0xfffff801, 0x80, 0x1, 0x4}}, &(0x7f0000000080)=0xb0) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000640)='xen_mmu_set_p4d\x00', r4, 0x0, 0x7}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, 0x0, &(0x7f0000001c40)=r6}, 0x20)
unshare(0x64000600) (async)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xd, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="180000006400000000000000010000006083099cfcc5ced500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300008420000085000000720000009500000000000000c1f6a0975a13e04bcf22f4b4aae0a125d4a65179b55e4f3ee24759839bfc7da828688b29627324f00a2b4c39014362e4b7a0a38a3a397958f27c55e063a0351b"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) (async)
r9 = open(0x0, 0x0, 0x2)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d7927552c53846eed"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) (async)
r11 = socket(0x15, 0x5, 0x0)
getsockopt(r11, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) (async)
move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000e85000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0)

707.648193ms ago: executing program 1 (id=2187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_open_dev$MSR(&(0x7f0000000040), 0xf4b6, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd2d, 0x25dfdbfc, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x57, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x0, 0x20, 0x3}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)

579.358602ms ago: executing program 3 (id=2188):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x0, 0x2, 0x4}, 0xa4ca, 0x0, 0x0, 0x6, 0x2, 0x18, 0xb, 0xe, 0x3, 0x9, {0x10001, 0x7, 0x2, 0x7, 0x2, 0x7fffffff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4c840}, 0x0)

509.720793ms ago: executing program 3 (id=2189):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc4001}]})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000080))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

509.389176ms ago: executing program 1 (id=2190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="040014000a000100000000000000000008"], 0x30}}, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa)
write$cgroup_int(r1, &(0x7f0000000040)=0xa02, 0x12)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0xffffffffffffff3d, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0)
landlock_restrict_self(r2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r7 = getpgid(0x0)
syz_pidfd_open(r7, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

509.144897ms ago: executing program 6 (id=2191):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/handlers\x00', 0x1800, 0x0)
preadv(r0, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/204, 0xcc}], 0x1, 0x5, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
iopl(0x3)

448.740581ms ago: executing program 6 (id=2192):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0)
r5 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0)
write$FUSE_INTERRUPT(r5, 0x0, 0x0)
r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80000)
lseek(0xffffffffffffffff, 0x1, 0x1)
mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x14891, &(0x7f0000000700)=ANY=[@ANYRESOCT=r6, @ANYRES16=r1, @ANYRESOCT=r6, @ANYRES16=r3, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRES32=r4])
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000500)="240f3566b8500000000f23d00f21f86635300000090f23f80fc79800008fc9f8011c0bd8766766c7442402020000006766c744240600000000670f0114243e0fc71d0fd1c86766c7442400d64d00006766c7442402c7f743416766c744240600000000670f011c24660fc777b0", 0x6d}], 0x1, 0x31, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x58000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r11 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r10)
r12 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r12, r11, r12}, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}, 0x0, 0x30})
syz_open_dev$sndmidi(&(0x7f0000000280), 0x3e9e, 0x84500)
ioctl$KVM_NMI(r9, 0xae9a)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})

0s ago: executing program 3 (id=2193):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000300)=ANY=[], 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000300)={0x9, 0x81, 0x5, 0x0, 0x5})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r2, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r5, 0x5452, &(0x7f0000000240)=""/77)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002)
write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
sendmmsg$sock(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x549000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r8, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local})

kernel console output (not intermixed with test programs):

147][ T1173] vhci_hcd vhci_hcd.3: stop threads
[  337.510779][ T1173] vhci_hcd vhci_hcd.3: release socket
[  337.513040][ T1173] vhci_hcd vhci_hcd.3: disconnect device
[  337.513359][ T6089] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  337.547537][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1567'.
[  337.665064][ T6089] usb 6-1: not running at top speed; connect to a high speed hub
[  337.669757][ T6089] usb 6-1: config 7 has an invalid interface number: 44 but max is 0
[  337.672346][ T6089] usb 6-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  337.684990][ T6089] usb 6-1: config 7 has an invalid interface number: 148 but max is 0
[  337.687651][ T6089] usb 6-1: config 7 has 2 interfaces, different from the descriptor's value: 1
[  337.690503][ T6089] usb 6-1: config 7 has no interface number 0
[  337.692542][ T6089] usb 6-1: config 7 has no interface number 1
[  337.694784][ T6089] usb 6-1: config 7 interface 44 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  337.698342][ T6089] usb 6-1: too many endpoints for config 7 interface 148 altsetting 59: 53, using maximum allowed: 30
[  337.701948][T12278] Invalid ELF header magic: != ELF
[  337.702185][ T6089] usb 6-1: config 7 interface 148 altsetting 59 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  337.708354][ T6089] usb 6-1: config 7 interface 44 has no altsetting 0
[  337.710420][ T6089] usb 6-1: config 7 interface 148 has no altsetting 0
[  337.714347][ T6089] usb 6-1: New USB device found, idVendor=1011, idProduct=3198, bcdDevice=1e.2d
[  337.717244][ T6089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.720001][ T6089] usb 6-1: Product: Л
[  337.721331][ T6089] usb 6-1: Manufacturer: 硎䣽痓浥㋼ྉ媺Ô핮橖屴∷跫ᴢ뛌瞟ĵꕻ씺砀옄蚿蒇굪㦷徽贓ᮬ�楎鈅簦뎭潳ヌ髉ꌰ��Ꮃ엋췹��⮹왓��ల眄ᖬ⮶蚄㿋筵涴렿失�⻱꼓�ꨰ桿郔��먲鹃☋コ监Ḿ�
[  337.729560][ T6089] usb 6-1: SerialNumber: 싅�舙ꥉ﷗跾ﰈ㟙㪴芳�릌姠馧淩ᑒ뺯䨴㼜᜻逅�꜊谸智᠕矛♲�멺濠뫫Ⱬﯜ�ඨ簭䜌︰㘩Ḛ�圇�鱸䳣꽰霧�꽎䶋纑
[  338.062622][T12289] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[  338.065247][T12289] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  338.073726][T12289] vhci_hcd vhci_hcd.0: Device attached
[  338.355769][ T6323] usb 42-1: SetAddress Request (18) to port 0
[  338.358671][ T6323] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[  338.543306][T12290] vhci_hcd: connection closed
[  338.544536][ T6332] vhci_hcd vhci_hcd.2: stop threads
[  338.548259][ T6332] vhci_hcd vhci_hcd.2: release socket
[  338.550235][ T6332] vhci_hcd vhci_hcd.2: disconnect device
[  338.986951][ T6323] usb 42-1: enqueue for inactive port 0
[  339.525747][T12315] ntfs3(md0): try to read out of volume at offset 0x0
[  339.725598][ T6323] usb usb42-port1: attempt power cycle
[  339.825105][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  339.828764][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.275644][ T6089] option 6-1:7.44: GSM modem (1-port) converter detected
[  340.298709][ T6089] option 6-1:7.148: GSM modem (1-port) converter detected
[  340.301842][T12323] binder: 12322:12323 ioctl 0 80000040 returned -22
[  340.306241][ T6089] usb 6-1: USB disconnect, device number 22
[  340.309007][ T6089] option 6-1:7.44: device disconnected
[  340.316235][ T6323] usb usb42-port1: unable to enumerate USB device
[  340.333550][ T6089] option 6-1:7.148: device disconnected
[  340.465410][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.468182][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  340.486174][T12348] loop2: detected capacity change from 0 to 7
[  340.488822][T12348] Dev loop2: unable to read RDB block 7
[  340.490594][T12348]  loop2: unable to read partition table
[  340.492473][T12348] loop2: partition table beyond EOD, truncated
[  340.494544][T12348] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  340.515869][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'.
[  340.745342][   T54] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  340.905370][   T54] usb 7-1: Using ep0 maxpacket: 16
[  340.914973][   T54] usb 7-1: too many endpoints for config 1 interface 0 altsetting 47: 33, using maximum allowed: 30
[  340.918526][   T54] usb 7-1: config 1 interface 0 altsetting 47 endpoint 0x1 has invalid wMaxPacketSize 0
[  340.921662][   T54] usb 7-1: config 1 interface 0 altsetting 47 bulk endpoint 0x1 has invalid maxpacket 0
[  340.924884][   T54] usb 7-1: config 1 interface 0 altsetting 47 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  340.931778][   T54] usb 7-1: config 1 interface 0 has no altsetting 0
[  340.943569][   T54] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  340.946655][   T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.949177][   T54] usb 7-1: Product: syz
[  340.950514][   T54] usb 7-1: Manufacturer: syz
[  340.952090][   T54] usb 7-1: SerialNumber: syz
[  341.665932][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  341.668479][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.180676][T12414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  342.185201][T12414] block device autoloading is deprecated and will be removed.
[  342.255764][T12422] wireguard0: entered promiscuous mode
[  342.257662][T12422] wireguard0: entered allmulticast mode
[  342.330462][T12425] binder: 12421:12425 ioctl 4008af74 800028c0 returned -22
[  342.382239][  T980] usb 44-1: device descriptor read/8, error -110
[  342.777282][  T980] usb usb44-port1: attempt power cycle
[  342.996131][T12437] fuse: Bad value for 'user_id'
[  342.997914][T12437] fuse: Bad value for 'user_id'
[  343.000474][   T40] kauditd_printk_skb: 26 callbacks suppressed
[  343.000484][   T40] audit: type=1326 audit(1765849269.390:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.1609" exe="/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf70ad579 code=0x0
[  343.359874][  T980] usb usb44-port1: unable to enumerate USB device
[  343.375709][ T6323] usb 7-1: USB disconnect, device number 19
[  343.398645][T12461] netlink: 'syz.2.1616': attribute type 10 has an invalid length.
[  343.401123][T12461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1616'.
[  343.640342][T12472] smc: net device wlan1 applied user defined pnetid SYZ1
[  343.642840][T12472] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1
[  343.830171][T12482] bridge0: entered promiscuous mode
[  343.944959][T12489] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  343.947132][T12489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  343.950192][T12489] vhci_hcd vhci_hcd.0: Device attached
[  343.955856][T12491] vhci_hcd: connection closed
[  343.956063][ T1173] vhci_hcd vhci_hcd.4: stop threads
[  343.959526][ T1173] vhci_hcd vhci_hcd.4: release socket
[  343.961380][ T1173] vhci_hcd vhci_hcd.4: disconnect device
[  344.376066][   T40] audit: type=1326 audit(1765849270.759:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.388580][   T40] audit: type=1326 audit(1765849270.759:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.395363][   T40] audit: type=1326 audit(1765849270.759:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.417435][   T40] audit: type=1326 audit(1765849270.759:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.424278][   T40] audit: type=1326 audit(1765849270.759:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.437443][   T40] audit: type=1326 audit(1765849270.759:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.444141][   T40] audit: type=1326 audit(1765849270.759:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.457446][   T40] audit: type=1326 audit(1765849270.759:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  344.473250][   T40] audit: type=1326 audit(1765849270.759:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12508 comm="syz.1.1629" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f87598 code=0x7ffc0000
[  345.038614][T12538] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  345.182096][T12547] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.226295][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'.
[  345.241560][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1639'.
[  345.299839][T12547] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.434226][T12547] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.509179][T12547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.540597][T12566] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.578370][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.581739][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  345.690141][  T103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.707065][  T103] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.732515][  T103] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.798312][  T103] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.058416][  T980] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  346.208517][  T980] usb 6-1: Using ep0 maxpacket: 32
[  346.212623][  T980] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  346.215242][  T980] usb 6-1: config 0 has no interface number 0
[  346.217196][  T980] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  346.220771][  T980] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  346.224392][  T980] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  346.227990][  T980] usb 6-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  346.228083][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.231635][  T980] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  346.234206][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.240090][  T980] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  346.243649][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.246199][  T980] usb 6-1: Product: syz
[  346.247862][  T980] usb 6-1: Manufacturer: syz
[  346.249881][  T980] usb 6-1: SerialNumber: syz
[  346.253071][  T980] usb 6-1: config 0 descriptor??
[  346.255889][T12574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  346.265498][  T980] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input23
[  346.276673][ T5334] usb 6-1: BOGUS urb xfer, pipe 1 != type 3
[  346.290798][    C2] bcm5974 6-1:0.119: trackpad urb failed: -1
[  346.580176][T12580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'.
[  346.583099][  T980] usb 6-1: USB disconnect, device number 23
[  346.589271][T12580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1647'.
[  346.778923][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.781704][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.818483][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  346.821551][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.189147][  T980] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  347.329281][  T980] usb 6-1: device descriptor read/64, error -71
[  347.569536][  T980] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  347.699377][  T980] usb 6-1: device descriptor read/64, error -71
[  347.750898][   T54] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  347.811365][  T980] usb usb6-port1: attempt power cycle
[  347.899580][   T54] usb 7-1: Using ep0 maxpacket: 32
[  347.902972][   T54] usb 7-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  347.905832][   T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.910126][   T54] usb 7-1: config 0 descriptor??
[  347.915163][   T54] usb 7-1: dvb_usb_v2: found a 'Anysee' in warm state
[  347.917557][   T54] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  347.921806][   T54] dvb_usb_anysee 7-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  348.121564][T12604] overlay: filesystem on ./file0 is read-only
[  348.169712][  T980] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  348.201682][  T980] usb 6-1: device descriptor read/8, error -71
[  348.235225][T12604] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  348.237493][T12604] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  348.237601][T12611] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  348.242295][T12604] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  348.244175][T12604] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  348.449008][ T6089] usb 7-1: USB disconnect, device number 20
[  348.450990][  T980] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  348.480365][  T980] usb 6-1: device descriptor read/8, error -71
[  348.590273][  T980] usb usb6-port1: unable to enumerate USB device
[  348.638044][   T40] kauditd_printk_skb: 158 callbacks suppressed
[  348.638055][   T40] audit: type=1326 audit(1765849275.017:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12617 comm="syz.3.1658" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x0
[  349.277684][T12627] fuse: Unknown parameter 'ÔæýŠÅm!O2*?‹K-ˆã’õ%¹fœî¾¹ÆÿÌÇm'
[  349.574642][T12641] overlayfs: failed to resolve './file1': -2
[  350.479400][T12648] netlink: 'syz.3.1666': attribute type 2 has an invalid length.
[  350.485610][T12644] NILFS (nbd1): device size too small
[  350.877432][T12653] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  350.984323][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'.
[  350.988524][T12654] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1667'.
[  350.994660][T12654] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1667'.
[  351.023403][T12653] /dev/sr0: Can't open blockdev
[  351.344205][  T225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.346899][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.477601][T12675] ufs: You didn't specify the type of your ufs filesystem
[  351.477601][T12675] 
[  351.477601][T12675] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  351.477601][T12675] 
[  351.477601][T12675] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  351.489583][T12675] ufs: ufs_fill_super(): bad magic number
[  351.521268][T12679] fuse: Unknown parameter 'rootmode200000'
[  351.823501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.992240][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.995731][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.271881][T12693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  352.273923][T12693] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  352.276685][T12693] vhci_hcd vhci_hcd.0: Device attached
[  352.376588][T12694] vhci_hcd: connection closed
[  352.378070][ T1144] vhci_hcd vhci_hcd.2: stop threads
[  352.384230][ T1144] vhci_hcd vhci_hcd.2: release socket
[  352.386429][ T1144] vhci_hcd vhci_hcd.2: disconnect device
[  352.843379][T12706] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  352.847188][T12706] overlayfs: missing 'lowerdir'
[  354.720315][   T40] audit: type=1326 audit(1765849281.103:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  354.734670][   T40] audit: type=1326 audit(1765849281.113:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  354.759907][   T40] audit: type=1326 audit(1765849281.113:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  354.773859][   T40] audit: type=1326 audit(1765849281.113:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  354.781427][   T40] audit: type=1326 audit(1765849281.113:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  354.798604][   T40] audit: type=1400 audit(1765849281.183:805): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12756 comm="syz.2.1695"
[  354.811584][   T40] audit: type=1400 audit(1765849281.193:806): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12756 comm="syz.2.1695"
[  354.822823][   T40] audit: type=1400 audit(1765849281.193:807): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12756 comm="syz.2.1695"
[  354.836932][   T40] audit: type=1400 audit(1765849281.193:808): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12756 comm="syz.2.1695"
[  354.843634][   T40] audit: type=1400 audit(1765849281.193:809): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12756 comm="syz.2.1695"
[  355.085267][T12763] netlink: 'syz.3.1693': attribute type 1 has an invalid length.
[  355.099174][T12763] 8021q: adding VLAN 0 to HW filter on device bond2
[  355.103794][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.106488][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.114539][T12763] bond2: (slave dummy0): making interface the new active one
[  355.117692][T12763] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  355.333306][ T6089] libceph: connect (1)[c::]:6789 error -101
[  355.336002][ T6089] libceph: mon0 (1)[c::]:6789 connect error
[  355.338920][ T6089] libceph: connect (1)[c::]:6789 error -101
[  355.340924][ T6089] libceph: mon0 (1)[c::]:6789 connect error
[  355.375045][T12786] dlm: no local IP address has been set
[  355.377150][T12786] dlm: cannot start dlm midcomms -107
[  355.384362][T12786] netlink: 'syz.4.1700': attribute type 12 has an invalid length.
[  355.488402][T12780] ceph: No mds server is up or the cluster is laggy
[  356.013311][T12810] loop2: detected capacity change from 0 to 7
[  356.017132][T12810] Dev loop2: unable to read RDB block 7
[  356.019103][T12810]  loop2: unable to read partition table
[  356.021009][T12810] loop2: partition table beyond EOD, truncated
[  356.022983][T12810] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  356.092057][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.103651][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.113809][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.118433][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.123919][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.131004][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.138687][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.141740][T12814] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  356.152474][T12814] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  356.206079][T12820] dlm: no locking on control device
[  357.105230][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.108011][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.194089][T12852] syzkaller0: entered promiscuous mode
[  357.197215][T12852] syzkaller0: entered allmulticast mode
[  357.200123][T12841] bridge0: port 1(erspan0) entered blocking state
[  357.202293][T12841] bridge0: port 1(erspan0) entered disabled state
[  357.205947][T12841] bridge0: port 1(erspan0) entered blocking state
[  357.208155][T12841] bridge0: port 1(erspan0) entered forwarding state
[  357.588864][T12854] kAFS: unable to lookup cell ''
[  357.648000][T12857] netlink: 'syz.2.1719': attribute type 10 has an invalid length.
[  357.753107][T12858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  357.755285][T12858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  357.759874][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.760280][T12858] vhci_hcd vhci_hcd.0: Device attached
[  357.762503][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.038833][ T6089] usb 42-1: SetAddress Request (22) to port 0
[  358.041438][ T6089] usb 42-1: new SuperSpeed USB device number 22 using vhci_hcd
[  358.460509][T12860] vhci_hcd: connection reset by peer
[  358.463318][ T1173] vhci_hcd vhci_hcd.2: stop threads
[  358.465840][ T1173] vhci_hcd vhci_hcd.2: release socket
[  358.468163][ T1173] vhci_hcd vhci_hcd.2: disconnect device
[  358.812891][T12857] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  358.815342][T12857] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  358.825198][T12857] team0: Device netdevsim0 is of different type
[  358.828954][T12855] macvlan0: entered promiscuous mode
[  358.830903][T12855] netlink: 'syz.4.1718': attribute type 1 has an invalid length.
[  358.833370][T12855] netlink: 'syz.4.1718': attribute type 2 has an invalid length.
[  359.255562][T12891] ALSA: mixer_oss: invalid OSS volume ''
[  359.268419][T12891] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  359.270519][T12891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  359.459020][T12891] vhci_hcd vhci_hcd.0: Device attached
[  359.696407][ T6323] usb 39-1: new high-speed USB device number 3 using vhci_hcd
[  359.842022][T12892] vhci_hcd: connection reset by peer
[  359.843374][ T6087] vhci_hcd vhci_hcd.1: stop threads
[  359.843389][ T6087] vhci_hcd vhci_hcd.1: release socket
[  359.843476][ T6087] vhci_hcd vhci_hcd.1: disconnect device
[  360.236881][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.475372][T12915] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  360.610203][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  360.613390][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  360.616509][T12928] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  360.620908][T12928] UDF-fs: Scanning with blocksize 512 failed
[  360.623477][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  360.627645][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  360.632426][T12928] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  360.634888][T12928] UDF-fs: Scanning with blocksize 1024 failed
[  360.639066][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  360.642146][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  360.645327][T12928] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  360.647980][T12928] UDF-fs: Scanning with blocksize 2048 failed
[  360.650487][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  360.653531][T12928] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  360.656638][T12928] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  360.660189][T12928] UDF-fs: Scanning with blocksize 4096 failed
[  360.662143][T12928] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  361.692286][ T6006] IPVS: starting estimator thread 0...
[  361.797550][T12997] IPVS: using max 44 ests per chain, 105600 per kthread
[  362.019534][T13009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1746'.
[  362.164970][T13013] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  362.870167][ T6099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.872852][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.186640][ T6089] usb 42-1: device descriptor read/8, error -110
[  363.427692][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.430382][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.770840][ T6089] usb usb42-port1: attempt power cycle
[  364.201451][T13071] ubi: mtd0 is already attached to ubi31
[  364.347960][ T6089] usb usb42-port1: unable to enumerate USB device
[  364.787584][ T6323] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  364.789577][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.792878][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.508728][T13103] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  366.565658][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1768'.
[  366.622836][T13111] tc_dump_action: action bad kind
[  366.636203][T13112] 8021q: adding VLAN 0 to HW filter on device batadv3
[  366.645652][T13112] team0: Port device batadv3 added
[  367.412575][T13135] loop2: detected capacity change from 0 to 7
[  367.425736][    C3] blk_print_req_error: 6 callbacks suppressed
[  367.425748][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.430888][    C3] buffer_io_error: 6 callbacks suppressed
[  367.430896][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.435525][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.438576][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.442178][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.445038][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.447705][    C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.450660][    C3] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.453266][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.457099][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.460191][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.463687][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.467129][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.470743][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.473765][T13135] ldm_validate_partition_table(): Disk read failed.
[  367.476440][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.480051][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.483329][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.487028][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.490338][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  367.494037][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  367.498386][T13135] Dev loop2: unable to read RDB block 0
[  367.501673][T13135]  loop2: unable to read partition table
[  367.504221][T13135] loop2: partition table beyond EOD, truncated
[  367.506949][T13135] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  367.661347][T13139] Mount JFS Failure: -5
[  367.662869][T13139] jfs_mount failed w/return code = -5
[  367.846155][T13149] 9p: Could not find request transport: &d
[  367.990246][T13155] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  368.092954][T13155] 8021q: adding VLAN 0 to HW filter on device bond4
[  368.218272][   T40] kauditd_printk_skb: 60 callbacks suppressed
[  368.218453][   T40] audit: type=1326 audit(2000000006.510:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.3.1776" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7fc00000
[  368.627776][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.630343][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.028580][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'.
[  369.197790][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.201436][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.607347][T13181] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  369.611363][T13181] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  369.824435][T13198] netlink: 'syz.3.1790': attribute type 10 has an invalid length.
[  369.827197][T13198] syz_tun: entered promiscuous mode
[  369.907774][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.911055][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.038427][T13217] pim6reg: entered allmulticast mode
[  370.043065][T13217] pim6reg: left allmulticast mode
[  370.147594][T13229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1799'.
[  370.160434][   T40] audit: type=1107 audit(2000000008.410:871): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  370.428470][ T6006] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  370.638864][ T6006] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  370.642075][ T6006] usb 6-1: config 0 interface 0 has no altsetting 0
[  370.649925][ T6006] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  370.656704][ T6006] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  370.663204][ T6006] usb 6-1: Product: syz
[  370.780920][T13251] overlayfs: overlapping lowerdir path
[  370.788319][T13251] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  370.790907][T13251] overlayfs: overlapping lowerdir path
[  371.782815][ T6006] usb 6-1: Manufacturer: syz
[  371.784397][ T6006] usb 6-1: SerialNumber: syz
[  371.792059][ T6006] usb 6-1: config 0 descriptor??
[  371.796059][ T6006] usb 6-1: selecting invalid altsetting 0
[  371.996018][ T6089] usb 6-1: USB disconnect, device number 28
[  372.261533][T13226] --map-set only usable from mangle table
[  372.487604][T13259] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  372.490186][T13259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  372.493898][T13259] vhci_hcd vhci_hcd.0: Device attached
[  372.767573][ T6089] usb 46-1: SetAddress Request (18) to port 0
[  372.777578][ T6089] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd
[  372.857600][T13260] vhci_hcd: connection reset by peer
[  372.888385][   T60] vhci_hcd vhci_hcd.4: stop threads
[  372.890568][   T60] vhci_hcd vhci_hcd.4: release socket
[  372.894384][   T60] vhci_hcd vhci_hcd.4: disconnect device
[  372.914254][T13283] netlink: 'syz.2.1809': attribute type 1 has an invalid length.
[  372.928345][T13283] 8021q: adding VLAN 0 to HW filter on device bond5
[  373.080733][T13283] bond5: (slave geneve3): making interface the new active one
[  373.084880][T13283] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  373.088430][T13267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'.
[  373.182287][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'.
[  373.192172][T13292] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  373.201706][T13292] CIFS: Unable to determine destination address
[  373.208114][T13292] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.1811'.
[  373.211652][T13292] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  373.215543][T13294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  373.217948][T13294] IPv6: NLM_F_CREATE should be set when creating new route
[  373.604549][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1817'.
[  373.611587][T13310] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  373.638083][T13312] tmpfs: Bad value for 'mpol'
[  373.905681][T13323] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  373.907816][T13323] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  373.913274][T13323] vhci_hcd vhci_hcd.0: Device attached
[  373.940503][T13327] syzkaller1: tun_chr_ioctl cmd 35108
[  373.944885][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'.
[  374.187664][ T6038] usb 42-1: SetAddress Request (26) to port 0
[  374.189746][ T6038] usb 42-1: new SuperSpeed USB device number 26 using vhci_hcd
[  374.727763][T13324] vhci_hcd: connection reset by peer
[  374.729790][   T75] vhci_hcd vhci_hcd.2: stop threads
[  374.731640][   T75] vhci_hcd vhci_hcd.2: release socket
[  374.737642][   T75] vhci_hcd vhci_hcd.2: disconnect device
[  374.779616][T13336] netlink: 'syz.3.1825': attribute type 4 has an invalid length.
[  374.804886][T13336] netlink: 'syz.3.1825': attribute type 4 has an invalid length.
[  374.947645][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.950344][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.963453][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.966220][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.505891][T13355] dvmrp1: entered allmulticast mode
[  375.846357][   T40] audit: type=1326 audit(2000000014.140:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.853634][   T40] audit: type=1326 audit(2000000014.140:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.860797][   T40] audit: type=1326 audit(2000000014.150:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.868118][   T40] audit: type=1326 audit(2000000014.150:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.875382][   T40] audit: type=1326 audit(2000000014.150:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.882969][   T40] audit: type=1326 audit(2000000014.160:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.889945][   T40] audit: type=1326 audit(2000000014.160:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.897014][   T40] audit: type=1326 audit(2000000014.160:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.903819][   T40] audit: type=1326 audit(2000000014.170:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  375.910777][   T40] audit: type=1326 audit(2000000014.170:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.3.1836" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  376.080650][T13369] 9p: Bad value for 'wfdno'
[  376.544260][T13377] ntfs3(nullb0): Primary boot signature is not NTFS.
[  376.547129][T13377] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  376.899769][T13389] program syz.2.1840 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  377.651278][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'.
[  377.654838][T13410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1847'.
[  377.662733][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'.
[  377.667015][T13411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1847'.
[  377.827619][ T6089] usb 46-1: device descriptor read/8, error -110
[  378.194619][T13426] netlink: 'syz.4.1851': attribute type 13 has an invalid length.
[  378.222509][ T6089] usb usb46-port1: attempt power cycle
[  378.740335][T13426] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.748855][T13426] 8021q: adding VLAN 0 to HW filter on device team0
[  378.808751][ T6089] usb usb46-port1: unable to enumerate USB device
[  378.822748][T13426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  378.994932][T13434] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  378.997017][T13434] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  378.999726][T13434] vhci_hcd vhci_hcd.0: Device attached
[  379.207827][T13436] vhci_hcd: connection closed
[  379.208165][   T12] vhci_hcd vhci_hcd.1: stop threads
[  379.212080][   T12] vhci_hcd vhci_hcd.1: release socket
[  379.214448][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  379.267751][ T6038] usb 42-1: device descriptor read/8, error -110
[  379.583985][T13451] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  379.659686][ T6038] usb usb42-port1: attempt power cycle
[  379.806187][T13464] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1862'.
[  379.932744][T13462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  379.934879][T13462] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  379.937601][T13462] vhci_hcd vhci_hcd.0: Device attached
[  380.027569][ T6038] usb 42-1: SetAddress Request (28) to port 0
[  380.029927][ T6038] usb 42-1: new SuperSpeed USB device number 28 using vhci_hcd
[  380.126321][T13473] vhci_hcd: connection reset by peer
[  380.136290][  T103] vhci_hcd vhci_hcd.2: stop threads
[  380.138150][  T103] vhci_hcd vhci_hcd.2: release socket
[  380.140020][  T103] vhci_hcd vhci_hcd.2: disconnect device
[  380.147727][ T1141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.150732][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.332316][T13487] "syz.4.1865" (13487) uses obsolete ecb(arc4) skcipher
[  380.398836][T13492] input: syz0 as /devices/virtual/input/input24
[  380.552274][T13496] nfs4: Unknown parameter ''
[  380.707605][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.710484][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.023901][T13499] bridge3: entered promiscuous mode
[  381.359234][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.383045][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.426980][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.487252][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.490530][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.494127][T13520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.687553][T13532] tmpfs: Unknown parameter 'mp»ÿ'
[  382.130431][T13540] netlink: 'syz.3.1882': attribute type 16 has an invalid length.
[  382.133630][T13540] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1882'.
[  382.442498][T13552] netlink: 'syz.4.1886': attribute type 1 has an invalid length.
[  382.504722][   T40] kauditd_printk_skb: 31 callbacks suppressed
[  382.504733][   T40] audit: type=1326 audit(2000000020.800:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.1887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  382.622406][   T40] audit: type=1326 audit(2000000020.910:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.1887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  382.647216][   T40] audit: type=1326 audit(2000000020.920:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.1887" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  382.687668][   T40] audit: type=1326 audit(2000000020.920:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.1.1887" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  382.722194][T13564] raw_sendmsg: syz.3.1891 forgot to set AF_INET. Fix it!
[  382.825547][T13570] pim6reg: entered allmulticast mode
[  382.827908][T13572] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  382.830019][T13572] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  382.832679][T13572] vhci_hcd vhci_hcd.0: Device attached
[  382.852775][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.856324][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.880174][T13571] netlink: 'syz.3.1892': attribute type 39 has an invalid length.
[  383.107979][   T34] usb 46-1: SetAddress Request (22) to port 0
[  383.110185][   T34] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd
[  383.255721][T13586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  383.259062][T13586] syzkaller0: entered promiscuous mode
[  383.261102][T13586] syzkaller0: entered allmulticast mode
[  383.274848][   T40] audit: type=1326 audit(2000000021.570:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13585 comm="syz.3.1895" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0
[  383.338935][T13588] tipc: Resetting bearer <eth:syzkaller0>
[  383.349757][ T1415] ieee802154 phy0 wpan0: encryption failed: -22
[  383.351920][ T1415] ieee802154 phy1 wpan1: encryption failed: -22
[  383.486739][T13591] 9p: Bad value for 'rfdno'
[  383.553862][T13574] vhci_hcd: connection reset by peer
[  383.586438][T13254] vhci_hcd vhci_hcd.4: stop threads
[  383.588436][T13254] vhci_hcd vhci_hcd.4: release socket
[  383.590558][T13254] vhci_hcd vhci_hcd.4: disconnect device
[  383.591414][   T40] audit: type=1326 audit(2000000021.890:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  383.607553][   T40] audit: type=1326 audit(2000000021.900:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  383.626070][   T40] audit: type=1326 audit(2000000021.900:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  383.647580][   T40] audit: type=1326 audit(2000000021.900:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.2.1897" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  383.951088][T13610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'.
[  383.972463][T13607] ceph: No mds server is up or the cluster is laggy
[  383.976231][ T6025] libceph: connect (1)[c::]:6789 error -101
[  383.978662][ T6025] libceph: mon0 (1)[c::]:6789 connect error
[  384.077837][   T54] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  384.084625][T13585] tipc: Resetting bearer <eth:syzkaller0>
[  384.095165][T13585] tipc: Disabling bearer <eth:syzkaller0>
[  384.228558][   T54] usb 6-1: Using ep0 maxpacket: 8
[  384.231369][   T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  384.234963][   T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  384.238244][   T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  384.241322][   T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  384.245415][   T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  384.248340][   T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.463182][   T54] usb 6-1: GET_CAPABILITIES returned 0
[  384.465066][   T54] usbtmc 6-1:16.0: can't read capabilities
[  385.108271][ T6038] usb 42-1: device descriptor read/8, error -110
[  385.149746][T13618] random: crng reseeded on system resumption
[  385.280234][   T40] audit: type=1326 audit(2000000023.580:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13626 comm="syz.4.1907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000
[  385.672382][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'.
[  385.675204][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1909'.
[  385.678129][T13633] netlink: 'syz.4.1909': attribute type 6 has an invalid length.
[  385.984051][T13643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  385.986055][T13643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  385.997689][T13643] vhci_hcd vhci_hcd.0: Device attached
[  386.378465][ T6332] net_ratelimit: 21 callbacks suppressed
[  386.378479][ T6332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.383154][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.404455][ T6038] usb usb42-port1: unable to enumerate USB device
[  386.467621][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.470272][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.512089][T13644] vhci_hcd: connection closed
[  386.514559][   T46] vhci_hcd vhci_hcd.4: stop threads
[  386.527314][   T46] vhci_hcd vhci_hcd.4: release socket
[  386.529533][   T46] vhci_hcd vhci_hcd.4: disconnect device
[  386.658848][ T6038] usb 6-1: USB disconnect, device number 29
[  386.662866][T13671] 9p: Bad value for 'wfdno'
[  386.957005][T13682] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.959780][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.179055][  T103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.302310][  T103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.379802][  T103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.381847][T13695] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.390627][T13695] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.394387][T13695] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.400750][T13695] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.403943][T13695] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.409526][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.412533][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.415087][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.418096][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.420784][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  387.477150][  T103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.492844][T13702] FAULT_INJECTION: forcing a failure.
[  387.492844][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  387.497093][T13702] CPU: 3 UID: 0 PID: 13702 Comm: syz.3.1929 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  387.497110][T13702] Tainted: [L]=SOFTLOCKUP
[  387.497114][T13702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  387.497121][T13702] Call Trace:
[  387.497126][T13702]  <TASK>
[  387.497130][T13702]  dump_stack_lvl+0x16c/0x1f0
[  387.497150][T13702]  should_fail_ex+0x512/0x640
[  387.497164][T13702]  _copy_from_user+0x2e/0xd0
[  387.497177][T13702]  get_compat_msghdr+0xa7/0x170
[  387.497192][T13702]  ? __pfx_get_compat_msghdr+0x10/0x10
[  387.497210][T13702]  ___sys_sendmsg+0x1ae/0x1d0
[  387.497225][T13702]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.497244][T13702]  ? find_held_lock+0x2b/0x80
[  387.497267][T13702]  __sys_sendmsg+0x16d/0x220
[  387.497281][T13702]  ? __pfx___sys_sendmsg+0x10/0x10
[  387.497300][T13702]  ? do_user_addr_fault+0x843/0x1370
[  387.497315][T13702]  __do_fast_syscall_32+0xe8/0x680
[  387.497337][T13702]  do_fast_syscall_32+0x32/0x80
[  387.497362][T13702]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  387.497376][T13702] RIP: 0023:0xf70ad579
[  387.497385][T13702] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  387.497396][T13702] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  387.497407][T13702] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  387.497413][T13702] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  387.497420][T13702] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  387.497437][T13702] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  387.497444][T13702] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  387.497459][T13702]  </TASK>
[  387.584841][T13708] binder_alloc: binder_alloc_mmap_handler: 13707 80fff000-81000000 already mapped failed -16
[  387.588736][T13709] binder: BINDER_SET_CONTEXT_MGR already set
[  387.590655][T13709] binder: 13707:13709 ioctl 4018620d 800002c0 returned -16
[  387.595808][T13700] netlink: 'syz.1.1928': attribute type 11 has an invalid length.
[  387.598508][T13700] netlink: 'syz.1.1928': attribute type 4 has an invalid length.
[  387.600942][T13700] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.1928'.
[  387.620941][  T103] bridge0: port 1(erspan0) entered disabled state
[  387.626526][  T103] batman_adv: batadv0: Interface deactivated: gretap1
[  387.800807][  T103] batman_adv: batadv0: Removing interface: gretap1
[  387.813567][  T103] bond3 (unregistering): (slave gretap2): Releasing active interface
[  387.845917][  T103] bond5 (unregistering): (slave geneve3): Releasing active interface
[  387.970636][  T103] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  387.973451][  T103] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  387.980670][  T103] bond0 (unregistering): Released all slaves
[  387.984890][  T103] bond1 (unregistering): Released all slaves
[  388.060359][  T103] bond2 (unregistering): (slave veth5): Releasing active interface
[  388.063803][  T103] bond2 (unregistering): Released all slaves
[  388.136761][  T103] bond3 (unregistering): Released all slaves
[  388.151887][   T34] usb 46-1: device descriptor read/8, error -110
[  388.215508][  T103] bond4 (unregistering): Released all slaves
[  388.288151][  T103] bond5 (unregistering): Released all slaves
[  388.294042][T13718] tipc: Enabling of bearer <udp:z> rejected, failed to enable media
[  388.300889][T13693] chnl_net:caif_netlink_parms(): no params data found
[  388.339746][T13693] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.342077][T13693] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.344388][T13693] bridge_slave_0: entered allmulticast mode
[  388.347047][T13693] bridge_slave_0: entered promiscuous mode
[  388.350212][T13693] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.352508][T13693] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.354785][T13693] bridge_slave_1: entered allmulticast mode
[  388.357339][T13693] bridge_slave_1: entered promiscuous mode
[  388.371514][T13693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  388.375907][T13693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.395471][T13693] team0: Port device team_slave_0 added
[  388.424785][T13693] team0: Port device team_slave_1 added
[  388.476178][T13693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  388.480887][T13254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.484579][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.490127][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.512818][T13693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  388.538004][   T34] usb usb46-port1: attempt power cycle
[  388.542678][T13693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  388.545424][T13693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.556074][T13693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  388.564805][  T103] tipc: Disabling bearer <eth:syzkaller0>
[  388.571381][  T103] tipc: Left network mode
[  388.737038][T13693] hsr_slave_0: entered promiscuous mode
[  388.739779][T13693] hsr_slave_1: entered promiscuous mode
[  388.742372][T13693] debugfs: 'hsr0' already exists in 'hsr'
[  388.744235][T13693] Cannot create hsr debugfs directory
[  388.965074][T13739] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1934'.
[  389.098074][   T34] usb usb46-port1: unable to enumerate USB device
[  389.182390][  T103] hsr_slave_0: left promiscuous mode
[  389.311077][  T103] team0 (unregistering): Port device vxcan3 removed
[  389.394655][  T103] pim6reg (unregistering): left allmulticast mode
[  389.507959][T13695] Bluetooth: hci2: command tx timeout
[  389.601194][T13745] FAULT_INJECTION: forcing a failure.
[  389.601194][T13745] name failslab, interval 1, probability 0, space 0, times 1
[  389.606579][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.4.1937 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  389.606608][T13745] Tainted: [L]=SOFTLOCKUP
[  389.606613][T13745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  389.606624][T13745] Call Trace:
[  389.606631][T13745]  <TASK>
[  389.606638][T13745]  dump_stack_lvl+0x16c/0x1f0
[  389.606670][T13745]  should_fail_ex+0x512/0x640
[  389.606690][T13745]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  389.606716][T13745]  should_failslab+0xc2/0x120
[  389.606741][T13745]  kmem_cache_alloc_node_noprof+0x86/0x800
[  389.606762][T13745]  ? __alloc_skb+0x156/0x410
[  389.606787][T13745]  ? __alloc_skb+0x156/0x410
[  389.606806][T13745]  __alloc_skb+0x156/0x410
[  389.606824][T13745]  ? __alloc_skb+0x35d/0x410
[  389.606843][T13745]  ? __pfx___alloc_skb+0x10/0x10
[  389.606862][T13745]  ? netlink_autobind.isra.0+0x158/0x370
[  389.606896][T13745]  netlink_alloc_large_skb+0x69/0x140
[  389.606924][T13745]  netlink_sendmsg+0x698/0xdd0
[  389.606955][T13745]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.606985][T13745]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  389.607020][T13745]  ____sys_sendmsg+0xa5d/0xc30
[  389.607045][T13745]  ? btrfs_chunk_alloc+0x10/0x1a60
[  389.607065][T13745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.607091][T13745]  ? get_compat_msghdr+0x11a/0x170
[  389.607125][T13745]  ___sys_sendmsg+0x134/0x1d0
[  389.607151][T13745]  ? __pfx____sys_sendmsg+0x10/0x10
[  389.607185][T13745]  ? find_held_lock+0x2b/0x80
[  389.607237][T13745]  __sys_sendmsg+0x16d/0x220
[  389.607263][T13745]  ? __pfx___sys_sendmsg+0x10/0x10
[  389.607297][T13745]  ? do_user_addr_fault+0x843/0x1370
[  389.607323][T13745]  __do_fast_syscall_32+0xe8/0x680
[  389.607353][T13745]  do_fast_syscall_32+0x32/0x80
[  389.607380][T13745]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  389.607403][T13745] RIP: 0023:0xf7fd3579
[  389.607417][T13745] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  389.607436][T13745] RSP: 002b:00000000f54c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  389.607456][T13745] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  389.607468][T13745] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  389.607478][T13745] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  389.607488][T13745] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  389.607498][T13745] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  389.607521][T13745]  </TASK>
[  390.213003][T13768] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  390.219140][T13693] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  390.225167][T13693] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  390.229941][T13693] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  390.235265][T13693] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  390.270859][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'.
[  390.305068][T13693] 8021q: adding VLAN 0 to HW filter on device bond0
[  390.313633][T13693] 8021q: adding VLAN 0 to HW filter on device team0
[  390.322904][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'.
[  390.326284][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'.
[  390.329019][ T6332] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.329079][ T6332] bridge0: port 1(bridge_slave_0) entered forwarding state
[  390.331713][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  390.335773][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  390.338102][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'.
[  390.381471][T13788] IPVS: dh: FWM 3 0x00000003 - no destination available
[  390.472422][T13693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.580117][  T103] IPVS: stop unused estimator thread 0...
[  390.583918][T13802] netlink: 'syz.1.1951': attribute type 10 has an invalid length.
[  390.586710][T13802] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  390.618514][ T6089] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  390.632288][T13693] veth0_vlan: entered promiscuous mode
[  390.641739][T13693] veth1_vlan: entered promiscuous mode
[  390.666167][T13693] veth0_macvtap: entered promiscuous mode
[  390.674895][T13693] veth1_macvtap: entered promiscuous mode
[  390.688563][T13693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.696112][T13693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.704730][ T6332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.708091][ T6332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.712264][ T6332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.715091][ T6332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.774565][ T6089] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  390.786088][ T6089] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.790824][ T6089] usb 9-1: Product: syz
[  390.792134][ T6089] usb 9-1: Manufacturer: syz
[  390.793601][ T6089] usb 9-1: SerialNumber: syz
[  390.796171][ T6089] usb 9-1: config 0 descriptor??
[  390.798226][T13807] bond3: option arp_validate: invalid value (524288)
[  390.804753][T13807] bond3 (unregistering): Released all slaves
[  390.819926][  T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.822502][  T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.843486][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.846180][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.018507][   T40] kauditd_printk_skb: 12 callbacks suppressed
[  391.018524][   T40] audit: type=1326 audit(2000000029.320:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13815 comm="syz.5.1953" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0
[  391.066004][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'.
[  391.212889][ T6089] usb 9-1: USB disconnect, device number 5
[  391.370287][T13798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.419981][T13695] Bluetooth: hci2: ACL packet for unknown connection handle 723
[  391.529025][T13828] FAULT_INJECTION: forcing a failure.
[  391.529025][T13828] name failslab, interval 1, probability 0, space 0, times 0
[  391.533721][T13828] CPU: 2 UID: 0 PID: 13828 Comm: syz.5.1956 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.533745][T13828] Tainted: [L]=SOFTLOCKUP
[  391.533751][T13828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  391.533761][T13828] Call Trace:
[  391.533767][T13828]  <TASK>
[  391.533773][T13828]  dump_stack_lvl+0x16c/0x1f0
[  391.533801][T13828]  should_fail_ex+0x512/0x640
[  391.533820][T13828]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  391.533841][T13828]  should_failslab+0xc2/0x120
[  391.533866][T13828]  kmem_cache_alloc_noprof+0x83/0x770
[  391.533886][T13828]  ? skb_clone+0x190/0x3f0
[  391.533910][T13828]  ? skb_clone+0x190/0x3f0
[  391.533929][T13828]  skb_clone+0x190/0x3f0
[  391.533949][T13828]  netlink_deliver_tap+0xabd/0xd30
[  391.533976][T13828]  netlink_unicast+0x64c/0x870
[  391.534001][T13828]  ? __pfx_netlink_unicast+0x10/0x10
[  391.534033][T13828]  netlink_sendmsg+0x8c8/0xdd0
[  391.534059][T13828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.534084][T13828]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  391.534115][T13828]  ____sys_sendmsg+0xa5d/0xc30
[  391.534137][T13828]  ? btrfs_chunk_alloc+0x10/0x1a60
[  391.534165][T13828]  ? __pfx_____sys_sendmsg+0x10/0x10
[  391.534189][T13828]  ? get_compat_msghdr+0x11a/0x170
[  391.534233][T13828]  ___sys_sendmsg+0x134/0x1d0
[  391.534256][T13828]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.534287][T13828]  ? find_held_lock+0x2b/0x80
[  391.534340][T13828]  __sys_sendmsg+0x16d/0x220
[  391.534361][T13828]  ? __pfx___sys_sendmsg+0x10/0x10
[  391.534390][T13828]  ? do_user_addr_fault+0x843/0x1370
[  391.534414][T13828]  __do_fast_syscall_32+0xe8/0x680
[  391.534440][T13828]  do_fast_syscall_32+0x32/0x80
[  391.534464][T13828]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  391.534483][T13828] RIP: 0023:0xf7f05579
[  391.534497][T13828] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  391.534512][T13828] RSP: 002b:00000000f53f655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  391.534528][T13828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  391.534538][T13828] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  391.534547][T13828] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  391.534556][T13828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  391.534565][T13828] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  391.534591][T13828]  </TASK>
[  391.627573][T13695] Bluetooth: hci2: command tx timeout
[  391.667944][  T225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.670730][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.725589][T13830] IPVS: set_ctl: invalid protocol: 1792 116.0.0.0:0
[  391.730150][T13830] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  391.839106][T13843] /dev/nullb0: Can't open blockdev
[  391.841261][T13842] /dev/nullb0: Can't open blockdev
[  392.029984][T13852] xt_CT: You must specify a L4 protocol and not use inversions on it
[  392.031477][T13852] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1963'.
[  392.227681][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.231525][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.357239][T13859] FAULT_INJECTION: forcing a failure.
[  392.357239][T13859] name failslab, interval 1, probability 0, space 0, times 0
[  392.361531][T13859] CPU: 0 UID: 0 PID: 13859 Comm: syz.1.1965 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  392.361564][T13859] Tainted: [L]=SOFTLOCKUP
[  392.361568][T13859] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  392.361576][T13859] Call Trace:
[  392.361580][T13859]  <TASK>
[  392.361584][T13859]  dump_stack_lvl+0x16c/0x1f0
[  392.361603][T13859]  should_fail_ex+0x512/0x640
[  392.361615][T13859]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  392.361631][T13859]  should_failslab+0xc2/0x120
[  392.361648][T13859]  kmem_cache_alloc_node_noprof+0x86/0x800
[  392.361661][T13859]  ? __alloc_skb+0x156/0x410
[  392.361672][T13859]  ? __alloc_skb+0x35d/0x410
[  392.361686][T13859]  ? __alloc_skb+0x156/0x410
[  392.361696][T13859]  __alloc_skb+0x156/0x410
[  392.361706][T13859]  ? __alloc_skb+0x35d/0x410
[  392.361717][T13859]  ? __pfx___alloc_skb+0x10/0x10
[  392.361733][T13859]  netlink_ack+0x15d/0xb80
[  392.361753][T13859]  netlink_rcv_skb+0x332/0x420
[  392.361768][T13859]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  392.361781][T13859]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  392.361803][T13859]  ? ns_capable+0xd7/0x110
[  392.361818][T13859]  nfnetlink_rcv+0x1b3/0x430
[  392.361830][T13859]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  392.361841][T13859]  ? netlink_deliver_tap+0x1ae/0xd30
[  392.361858][T13859]  netlink_unicast+0x5aa/0x870
[  392.361875][T13859]  ? __pfx_netlink_unicast+0x10/0x10
[  392.361895][T13859]  netlink_sendmsg+0x8c8/0xdd0
[  392.361913][T13859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  392.361930][T13859]  ? aa_sock_msg_perm.constprop.0+0x100/0x1b0
[  392.361951][T13859]  ____sys_sendmsg+0xa5d/0xc30
[  392.361967][T13859]  ? btrfs_chunk_alloc+0x10/0x1a60
[  392.361979][T13859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  392.361995][T13859]  ? get_compat_msghdr+0x11a/0x170
[  392.362015][T13859]  ___sys_sendmsg+0x134/0x1d0
[  392.362030][T13859]  ? __pfx____sys_sendmsg+0x10/0x10
[  392.362050][T13859]  ? find_held_lock+0x2b/0x80
[  392.362073][T13859]  __sys_sendmsg+0x16d/0x220
[  392.362087][T13859]  ? __pfx___sys_sendmsg+0x10/0x10
[  392.362105][T13859]  ? do_user_addr_fault+0x843/0x1370
[  392.362121][T13859]  __do_fast_syscall_32+0xe8/0x680
[  392.362140][T13859]  do_fast_syscall_32+0x32/0x80
[  392.362157][T13859]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  392.362170][T13859] RIP: 0023:0xf7f87579
[  392.362179][T13859] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  392.362189][T13859] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  392.362199][T13859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0
[  392.362206][T13859] RDX: 00000000040c0080 RSI: 0000000000000000 RDI: 0000000000000000
[  392.362212][T13859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  392.362218][T13859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  392.362224][T13859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  392.362237][T13859]  </TASK>
[  392.369404][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'.
[  392.623839][T13869] netlink: 'syz.1.1968': attribute type 3 has an invalid length.
[  392.626486][T13869] netlink: 'syz.1.1968': attribute type 3 has an invalid length.
[  392.632323][T13869] dns_resolver: Unsupported content type (5)
[  392.736456][   T40] audit: type=1326 audit(2000000031.030:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  392.743932][   T40] audit: type=1326 audit(2000000031.030:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  392.751457][   T40] audit: type=1326 audit(2000000031.050:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  392.758216][   T40] audit: type=1326 audit(2000000031.050:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  392.764904][   T40] audit: type=1326 audit(2000000031.050:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13870 comm="syz.1.1969" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  392.786352][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.790367][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.797478][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.801409][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.089411][T13881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'.
[  393.188906][T13885] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  393.190895][T13885] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  393.193649][T13885] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  393.237293][T13890] FAULT_INJECTION: forcing a failure.
[  393.237293][T13890] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  393.241850][T13890] CPU: 2 UID: 0 PID: 13890 Comm: syz.3.1974 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.241868][T13890] Tainted: [L]=SOFTLOCKUP
[  393.241872][T13890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  393.241879][T13890] Call Trace:
[  393.241883][T13890]  <TASK>
[  393.241887][T13890]  dump_stack_lvl+0x16c/0x1f0
[  393.241907][T13890]  should_fail_ex+0x512/0x640
[  393.241922][T13890]  _copy_from_user+0x2e/0xd0
[  393.241934][T13890]  kstrtouint_from_user+0xd6/0x1d0
[  393.241949][T13890]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  393.241963][T13890]  ? __lock_acquire+0x436/0x2890
[  393.241980][T13890]  proc_fail_nth_write+0x83/0x220
[  393.241991][T13890]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  393.242005][T13890]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  393.242014][T13890]  vfs_write+0x2a0/0x11d0
[  393.242031][T13890]  ? __pfx___mutex_lock+0x10/0x10
[  393.242049][T13890]  ? __pfx_vfs_write+0x10/0x10
[  393.242063][T13890]  ? find_held_lock+0x2b/0x80
[  393.242081][T13890]  ? __fget_files+0x20e/0x3c0
[  393.242100][T13890]  ksys_write+0x12a/0x250
[  393.242115][T13890]  ? __pfx_ksys_write+0x10/0x10
[  393.242130][T13890]  ? do_user_addr_fault+0x843/0x1370
[  393.242148][T13890]  __do_fast_syscall_32+0xe8/0x680
[  393.242166][T13890]  do_fast_syscall_32+0x32/0x80
[  393.242183][T13890]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  393.242196][T13890] RIP: 0023:0xf70ad579
[  393.242205][T13890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  393.242215][T13890] RSP: 002b:00000000f549d590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004
[  393.242226][T13890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d620
[  393.242232][T13890] RDX: 0000000000000001 RSI: 00000000f7446ff4 RDI: 0000000000000000
[  393.242239][T13890] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  393.242245][T13890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  393.242251][T13890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  393.242265][T13890]  </TASK>
[  393.540021][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'.
[  393.751726][   T40] audit: type=1326 audit(2000000032.050:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000
[  393.761350][   T40] audit: type=1326 audit(2000000032.050:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf7fd3579 code=0x7ffc0000
[  393.776051][   T40] audit: type=1326 audit(2000000032.050:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13904 comm="syz.4.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000
[  393.863798][T13909] netlink: 'syz.4.1980': attribute type 3 has an invalid length.
[  393.955943][T13910] binder: 13896:13910 ioctl 0 80000040 returned -22
[  394.228906][  T225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.232189][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.336957][T13695] Bluetooth: hci2: command 0x0419 tx timeout
[  395.727295][   T34] libceph: connect (1)[c::]:6789 error -101
[  395.730955][   T34] libceph: mon0 (1)[c::]:6789 connect error
[  395.765355][T13930] ceph: No mds server is up or the cluster is laggy
[  395.852889][T13949] __nla_validate_parse: 1 callbacks suppressed
[  395.852906][T13949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1992'.
[  395.861731][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'.
[  395.939869][T13955] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1992'.
[  396.787898][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.791562][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.120427][T13980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.123348][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.200964][T13990] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2003'.
[  397.347556][T13695] Bluetooth: hci2: command 0x0419 tx timeout
[  397.587990][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2005'.
[  397.818357][   T40] audit: type=1326 audit(2000000036.120:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14013 comm="syz.5.2010" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0
[  397.995510][T14019] netlink: ct family unspecified
[  397.997204][T14019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.000247][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.000380][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.427539][T13695] Bluetooth: hci2: command 0x0419 tx timeout
[  399.563225][T14040] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  399.565347][T14040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  399.568218][T14040] vhci_hcd vhci_hcd.0: Device attached
[  399.594007][   T40] audit: type=1804 audit(2000000037.890:945): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2016" name="/newroot/467/file0/file1" dev="overlay" ino=2523 res=1 errno=0
[  399.807713][   T10] usb 43-1: new low-speed USB device number 3 using vhci_hcd
[  399.988070][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.990689][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.029053][T14049] netlink: 'syz.1.2018': attribute type 2 has an invalid length.
[  400.032301][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'.
[  400.039150][T14049] loop6: detected capacity change from 0 to 2560
[  400.042465][T14049] buffer_io_error: 5 callbacks suppressed
[  400.042479][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.048476][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.051732][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.054969][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.058367][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.061635][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.064881][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.068321][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.071597][T14049] ldm_validate_partition_table(): Disk read failed.
[  400.074386][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.077812][T14049] Buffer I/O error on dev loop6, logical block 0, async page read
[  400.080392][T14049] Dev loop6: unable to read RDB block 0
[  400.082215][T14049]  loop6: unable to read partition table
[  400.084045][T14049] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  400.198277][T14041] vhci_hcd: connection reset by peer
[  400.200552][  T103] vhci_hcd vhci_hcd.3: stop threads
[  400.202203][  T103] vhci_hcd vhci_hcd.3: release socket
[  400.203904][  T103] vhci_hcd vhci_hcd.3: disconnect device
[  400.768732][T14051] gfs2: path_lookup on  returned error -2
[  400.777052][   T40] audit: type=1800 audit(2000000039.070:946): pid=14051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2019" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  400.838844][T14051] 9p: Could not find request transport: Fd
[  401.106776][ T1173] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.221400][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  401.225804][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  401.228812][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  401.232119][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  401.234785][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  401.339662][ T1173] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.500877][ T1173] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.677337][ T1173] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.839412][T14062] chnl_net:caif_netlink_parms(): no params data found
[  402.279025][T14062] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.285275][T14062] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.289553][T14062] bridge_slave_0: entered allmulticast mode
[  402.310163][T14062] bridge_slave_0: entered promiscuous mode
[  402.383067][ T1173] bridge_slave_1: left allmulticast mode
[  402.384811][ T1173] bridge_slave_1: left promiscuous mode
[  402.386663][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.392613][ T1173] bridge_slave_0: left allmulticast mode
[  402.394397][ T1173] bridge_slave_0: left promiscuous mode
[  402.396218][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.518872][T14079] netlink: 'syz.1.2028': attribute type 10 has an invalid length.
[  402.565878][  T225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.569359][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.713487][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.719167][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.722966][ T1173] bond0 (unregistering): Released all slaves
[  402.726779][T14062] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.729660][T14062] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.732362][T14062] bridge_slave_1: entered allmulticast mode
[  402.735826][T14062] bridge_slave_1: entered promiscuous mode
[  402.775538][T14079] team0: Port device dummy0 added
[  402.780259][T14062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.787219][T14062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.810375][T14062] team0: Port device team_slave_0 added
[  402.814760][T14062] team0: Port device team_slave_1 added
[  402.829087][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.831470][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.841513][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.851880][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.854080][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.863814][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.903192][T14062] hsr_slave_0: entered promiscuous mode
[  402.905426][T14062] hsr_slave_1: entered promiscuous mode
[  402.908115][T14062] debugfs: 'hsr0' already exists in 'hsr'
[  402.909938][T14062] Cannot create hsr debugfs directory
[  403.030347][T14062] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  403.034659][T14062] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  403.039669][T14062] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  403.044261][T14062] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  403.094389][T14062] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.107400][T14062] 8021q: adding VLAN 0 to HW filter on device team0
[  403.114038][  T225] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.116402][  T225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.130620][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.132886][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.175266][ T1173] hsr_slave_0: left promiscuous mode
[  403.181670][ T1173] hsr_slave_1: left promiscuous mode
[  403.185787][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.188216][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.192068][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.194506][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.222341][ T1173] veth1_macvtap: left promiscuous mode
[  403.225998][ T1173] veth0_macvtap: left promiscuous mode
[  403.227954][ T1173] veth1_vlan: left promiscuous mode
[  403.230788][ T1173] veth0_vlan: left promiscuous mode
[  403.267909][ T5946] Bluetooth: hci2: command tx timeout
[  403.515306][T14106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'.
[  403.589866][T14107] overlay: Unknown parameter 'context'
[  403.681741][ T1173] team0 (unregistering): Port device team_slave_1 removed
[  403.708530][ T1173] team0 (unregistering): Port device team_slave_0 removed
[  403.753156][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.756626][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.943345][T14118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.947171][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.064861][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.212315][T14062] veth0_vlan: entered promiscuous mode
[  404.219654][T14062] veth1_vlan: entered promiscuous mode
[  404.235558][T14062] veth0_macvtap: entered promiscuous mode
[  404.247792][T14062] veth1_macvtap: entered promiscuous mode
[  404.267267][T14062] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.282352][T14062] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.290654][ T6332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.293818][ T6332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.299704][ T6332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.302544][ T6332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.342423][  T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.344976][  T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.361204][  T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.364345][  T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.669068][T14157] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2042'.
[  404.699211][T14159] pim6reg: entered allmulticast mode
[  404.704017][T14159] pim6reg: left allmulticast mode
[  404.849963][T14166] netlink: 'syz.1.2045': attribute type 10 has an invalid length.
[  404.853778][T14166] syz_tun: entered promiscuous mode
[  404.947580][   T10] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  405.347649][ T5946] Bluetooth: hci2: command tx timeout
[  405.496483][T14188] ubi: mtd0 is already attached to ubi31
[  405.747966][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  405.750591][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  406.470018][T14199] loop6: detected capacity change from 0 to 2640
[  406.472549][T14199] buffer_io_error: 6 callbacks suppressed
[  406.472558][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.476966][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.479845][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.482485][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.485052][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.488041][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.490865][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.493443][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.496065][T14199] ldm_validate_partition_table(): Disk read failed.
[  406.498366][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.501076][T14199] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.503772][T14199] Dev loop6: unable to read RDB block 0
[  406.506155][T14199]  loop6: unable to read partition table
[  406.508231][T14199] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  407.349691][T14208] random: crng reseeded on system resumption
[  407.427574][ T5946] Bluetooth: hci2: command tx timeout
[  407.451961][T14218] qnx4: no qnx4 filesystem (no root dir).
[  407.575940][T14228] siw: device registration error -23
[  407.667899][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.672452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.697566][ T6089] usb 11-1: new low-speed USB device number 2 using dummy_hcd
[  407.827647][ T6089] usb 11-1: device descriptor read/64, error -71
[  408.077626][ T6089] usb 11-1: new low-speed USB device number 3 using dummy_hcd
[  408.207560][ T6089] usb 11-1: device descriptor read/64, error -71
[  408.327844][ T6089] usb usb11-port1: attempt power cycle
[  408.667513][ T6089] usb 11-1: new low-speed USB device number 4 using dummy_hcd
[  408.688510][ T6089] usb 11-1: device descriptor read/8, error -71
[  408.867643][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.870581][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.882107][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'.
[  408.885009][T14241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2064'.
[  408.904533][T14241] geneve3: entered promiscuous mode
[  408.906321][T14241] geneve3: entered allmulticast mode
[  408.911872][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  408.914790][ T1173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  408.917822][ T1173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  408.920682][ T1173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  408.947988][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.948029][ T6089] usb 11-1: new low-speed USB device number 5 using dummy_hcd
[  408.953564][ T1173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.978022][ T6089] usb 11-1: device descriptor read/8, error -71
[  409.088306][ T6089] usb usb11-port1: unable to enumerate USB device
[  409.227826][   T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.507945][ T5946] Bluetooth: hci2: command tx timeout
[  409.988774][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.993135][   T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.038842][T14259] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  410.100990][T14262] netlink: 'syz.1.2069': attribute type 10 has an invalid length.
[  410.191976][T14274] mkiss: ax0: crc mode is auto.
[  410.601168][T14284] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  410.603411][T14284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  410.617575][T14284] vhci_hcd vhci_hcd.0: Device attached
[  410.939234][   T10] usb 44-1: SetAddress Request (50) to port 0
[  410.941267][   T10] usb 44-1: new SuperSpeed USB device number 50 using vhci_hcd
[  410.986816][T14305] input: syz0 as /devices/virtual/input/input26
[  410.996248][T13695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  411.003162][T13695] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  411.008363][T13695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  411.019851][T13695] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  411.023935][T13695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  411.196731][T14285] vhci_hcd: connection reset by peer
[  411.201851][   T12] vhci_hcd vhci_hcd.3: stop threads
[  411.203548][   T12] vhci_hcd vhci_hcd.3: release socket
[  411.205308][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  411.350287][T14306] chnl_net:caif_netlink_parms(): no params data found
[  411.372221][T14313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  411.374840][T14313] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  411.383663][T14313] vhci_hcd vhci_hcd.0: Device attached
[  411.439704][T14306] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.442309][T14306] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.445258][T14306] bridge_slave_0: entered allmulticast mode
[  411.448950][T14306] bridge_slave_0: entered promiscuous mode
[  411.453014][T14306] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.456005][T14306] bridge0: port 2(bridge_slave_1) entered disabled state
[  411.459184][T14306] bridge_slave_1: entered allmulticast mode
[  411.462412][T14306] bridge_slave_1: entered promiscuous mode
[  411.485670][T14306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.491520][T14306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  411.516062][T14306] team0: Port device team_slave_0 added
[  411.520644][T14306] team0: Port device team_slave_1 added
[  411.542045][T14306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.544719][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.554931][T14306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.591353][T14306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.593601][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.601833][T14306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.624395][T14306] hsr_slave_0: entered promiscuous mode
[  411.626659][T14306] hsr_slave_1: entered promiscuous mode
[  411.628897][T14306] debugfs: 'hsr0' already exists in 'hsr'
[  411.630729][T14306] Cannot create hsr debugfs directory
[  411.657575][ T5987] usb 40-1: SetAddress Request (27) to port 0
[  411.659853][ T5987] usb 40-1: new SuperSpeed USB device number 27 using vhci_hcd
[  411.728755][T14306] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  411.736290][T14306] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  411.741237][T14306] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  411.745650][T14306] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  411.778966][T14314] vhci_hcd: connection reset by peer
[  411.781302][ T6332] vhci_hcd vhci_hcd.1: stop threads
[  411.782970][ T6332] vhci_hcd vhci_hcd.1: release socket
[  411.784716][ T6332] vhci_hcd vhci_hcd.1: disconnect device
[  411.796614][T14306] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.808943][T14306] 8021q: adding VLAN 0 to HW filter on device team0
[  411.814387][  T225] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.816717][  T225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.824328][  T225] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.826691][  T225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  411.870680][   T40] audit: type=1326 audit(2000000050.170:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  411.880923][T14329] FAULT_INJECTION: forcing a failure.
[  411.880923][T14329] name failslab, interval 1, probability 0, space 0, times 0
[  411.884896][T14329] CPU: 1 UID: 0 PID: 14329 Comm: syz.3.2083 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.884914][T14329] Tainted: [L]=SOFTLOCKUP
[  411.884918][T14329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  411.884925][T14329] Call Trace:
[  411.884929][T14329]  <TASK>
[  411.884934][T14329]  dump_stack_lvl+0x16c/0x1f0
[  411.884954][T14329]  should_fail_ex+0x512/0x640
[  411.884967][T14329]  ? kmem_cache_alloc_node_noprof+0x65/0x800
[  411.884982][T14329]  should_failslab+0xc2/0x120
[  411.884999][T14329]  kmem_cache_alloc_node_noprof+0x86/0x800
[  411.885012][T14329]  ? __alloc_skb+0x156/0x410
[  411.885024][T14329]  ? __alloc_skb+0x35d/0x410
[  411.885037][T14329]  ? __alloc_skb+0x156/0x410
[  411.885047][T14329]  __alloc_skb+0x156/0x410
[  411.885058][T14329]  ? __alloc_skb+0x35d/0x410
[  411.885069][T14329]  ? __pfx___alloc_skb+0x10/0x10
[  411.885079][T14329]  ? rcu_is_watching+0x12/0xc0
[  411.885096][T14329]  ? print_track+0x10/0x50
[  411.885110][T14329]  ? kmem_cache_alloc_noprof+0x2af/0x770
[  411.885123][T14329]  ? lockdep_init_map_type+0x5c/0x270
[  411.885137][T14329]  audit_log_start+0x34e/0x950
[  411.885152][T14329]  ? __pfx_audit_log_start+0x10/0x10
[  411.885169][T14329]  ? find_held_lock+0x2b/0x80
[  411.885185][T14329]  audit_seccomp+0x60/0x1f0
[  411.885203][T14329]  __seccomp_filter+0xa91/0x11f0
[  411.885218][T14329]  ? __pfx___seccomp_filter+0x10/0x10
[  411.885232][T14329]  ? fput+0x70/0xf0
[  411.885244][T14329]  ? ksys_write+0x1ac/0x250
[  411.885260][T14329]  __secure_computing+0x215/0x320
[  411.885274][T14329]  syscall_trace_enter+0x89/0x220
[  411.885289][T14329]  __do_fast_syscall_32+0x2f8/0x680
[  411.885308][T14329]  do_fast_syscall_32+0x32/0x80
[  411.885324][T14329]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  411.885338][T14329] RIP: 0023:0xf70ad579
[  411.885347][T14329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  411.885358][T14329] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 000000000000006e
[  411.885368][T14329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  411.885375][T14329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  411.885380][T14329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  411.885386][T14329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  411.885392][T14329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  411.885406][T14329]  </TASK>
[  411.885418][T14329] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  411.940223][T14306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.940341][   T40] audit: type=1326 audit(2000000050.180:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  411.968010][T14329] audit: out of memory in audit_log_start
[  411.991595][   T40] audit: type=1326 audit(2000000050.180:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  411.999728][   T40] audit: type=1326 audit(2000000050.180:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  412.007117][   T40] audit: type=1326 audit(2000000050.180:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  412.015081][   T40] audit: type=1326 audit(2000000050.180:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  412.022886][   T40] audit: type=1326 audit(2000000050.180:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  412.030848][   T40] audit: type=1326 audit(2000000050.180:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14328 comm="syz.3.2083" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  412.186069][T14306] veth0_vlan: entered promiscuous mode
[  412.197804][T14306] veth1_vlan: entered promiscuous mode
[  412.216668][T14306] veth0_macvtap: entered promiscuous mode
[  412.231850][T14306] veth1_macvtap: entered promiscuous mode
[  412.240466][T14306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.246754][T14306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.261085][   T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.263974][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.267365][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.270443][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.364996][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.367927][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.407308][  T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.411045][  T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.596613][T14358] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2089'.
[  413.189004][ T5946] Bluetooth: hci4: command tx timeout
[  413.427764][  T103] net_ratelimit: 12 callbacks suppressed
[  413.427777][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.432676][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.907811][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.997723][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.001263][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.120939][T14404] FAULT_INJECTION: forcing a failure.
[  414.120939][T14404] name failslab, interval 1, probability 0, space 0, times 0
[  414.125886][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2098'.
[  414.127070][T14404] CPU: 3 UID: 0 PID: 14404 Comm: syz.3.2103 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.127096][T14404] Tainted: [L]=SOFTLOCKUP
[  414.127102][T14404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  414.127112][T14404] Call Trace:
[  414.127117][T14404]  <TASK>
[  414.127124][T14404]  dump_stack_lvl+0x16c/0x1f0
[  414.127153][T14404]  should_fail_ex+0x512/0x640
[  414.127176][T14404]  should_failslab+0xc2/0x120
[  414.127204][T14404]  __kmalloc_noprof+0xeb/0x910
[  414.127222][T14404]  ? aa_label_asxprint+0x75/0x130
[  414.127244][T14404]  ? aa_label_asxprint+0x75/0x130
[  414.127261][T14404]  aa_label_asxprint+0x75/0x130
[  414.127286][T14404]  apparmor_lsmprop_to_secctx+0xb2/0x1a0
[  414.127312][T14404]  security_lsmprop_to_secctx+0x146/0x1a0
[  414.127341][T14404]  audit_log_subj_ctx+0x29b/0x460
[  414.127364][T14404]  ? map_id_range_up+0x2ce/0x3b0
[  414.127388][T14404]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[  414.127418][T14404]  ? audit_log_format+0xe8/0x130
[  414.127453][T14404]  ? apparmor_current_getlsmprop_subj+0xf0/0x3f0
[  414.127478][T14404]  audit_log_task_context+0x85/0xb0
[  414.127498][T14404]  ? __pfx_audit_log_task_context+0x10/0x10
[  414.127525][T14404]  audit_log_task+0x1c2/0x3f0
[  414.127551][T14404]  ? __pfx_audit_log_task+0x10/0x10
[  414.127583][T14404]  audit_seccomp+0x79/0x1f0
[  414.127605][T14404]  __seccomp_filter+0xa91/0x11f0
[  414.127629][T14404]  ? __pfx___seccomp_filter+0x10/0x10
[  414.127653][T14404]  ? fput+0x70/0xf0
[  414.127675][T14404]  __secure_computing+0x215/0x320
[  414.127696][T14404]  syscall_trace_enter+0x89/0x220
[  414.127719][T14404]  __do_fast_syscall_32+0x2f8/0x680
[  414.127748][T14404]  do_fast_syscall_32+0x32/0x80
[  414.127774][T14404]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  414.127796][T14404] RIP: 0023:0xf70ad579
[  414.127809][T14404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  414.127825][T14404] RSP: 002b:00000000f549d55c EFLAGS: 00000296 ORIG_RAX: 000000000000006e
[  414.127841][T14404] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  414.127852][T14404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  414.127863][T14404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  414.127872][T14404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  414.127881][T14404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  414.127905][T14404]  </TASK>
[  414.246991][T14407] comedi comedi0: Minor 2 could not be opened
[  414.250282][T14407] netlink: 'syz.7.2101': attribute type 13 has an invalid length.
[  414.252521][T14407] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2101'.
[  414.284465][T14409] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2105'.
[  415.267573][ T5946] Bluetooth: hci4: command tx timeout
[  415.988398][   T10] usb 44-1: device descriptor read/8, error -110
[  416.022682][T14427] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  416.024802][T14427] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  416.232679][T14427] vhci_hcd vhci_hcd.0: Device attached
[  416.377988][   T10] usb usb44-port1: attempt power cycle
[  416.507712][  T980] usb 52-1: SetAddress Request (2) to port 0
[  416.509717][  T980] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd
[  416.690323][T14428] vhci_hcd: connection reset by peer
[  416.692888][ T1144] vhci_hcd vhci_hcd.7: stop threads
[  416.695104][ T1144] vhci_hcd vhci_hcd.7: release socket
[  416.697348][ T1144] vhci_hcd vhci_hcd.7: disconnect device
[  416.707632][ T5987] usb 40-1: device descriptor read/8, error -110
[  416.987878][   T10] usb usb44-port1: unable to enumerate USB device
[  417.158242][ T5987] usb usb40-port1: attempt power cycle
[  417.272215][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.276216][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.331531][T14445] xt_connbytes: Forcing CT accounting to be enabled
[  417.338380][T14445] xt_TPROXY: Can be used only with -p tcp or -p udp
[  417.347614][ T5946] Bluetooth: hci4: command tx timeout
[  417.464545][T14447] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  417.466647][T14447] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  417.480487][T14447] vhci_hcd vhci_hcd.0: Device attached
[  417.561957][   T40] kauditd_printk_skb: 370 callbacks suppressed
[  417.561968][   T40] audit: type=1326 audit(2000000055.860:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000
[  417.577647][ T5987] usb 40-1: SetAddress Request (30) to port 0
[  417.579623][ T5987] usb 40-1: new SuperSpeed USB device number 30 using vhci_hcd
[  417.590808][   T40] audit: type=1326 audit(2000000055.870:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.611671][   T40] audit: type=1326 audit(2000000055.880:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.630515][   T40] audit: type=1326 audit(2000000055.880:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.646379][   T40] audit: type=1326 audit(2000000055.880:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.666437][   T40] audit: type=1326 audit(2000000055.880:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.682404][   T40] audit: type=1326 audit(2000000055.880:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.698772][   T40] audit: type=1326 audit(2000000055.880:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.713224][   T40] audit: type=1326 audit(2000000055.880:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.725584][   T40] audit: type=1326 audit(2000000055.880:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14451 comm="syz.3.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000
[  417.824523][T14448] vhci_hcd: connection reset by peer
[  417.826776][  T225] vhci_hcd vhci_hcd.1: stop threads
[  417.828874][  T225] vhci_hcd vhci_hcd.1: release socket
[  417.830697][  T225] vhci_hcd vhci_hcd.1: disconnect device
[  418.133835][T14460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2118'.
[  418.307495][T14461] block nbd6: Device being setup by another task
[  418.409267][T14459] block nbd6: shutting down sockets
[  418.467993][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.471159][    C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.107619][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.110398][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.137593][T14474] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  419.139712][T14474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  419.142858][T14474] vhci_hcd vhci_hcd.0: Device attached
[  419.180227][T14474] comedi comedi0: pcl724: I/O port conflict (0x3,4)
[  419.227257][T14478] program syz.7.2123 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  419.390098][T14483] FAULT_INJECTION: forcing a failure.
[  419.390098][T14483] name failslab, interval 1, probability 0, space 0, times 0
[  419.394015][T14483] CPU: 3 UID: 0 PID: 14483 Comm: syz.6.2124 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.394033][T14483] Tainted: [L]=SOFTLOCKUP
[  419.394037][T14483] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  419.394044][T14483] Call Trace:
[  419.394067][T14483]  <TASK>
[  419.394073][T14483]  dump_stack_lvl+0x16c/0x1f0
[  419.394094][T14483]  should_fail_ex+0x512/0x640
[  419.394109][T14483]  should_failslab+0xc2/0x120
[  419.394126][T14483]  __kmalloc_noprof+0xeb/0x910
[  419.394138][T14483]  ? aa_label_asxprint+0x75/0x130
[  419.394152][T14483]  ? aa_label_asxprint+0x75/0x130
[  419.394162][T14483]  aa_label_asxprint+0x75/0x130
[  419.394174][T14483]  apparmor_lsmprop_to_secctx+0xb2/0x1a0
[  419.394189][T14483]  security_lsmprop_to_secctx+0x146/0x1a0
[  419.394208][T14483]  audit_log_subj_ctx+0x29b/0x460
[  419.394222][T14483]  ? map_id_range_up+0x2ce/0x3b0
[  419.394238][T14483]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[  419.394254][T14483]  ? audit_log_format+0xe8/0x130
[  419.394267][T14483]  ? apparmor_current_getlsmprop_subj+0xf0/0x3f0
[  419.394281][T14483]  audit_log_task_context+0x85/0xb0
[  419.394295][T14483]  ? __pfx_audit_log_task_context+0x10/0x10
[  419.394311][T14483]  audit_log_task+0x1c2/0x3f0
[  419.394328][T14483]  ? __pfx_audit_log_task+0x10/0x10
[  419.394349][T14483]  audit_seccomp+0x79/0x1f0
[  419.394362][T14483]  __seccomp_filter+0xa91/0x11f0
[  419.394376][T14483]  ? __pfx___seccomp_filter+0x10/0x10
[  419.394395][T14483]  __secure_computing+0x215/0x320
[  419.394408][T14483]  syscall_trace_enter+0x89/0x220
[  419.394422][T14483]  do_int80_emulation+0x2d7/0x480
[  419.394441][T14483]  asm_int80_emulation+0x1a/0x20
[  419.394452][T14483] RIP: 0023:0xf7fc5598
[  419.394461][T14483] Code: 00 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 58 b8 77 00 00 00 cd 80 <90> 8d b4 26 00 00 00 00 b8 ad 00 00 00 cd 80 90 90 90 90 90 90 90
[  419.394472][T14483] RSP: 002b:00000000f54b57b4 EFLAGS: 00000293 ORIG_RAX: 0000000000000077
[  419.394482][T14483] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  419.394489][T14483] RDX: 0000000000000000 RSI: 00000000f7456ff4 RDI: 0000000000000000
[  419.394495][T14483] RBP: 00000000f7484f80 R08: 0000000000000000 R09: 0000000000000000
[  419.394501][T14483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  419.394507][T14483] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  419.394520][T14483]  </TASK>
[  419.479433][ T5946] Bluetooth: hci4: command tx timeout
[  419.585347][T14487] netlink: 640 bytes leftover after parsing attributes in process `syz.6.2125'.
[  419.588530][T14487] netlink: 640 bytes leftover after parsing attributes in process `syz.6.2125'.
[  419.736267][T14475] vhci_hcd: connection closed
[  419.736505][ T1144] vhci_hcd vhci_hcd.1: stop threads
[  419.740878][ T1144] vhci_hcd vhci_hcd.1: release socket
[  419.743406][ T1144] vhci_hcd vhci_hcd.1: disconnect device
[  420.225453][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2132'.
[  420.303551][T14510] FAULT_INJECTION: forcing a failure.
[  420.303551][T14510] name failslab, interval 1, probability 0, space 0, times 0
[  420.309295][T14510] CPU: 3 UID: 0 PID: 14510 Comm: syz.6.2133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.309323][T14510] Tainted: [L]=SOFTLOCKUP
[  420.309330][T14510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  420.309341][T14510] Call Trace:
[  420.309347][T14510]  <TASK>
[  420.309355][T14510]  dump_stack_lvl+0x16c/0x1f0
[  420.309385][T14510]  should_fail_ex+0x512/0x640
[  420.309404][T14510]  ? __kmalloc_cache_noprof+0x5f/0x800
[  420.309426][T14510]  should_failslab+0xc2/0x120
[  420.309454][T14510]  __kmalloc_cache_noprof+0x80/0x800
[  420.309475][T14510]  ? audit_log_d_path+0xed/0x200
[  420.309505][T14510]  ? audit_log_d_path+0xed/0x200
[  420.309528][T14510]  audit_log_d_path+0xed/0x200
[  420.309554][T14510]  audit_log_d_path_exe+0x46/0x70
[  420.309579][T14510]  audit_log_task+0x31d/0x3f0
[  420.309608][T14510]  ? __pfx_audit_log_task+0x10/0x10
[  420.309641][T14510]  audit_seccomp+0x79/0x1f0
[  420.309664][T14510]  __seccomp_filter+0xa91/0x11f0
[  420.309697][T14510]  ? __pfx___seccomp_filter+0x10/0x10
[  420.309730][T14510]  __secure_computing+0x215/0x320
[  420.309752][T14510]  syscall_trace_enter+0x89/0x220
[  420.309776][T14510]  do_int80_emulation+0x2d7/0x480
[  420.309809][T14510]  asm_int80_emulation+0x1a/0x20
[  420.309828][T14510] RIP: 0023:0xf7fc5598
[  420.309842][T14510] Code: 00 00 51 52 55 89 e5 0f 34 cd 80 5d 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 90 58 b8 77 00 00 00 cd 80 <90> 8d b4 26 00 00 00 00 b8 ad 00 00 00 cd 80 90 90 90 90 90 90 90
[  420.309861][T14510] RSP: 002b:00000000f54b57b4 EFLAGS: 00000293 ORIG_RAX: 0000000000000077
[  420.309879][T14510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  420.309891][T14510] RDX: 0000000000000000 RSI: 00000000f7456ff4 RDI: 0000000000000000
[  420.309902][T14510] RBP: 00000000f7484f80 R08: 0000000000000000 R09: 0000000000000000
[  420.309914][T14510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.309925][T14510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  420.309950][T14510]  </TASK>
[  420.331243][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2132'.
[  420.386839][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2132'.
[  420.558940][T14517] debugfs: 'ttyS3' already exists in 'caif_serial'
[  421.076172][T14530] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2138'.
[  421.153618][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'.
[  421.399662][T14544] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  421.598979][  T980] usb 52-1: device descriptor read/8, error -110
[  421.915555][T14554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2145'.
[  421.992188][  T980] usb usb52-port1: attempt power cycle
[  422.054397][T14558] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.2146'.
[  422.134204][T14559] dlm: no local IP address has been set
[  422.136494][T14559] dlm: cannot start dlm midcomms -107
[  422.145310][T14559] netlink: 'syz.3.2146': attribute type 12 has an invalid length.
[  422.242436][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2145'.
[  422.390120][T14567] Failed to get privilege flags for destination (handle=0x0:0x0)
[  422.397710][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.403498][ T1144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.406571][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.415408][T14570] Invalid ELF header magic: != ELF
[  422.581308][  T980] usb usb52-port1: unable to enumerate USB device
[  422.627607][ T5987] usb 40-1: device descriptor read/8, error -110
[  422.687647][T14308] usb 12-1: new high-speed USB device number 2 using dummy_hcd
[  422.747619][ T5987] usb usb40-port1: unable to enumerate USB device
[  422.837685][T14308] usb 12-1: Using ep0 maxpacket: 16
[  422.841661][T14308] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.845776][T14308] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.849424][T14308] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  422.853641][T14308] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  422.856645][T14308] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.861113][T14308] usb 12-1: config 0 descriptor??
[  423.100686][ T6332] Bluetooth: (null): Invalid header checksum
[  423.208262][T13254] Bluetooth: (null): Invalid header checksum
[  423.300175][T14308] hid_parser_main: 5 callbacks suppressed
[  423.300213][T14308] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  423.304538][T14308] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  423.306900][T14308] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  423.337302][T14308] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:045E:07DA.0008/input/input27
[  423.442253][   T10] Process accounting resumed
[  423.449314][T14599] input: syz0 as /devices/virtual/input/input28
[  423.474191][T14308] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  423.580194][T14308] usb 12-1: USB disconnect, device number 2
[  423.588105][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.591955][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.595595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.679324][  T103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.682368][    C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.012576][   T40] kauditd_printk_skb: 208 callbacks suppressed
[  424.012594][   T40] audit: type=1326 audit(2000000062.310:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.024696][   T40] audit: type=1326 audit(2000000062.320:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.034232][   T40] audit: type=1326 audit(2000000062.330:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.050973][   T40] audit: type=1326 audit(2000000062.340:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.060954][   T40] audit: type=1326 audit(2000000062.340:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.069929][   T40] audit: type=1326 audit(2000000062.340:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.078927][   T40] audit: type=1326 audit(2000000062.340:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.087046][   T40] audit: type=1326 audit(2000000062.340:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.096730][   T40] audit: type=1326 audit(2000000062.340:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.104251][   T40] audit: type=1326 audit(2000000062.340:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.1.2161" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f87579 code=0x7ffc0000
[  424.107771][   T10] usb 11-1: new high-speed USB device number 6 using dummy_hcd
[  424.113139][T14613] siw: device registration error -23
[  424.161217][T14618] openvswitch: netlink: Key type 4470 is out of range max 32
[  424.180912][T14619] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  424.267503][   T10] usb 11-1: Using ep0 maxpacket: 8
[  424.276460][T14606] syzkaller1: entered promiscuous mode
[  424.278355][T14606] syzkaller1: entered allmulticast mode
[  424.408040][   T10] usb 11-1: unable to get BOS descriptor or descriptor too short
[  424.410513][   T10] usb 11-1: no configurations
[  424.412023][   T10] usb 11-1: can't read configurations, error -22
[  424.504820][T14623] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  424.506927][T14623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  424.509656][T14623] vhci_hcd vhci_hcd.0: Device attached
[  424.521104][T14631] vhci_hcd: connection closed
[  424.521311][T13254] vhci_hcd vhci_hcd.7: stop threads
[  424.524586][T13254] vhci_hcd vhci_hcd.7: release socket
[  424.526304][T13254] vhci_hcd vhci_hcd.7: disconnect device
[  424.965301][T14639] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  424.969403][T14638] overlayfs: missing 'lowerdir'
[  425.299962][T14643] syzkaller0: entered promiscuous mode
[  425.301679][T14643] syzkaller0: entered allmulticast mode
[  425.657847][T14663] __nla_validate_parse: 4 callbacks suppressed
[  425.657858][T14663] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2177'.
[  426.441587][T14693] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.444885][T14693] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.463406][T14693] netlink: 'syz.7.2184': attribute type 16 has an invalid length.
[  426.465903][T14693] netlink: 'syz.7.2184': attribute type 17 has an invalid length.
[  426.503775][T14693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.526787][T14704] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2187'.
[  426.645717][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'.
[  427.210447][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.226055][T14720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.277412][T14728] 
[  427.278332][T14728] =====================================================
[  427.280930][T14728] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  427.283307][T14728] syzkaller #0 Tainted: G             L     
[  427.285482][T14728] -----------------------------------------------------
[  427.287730][T14728] syz.3.2193/14728 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  427.290225][T14728] ffff8880709f77f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510
[  427.293012][T14728] 
[  427.293012][T14728] and this task is already holding:
[  427.295387][T14728] ffff88805440b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  427.298502][T14728] which would create a new lock dependency:
[  427.300369][T14728]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  427.302960][T14728] 
[  427.302960][T14728] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  427.305954][T14728]  (&dev->event_lock#2){..-.}-{3:3}
[  427.305973][T14728] 
[  427.305973][T14728] ... which became SOFTIRQ-irq-safe at:
[  427.310334][T14728]   lock_acquire+0x179/0x330
[  427.311847][T14728]   _raw_spin_lock_irqsave+0x3a/0x60
[  427.313534][T14728]   input_inject_event+0x9f/0x3b0
[  427.315196][T14728]   led_set_brightness+0x217/0x290
[  427.316832][T14728]   led_trigger_event+0xda/0x270
[  427.318455][T14728]   kbd_bh+0x247/0x330
[  427.319821][T14728]   tasklet_action_common+0x254/0x3f0
[  427.321562][T14728]   handle_softirqs+0x219/0x950
[  427.323137][T14728]   __irq_exit_rcu+0x109/0x170
[  427.324730][T14728]   irq_exit_rcu+0x9/0x30
[  427.326134][T14728]   sysvec_call_function+0xa4/0xc0
[  427.327771][T14728]   asm_sysvec_call_function+0x1a/0x20
[  427.329550][T14728]   _raw_spin_unlock_irqrestore+0x31/0x80
[  427.331863][T14728]   __wake_up+0x3f/0x60
[  427.333648][T14728]   vt_event_post+0x180/0x1e0
[  427.335677][T14728]   change_console+0x1ac/0x560
[  427.337726][T14728]   console_callback+0x1a1/0x4c0
[  427.339770][T14728]   process_one_work+0x9ba/0x1b20
[  427.341920][T14728]   worker_thread+0x6c8/0xf10
[  427.343940][T14728]   kthread+0x3c5/0x780
[  427.345708][T14728]   ret_from_fork+0x983/0xb10
[  427.347295][T14728]   ret_from_fork_asm+0x1a/0x30
[  427.348940][T14728] 
[  427.348940][T14728] to a SOFTIRQ-irq-unsafe lock:
[  427.351746][T14728]  (tasklist_lock){.+.+}-{3:3}
[  427.351773][T14728] 
[  427.351773][T14728] ... which became SOFTIRQ-irq-unsafe at:
[  427.357169][T14728] ...
[  427.357176][T14728]   lock_acquire+0x179/0x330
[  427.360337][T14728]   _raw_read_lock+0x5f/0x70
[  427.362354][T14728]   __do_wait+0x105/0x890
[  427.364194][T14728]   do_wait+0x21d/0x570
[  427.365951][T14728]   kernel_wait+0x9f/0x160
[  427.367889][T14728]   call_usermodehelper_exec_work+0xf1/0x170
[  427.370432][T14728]   process_one_work+0x9ba/0x1b20
[  427.372567][T14728]   worker_thread+0x6c8/0xf10
[  427.374589][T14728]   kthread+0x3c5/0x780
[  427.376305][T14728]   ret_from_fork+0x983/0xb10
[  427.378264][T14728]   ret_from_fork_asm+0x1a/0x30
[  427.380280][T14728] 
[  427.380280][T14728] other info that might help us debug this:
[  427.380280][T14728] 
[  427.384348][T14728] Chain exists of:
[  427.384348][T14728]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  427.384348][T14728] 
[  427.389317][T14728]  Possible interrupt unsafe locking scenario:
[  427.389317][T14728] 
[  427.391928][T14728]        CPU0                    CPU1
[  427.393635][T14728]        ----                    ----
[  427.395372][T14728]   lock(tasklist_lock);
[  427.396747][T14728]                                local_irq_disable();
[  427.399179][T14728]                                lock(&dev->event_lock#2);
[  427.401665][T14728]                                lock(&client->buffer_lock);
[  427.404008][T14728]   <Interrupt>
[  427.405136][T14728]     lock(&dev->event_lock#2);
[  427.406705][T14728] 
[  427.406705][T14728]  *** DEADLOCK ***
[  427.406705][T14728] 
[  427.409298][T14728] 7 locks held by syz.3.2193/14728:
[  427.411336][T14728]  #0: ffff88802760a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440
[  427.415044][T14728]  #1: ffff888021ecf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0
[  427.419091][T14728]  #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0
[  427.422457][T14728]  #3: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880
[  427.425466][T14728]  #4: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390
[  427.428493][T14728]  #5: ffff88805440b028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0
[  427.432620][T14728]  #6: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510
[  427.436276][T14728] 
[  427.436276][T14728] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  427.439669][T14728]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  427.441474][T14728]     IN-SOFTIRQ-W at:
[  427.442795][T14728]                       lock_acquire+0x179/0x330
[  427.444822][T14728]                       _raw_spin_lock_irqsave+0x3a/0x60
[  427.447088][T14728]                       input_inject_event+0x9f/0x3b0
[  427.449277][T14728]                       led_set_brightness+0x217/0x290
[  427.451570][T14728]                       led_trigger_event+0xda/0x270
[  427.454030][T14728]                       kbd_bh+0x247/0x330
[  427.456118][T14728]                       tasklet_action_common+0x254/0x3f0
[  427.458414][T14728]                       handle_softirqs+0x219/0x950
[  427.460524][T14728]                       __irq_exit_rcu+0x109/0x170
[  427.462611][T14728]                       irq_exit_rcu+0x9/0x30
[  427.464564][T14728]                       sysvec_call_function+0xa4/0xc0
[  427.466751][T14728]                       asm_sysvec_call_function+0x1a/0x20
[  427.469338][T14728]                       _raw_spin_unlock_irqrestore+0x31/0x80
[  427.471926][T14728]                       __wake_up+0x3f/0x60
[  427.473841][T14728]                       vt_event_post+0x180/0x1e0
[  427.475923][T14728]                       change_console+0x1ac/0x560
[  427.478001][T14728]                       console_callback+0x1a1/0x4c0
[  427.480365][T14728]                       process_one_work+0x9ba/0x1b20
[  427.482494][T14728]                       worker_thread+0x6c8/0xf10
[  427.484555][T14728]                       kthread+0x3c5/0x780
[  427.486472][T14728]                       ret_from_fork+0x983/0xb10
[  427.488671][T14728]                       ret_from_fork_asm+0x1a/0x30
[  427.490895][T14728]     INITIAL USE at:
[  427.492207][T14728]                      lock_acquire+0x179/0x330
[  427.494241][T14728]                      _raw_spin_lock_irqsave+0x3a/0x60
[  427.496469][T14728]                      input_inject_event+0x9f/0x3b0
[  427.498762][T14728]                      led_set_brightness+0x217/0x290
[  427.501370][T14728]                      kbd_led_trigger_activate+0xcb/0x110
[  427.503741][T14728]                      led_trigger_set+0x59a/0xc50
[  427.506437][T14728]                      led_trigger_set_default+0x1e0/0x2e0
[  427.508816][T14728]                      led_classdev_register_ext+0x71d/0xa30
[  427.511727][T14728]                      input_leds_connect+0x552/0x8e0
[  427.514589][T14728]                      input_attach_handler.isra.0+0x176/0x250
[  427.517714][T14728]                      input_register_device+0xab9/0x11b0
[  427.520675][T14728]                      atkbd_connect+0x5f8/0xa60
[  427.523168][T14728]                      serio_driver_probe+0x7f/0xd0
[  427.525263][T14728]                      really_probe+0x241/0xb20
[  427.527266][T14728]                      __driver_probe_device+0x1de/0x470
[  427.529673][T14728]                      driver_probe_device+0x4c/0x1b0
[  427.531826][T14728]                      __driver_attach+0x283/0x5e0
[  427.533913][T14728]                      bus_for_each_dev+0x13e/0x1d0
[  427.536011][T14728]                      serio_handle_event+0x281/0xb30
[  427.538211][T14728]                      process_one_work+0x9ba/0x1b20
[  427.540356][T14728]                      worker_thread+0x6c8/0xf10
[  427.542370][T14728]                      kthread+0x3c5/0x780
[  427.544258][T14728]                      ret_from_fork+0x983/0xb10
[  427.546271][T14728]                      ret_from_fork_asm+0x1a/0x30
[  427.548412][T14728]   }
[  427.549528][T14728]   ... key      at: [<ffffffff9af26840>] __key.7+0x0/0x40
[  427.552244][T14728] -> (&client->buffer_lock){....}-{3:3} {
[  427.554238][T14728]    INITIAL USE at:
[  427.555503][T14728]                    lock_acquire+0x179/0x330
[  427.557434][T14728]                    _raw_spin_lock+0x2e/0x40
[  427.559420][T14728]                    evdev_handle_get_val+0x66/0x600
[  427.561523][T14728]                    evdev_do_ioctl+0x800/0x1b30
[  427.563540][T14728]                    evdev_ioctl_compat+0x16f/0x1a0
[  427.565627][T14728]                    __ia32_compat_sys_ioctl+0x242/0x370
[  427.567832][T14728]                    __do_fast_syscall_32+0xe8/0x680
[  427.570018][T14728]                    do_fast_syscall_32+0x32/0x80
[  427.572051][T14728]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.574545][T14728]  }
[  427.575377][T14728]  ... key      at: [<ffffffff9af26cc0>] __key.88+0x0/0x40
[  427.577666][T14728]  ... acquired at:
[  427.578945][T14728]    _raw_spin_lock+0x2e/0x40
[  427.580457][T14728]    evdev_handle_get_val+0x66/0x600
[  427.582159][T14728]    evdev_do_ioctl+0x800/0x1b30
[  427.583756][T14728]    evdev_ioctl_compat+0x16f/0x1a0
[  427.585444][T14728]    __ia32_compat_sys_ioctl+0x242/0x370
[  427.587253][T14728]    __do_fast_syscall_32+0xe8/0x680
[  427.589234][T14728]    do_fast_syscall_32+0x32/0x80
[  427.591110][T14728]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.593173][T14728] 
[  427.593968][T14728] 
[  427.593968][T14728] the dependencies between the lock to be acquired
[  427.593975][T14728]  and SOFTIRQ-irq-unsafe lock:
[  427.598137][T14728]   -> (tasklist_lock){.+.+}-{3:3} {
[  427.599957][T14728]      HARDIRQ-ON-R at:
[  427.601274][T14728]                         lock_acquire+0x179/0x330
[  427.603250][T14728]                         _raw_read_lock+0x5f/0x70
[  427.605211][T14728]                         __do_wait+0x105/0x890
[  427.607174][T14728]                         do_wait+0x21d/0x570
[  427.609208][T14728]                         kernel_wait+0x9f/0x160
[  427.611190][T14728]                         call_usermodehelper_exec_work+0xf1/0x170
[  427.613638][T14728]                         process_one_work+0x9ba/0x1b20
[  427.615827][T14728]                         worker_thread+0x6c8/0xf10
[  427.617878][T14728]                         kthread+0x3c5/0x780
[  427.619812][T14728]                         ret_from_fork+0x983/0xb10
[  427.621852][T14728]                         ret_from_fork_asm+0x1a/0x30
[  427.624010][T14728]      SOFTIRQ-ON-R at:
[  427.625344][T14728]                         lock_acquire+0x179/0x330
[  427.627398][T14728]                         _raw_read_lock+0x5f/0x70
[  427.629815][T14728]                         __do_wait+0x105/0x890
[  427.631862][T14728]                         do_wait+0x21d/0x570
[  427.633764][T14728]                         kernel_wait+0x9f/0x160
[  427.635782][T14728]                         call_usermodehelper_exec_work+0xf1/0x170
[  427.638289][T14728]                         process_one_work+0x9ba/0x1b20
[  427.640890][T14728]                         worker_thread+0x6c8/0xf10
[  427.643621][T14728]                         kthread+0x3c5/0x780
[  427.646163][T14728]                         ret_from_fork+0x983/0xb10
[  427.648864][T14728]                         ret_from_fork_asm+0x1a/0x30
[  427.651667][T14728]      INITIAL USE at:
[  427.653009][T14728]                        lock_acquire+0x179/0x330
[  427.655341][T14728]                        _raw_write_lock_irq+0x36/0x50
[  427.657863][T14728]                        copy_process+0x4668/0x7430
[  427.659935][T14728]                        kernel_clone+0xfc/0x910
[  427.661918][T14728]                        user_mode_thread+0xc8/0x110
[  427.664011][T14728]                        rest_init+0x23/0x2b0
[  427.665972][T14728]                        start_kernel+0x3ef/0x4d0
[  427.667992][T14728]                        x86_64_start_reservations+0x18/0x30
[  427.670599][T14728]                        x86_64_start_kernel+0x130/0x190
[  427.672761][T14728]                        common_startup_64+0x13e/0x148
[  427.674908][T14728]      INITIAL READ USE at:
[  427.676324][T14728]                             lock_acquire+0x179/0x330
[  427.678484][T14728]                             _raw_read_lock+0x5f/0x70
[  427.680563][T14728]                             __do_wait+0x105/0x890
[  427.682970][T14728]                             do_wait+0x21d/0x570
[  427.685502][T14728]                             kernel_wait+0x9f/0x160
[  427.687693][T14728]                             call_usermodehelper_exec_work+0xf1/0x170
[  427.690246][T14728]                             process_one_work+0x9ba/0x1b20
[  427.692511][T14728]                             worker_thread+0x6c8/0xf10
[  427.694667][T14728]                             kthread+0x3c5/0x780
[  427.696646][T14728]                             ret_from_fork+0x983/0xb10
[  427.698952][T14728]                             ret_from_fork_asm+0x1a/0x30
[  427.701711][T14728]    }
[  427.702593][T14728]    ... key      at: [<ffffffff8e00c098>] tasklist_lock+0x18/0x40
[  427.705076][T14728]    ... acquired at:
[  427.706359][T14728]    _raw_read_lock+0x5f/0x70
[  427.707838][T14728]    send_sigio+0xb8/0x3e0
[  427.709599][T14728]    kill_fasync+0x214/0x510
[  427.711451][T14728]    lease_break_callback+0x23/0x30
[  427.713502][T14728]    __break_lease+0x6cd/0x1800
[  427.715309][T14728]    vfs_truncate+0x4ce/0x6d0
[  427.717145][T14728]    __ia32_compat_sys_truncate+0x171/0x1e0
[  427.719495][T14728]    __do_fast_syscall_32+0xe8/0x680
[  427.721565][T14728]    do_fast_syscall_32+0x32/0x80
[  427.723729][T14728]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.726451][T14728] 
[  427.727489][T14728]  -> (&f_owner->lock){....}-{3:3} {
[  427.729693][T14728]     INITIAL USE at:
[  427.731365][T14728]                      lock_acquire+0x179/0x330
[  427.733901][T14728]                      _raw_write_lock_irq+0x36/0x50
[  427.736264][T14728]                      __f_setown+0x61/0x3c0
[  427.738161][T14728]                      fcntl_dirnotify+0x7b1/0xb60
[  427.740190][T14728]                      do_fcntl+0x504/0x1660
[  427.742070][T14728]                      do_compat_fcntl64+0x367/0x710
[  427.744173][T14728]                      __do_fast_syscall_32+0xe8/0x680
[  427.746348][T14728]                      do_fast_syscall_32+0x32/0x80
[  427.748514][T14728]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.751755][T14728]     INITIAL READ USE at:
[  427.753570][T14728]                           lock_acquire+0x179/0x330
[  427.756228][T14728]                           _raw_read_lock_irq+0x67/0x80
[  427.759075][T14728]                           do_fcntl+0x54e/0x1660
[  427.761365][T14728]                           do_compat_fcntl64+0x367/0x710
[  427.763621][T14728]                           __do_fast_syscall_32+0xe8/0x680
[  427.766562][T14728]                           do_fast_syscall_32+0x32/0x80
[  427.769367][T14728]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.772682][T14728]   }
[  427.773729][T14728]   ... key      at: [<ffffffff9ac4e3c0>] __key.1+0x0/0x40
[  427.776679][T14728]   ... acquired at:
[  427.778279][T14728]    _raw_read_lock_irqsave+0x74/0x90
[  427.779984][T14728]    send_sigio+0x31/0x3e0
[  427.781414][T14728]    kill_fasync+0x214/0x510
[  427.782904][T14728]    lease_break_callback+0x23/0x30
[  427.784549][T14728]    __break_lease+0x6cd/0x1800
[  427.786101][T14728]    do_dentry_open+0x6e7/0x1590
[  427.787675][T14728]    vfs_open+0x82/0x3f0
[  427.789303][T14728]    path_openat+0x2078/0x3140
[  427.790835][T14728]    do_filp_open+0x20b/0x470
[  427.792318][T14728]    do_sys_openat2+0x121/0x290
[  427.793867][T14728]    __ia32_compat_sys_openat+0x16d/0x210
[  427.795672][T14728]    __do_fast_syscall_32+0xe8/0x680
[  427.797337][T14728]    do_fast_syscall_32+0x32/0x80
[  427.799235][T14728]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.801687][T14728] 
[  427.802546][T14728] -> (&new->fa_lock){....}-{3:3} {
[  427.804697][T14728]    INITIAL USE at:
[  427.806376][T14728]                    lock_acquire+0x179/0x330
[  427.808884][T14728]                    _raw_write_lock_irq+0x36/0x50
[  427.811608][T14728]                    fasync_remove_entry+0xb2/0x1e0
[  427.814318][T14728]                    fasync_helper+0xaf/0xd0
[  427.816796][T14728]                    lease_modify+0x232/0x500
[  427.819289][T14728]                    locks_remove_file+0x29e/0x5c0
[  427.821998][T14728]                    __fput+0x351/0xb70
[  427.824302][T14728]                    task_work_run+0x150/0x240
[  427.826853][T14728]                    do_exit+0x87f/0x2bd0
[  427.829175][T14728]                    do_group_exit+0xd3/0x2a0
[  427.831657][T14728]                    __ia32_sys_exit_group+0x3e/0x50
[  427.833810][T14728]                    ia32_sys_call+0x1276/0x1c90
[  427.836312][T14728]                    __do_fast_syscall_32+0xe8/0x680
[  427.838992][T14728]                    do_fast_syscall_32+0x32/0x80
[  427.841584][T14728]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.844793][T14728]    INITIAL READ USE at:
[  427.846583][T14728]                         lock_acquire+0x179/0x330
[  427.849190][T14728]                         _raw_read_lock_irqsave+0x74/0x90
[  427.852068][T14728]                         kill_fasync+0x138/0x510
[  427.854644][T14728]                         lease_break_callback+0x23/0x30
[  427.857344][T14728]                         __break_lease+0x6cd/0x1800
[  427.860024][T14728]                         do_dentry_open+0x6e7/0x1590
[  427.862867][T14728]                         vfs_open+0x82/0x3f0
[  427.865075][T14728]                         path_openat+0x2078/0x3140
[  427.867516][T14728]                         do_filp_open+0x20b/0x470
[  427.870257][T14728]                         do_sys_openat2+0x121/0x290
[  427.873001][T14728]                         __ia32_compat_sys_openat+0x16d/0x210
[  427.876032][T14728]                         __do_fast_syscall_32+0xe8/0x680
[  427.878853][T14728]                         do_fast_syscall_32+0x32/0x80
[  427.881231][T14728]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.883832][T14728]  }
[  427.884669][T14728]  ... key      at: [<ffffffff9ac4e380>] __key.0+0x0/0x40
[  427.886869][T14728]  ... acquired at:
[  427.888048][T14728]    lock_acquire+0x179/0x330
[  427.889589][T14728]    _raw_read_lock_irqsave+0x74/0x90
[  427.891300][T14728]    kill_fasync+0x138/0x510
[  427.892721][T14728]    evdev_pass_values+0x619/0x9b0
[  427.894386][T14728]    evdev_events+0x1bb/0x390
[  427.896256][T14728]    input_pass_values+0x74e/0x880
[  427.898417][T14728]    input_handle_event+0xf00/0x14d0
[  427.900152][T14728]    input_inject_event+0x1e8/0x3b0
[  427.902162][T14728]    evdev_write+0x2e1/0x440
[  427.904078][T14728]    vfs_write+0x2a0/0x11d0
[  427.905957][T14728]    ksys_write+0x1f8/0x250
[  427.907875][T14728]    __do_fast_syscall_32+0xe8/0x680
[  427.910067][T14728]    do_fast_syscall_32+0x32/0x80
[  427.912125][T14728]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.914793][T14728] 
[  427.915814][T14728] 
[  427.915814][T14728] stack backtrace:
[  427.918194][T14728] CPU: 3 UID: 0 PID: 14728 Comm: syz.3.2193 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  427.918223][T14728] Tainted: [L]=SOFTLOCKUP
[  427.918229][T14728] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[  427.918241][T14728] Call Trace:
[  427.918248][T14728]  <TASK>
[  427.918255][T14728]  dump_stack_lvl+0x116/0x1f0
[  427.918285][T14728]  check_irq_usage+0x8e6/0xbc0
[  427.918312][T14728]  ? tracing_record_taskinfo_sched_switch+0x54/0x400
[  427.918346][T14728]  ? check_path.constprop.0+0x24/0x50
[  427.918377][T14728]  ? __lock_acquire+0x167f/0x2890
[  427.918393][T14728]  __lock_acquire+0x167f/0x2890
[  427.918414][T14728]  lock_acquire+0x179/0x330
[  427.918431][T14728]  ? kill_fasync+0x138/0x510
[  427.918453][T14728]  _raw_read_lock_irqsave+0x74/0x90
[  427.918478][T14728]  ? kill_fasync+0x138/0x510
[  427.918497][T14728]  kill_fasync+0x138/0x510
[  427.918517][T14728]  evdev_pass_values+0x619/0x9b0
[  427.918544][T14728]  evdev_events+0x1bb/0x390
[  427.918568][T14728]  input_pass_values+0x74e/0x880
[  427.918593][T14728]  input_handle_event+0xf00/0x14d0
[  427.918617][T14728]  ? _copy_from_user+0x59/0xd0
[  427.918638][T14728]  input_inject_event+0x1e8/0x3b0
[  427.918665][T14728]  evdev_write+0x2e1/0x440
[  427.918688][T14728]  ? __pfx_evdev_write+0x10/0x10
[  427.918712][T14728]  ? bpf_lsm_file_permission+0x9/0x10
[  427.918733][T14728]  ? security_file_permission+0x71/0x210
[  427.918756][T14728]  ? rw_verify_area+0xcf/0x6c0
[  427.918779][T14728]  ? __pfx_evdev_write+0x10/0x10
[  427.918800][T14728]  vfs_write+0x2a0/0x11d0
[  427.918827][T14728]  ? __pfx_vfs_write+0x10/0x10
[  427.918849][T14728]  ? find_held_lock+0x2b/0x80
[  427.918871][T14728]  ? __fget_files+0x204/0x3c0
[  427.918897][T14728]  ? __fget_files+0x20e/0x3c0
[  427.918923][T14728]  ksys_write+0x1f8/0x250
[  427.918948][T14728]  ? __pfx_ksys_write+0x10/0x10
[  427.918975][T14728]  __do_fast_syscall_32+0xe8/0x680
[  427.919004][T14728]  do_fast_syscall_32+0x32/0x80
[  427.919030][T14728]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  427.919060][T14728] RIP: 0023:0xf70ad579
[  427.919075][T14728] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  427.919092][T14728] RSP: 002b:00000000f503855c EFLAGS: 00000296 ORIG_RAX: 0000000000000004
[  427.919109][T14728] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000040
[  427.919121][T14728] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000
[  427.919131][T14728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  427.919142][T14728] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000
[  427.919152][T14728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  427.919169][T14728]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  428.245736][T14720] batman_adv: batadv0: Interface deactivated: gretap1
[  428.264430][T14728] ªªªªªª38b62db2e: renamed from lo (while UP)
[  428.280516][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.283201][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.285795][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.288703][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  428.518112][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.628968][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.776596][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.884241][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  428.998654][   T46] erspan0: left allmulticast mode
[  429.000229][   T46] erspan0: left promiscuous mode
[  429.001803][   T46] bridge0: port 1(erspan0) entered disabled state
[  429.075685][   T46] dvmrp1 (unregistering): left allmulticast mode
[  429.257365][   T46] bond0 (unregistering): Released all slaves
[  429.332126][   T46] bond1 (unregistering): Released all slaves
[  429.405926][   T46] bond2 (unregistering): (slave dummy0): Releasing active interface
[  429.409554][   T46] bond2 (unregistering): Released all slaves
[  429.491860][   T46] tipc: Disabling bearer <eth:vlan0>
[  429.498708][   T46] tipc: Left network mode
[  429.850960][   T46] hsr_slave_0: left promiscuous mode
[  429.853071][   T46] 0·: left promiscuous mode
[  429.857197][   T46] pim6reg (unregistering): left allmulticast mode
[  429.860986][   T46] team0 (unregistering): Port device batadv3 removed
[  429.866782][   T46] team0 (unregistering): Port device batadv0 removed
[  429.924434][T13254] smc: removing ib device syz2
[  430.792330][   T46] IPVS: stop unused estimator thread 0...
[  430.922417][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.020799][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.060193][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.100384][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.151352][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.200810][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.240326][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.280194][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.328819][   T12] bridge_slave_1: left allmulticast mode
[  431.331157][   T12] bridge_slave_1: left promiscuous mode
[  431.333589][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.337115][   T12] bridge_slave_0: left allmulticast mode
[  431.341651][   T12] bridge_slave_0: left promiscuous mode
[  431.343672][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.347352][   T12] bridge_slave_1: left allmulticast mode
[  431.349454][   T12] bridge_slave_1: left promiscuous mode
[  431.351806][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.355137][   T12] bridge_slave_0: left allmulticast mode
[  431.356942][   T12] bridge_slave_0: left promiscuous mode
[  431.358881][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.531231][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.535709][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.540503][   T12] bond0 (unregistering): Released all slaves
[  431.719668][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.723117][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.726310][   T12] bond0 (unregistering): Released all slaves
[  431.858362][   T12] IPVS: stopping master sync thread 14619 ...
[  432.150698][   T12] hsr_slave_0: left promiscuous mode
[  432.152650][   T12] hsr_slave_1: left promiscuous mode
[  432.154581][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.156888][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.159532][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.161863][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.165672][   T12] hsr_slave_0: left promiscuous mode
[  432.167693][   T12] hsr_slave_1: left promiscuous mode
[  432.169600][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  432.171922][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  432.174552][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  432.176941][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  432.183121][   T12] veth1_macvtap: left promiscuous mode
[  432.185450][   T12] veth0_macvtap: left promiscuous mode
[  432.187868][   T12] veth1_vlan: left promiscuous mode
[  432.190098][   T12] veth0_vlan: left promiscuous mode
[  432.192310][   T12] veth1_macvtap: left promiscuous mode
[  432.194070][   T12] veth0_macvtap: left promiscuous mode
[  432.195821][   T12] veth1_vlan: left promiscuous mode
[  432.198389][   T12] veth0_vlan: left promiscuous mode
[  432.320353][   T12] team0 (unregistering): Port device team_slave_1 removed
[  432.335981][   T12] team0 (unregistering): Port device team_slave_0 removed
[  432.488612][   T12] team0 (unregistering): Port device team_slave_1 removed
[  432.502672][   T12] team0 (unregistering): Port device team_slave_0 removed