last executing test programs:

19m34.907108037s ago: executing program 32 (id=66):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_create1(0x80000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x50)
io_setup(0x4fe, &(0x7f00000009c0)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r8, 0x0, 0x0, 0x10000000005971}])
sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40000004)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000600)={[{@gid}]})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0xff)

12m19.430985721s ago: executing program 1 (id=679):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50)

12m17.592676156s ago: executing program 1 (id=683):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000140))
mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4)
sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f00000010c0))

12m15.678631942s ago: executing program 1 (id=686):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50)
getpid()

12m11.123030269s ago: executing program 1 (id=692):
r0 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r0, &(0x7f0000000000)=""/7, 0x7)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0x8}, {0x4e2c, 0x2, 0x1, 0x2}]})
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000)
mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r8, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100)

12m7.560688649s ago: executing program 1 (id=700):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = io_uring_setup(0x2ef3, &(0x7f0000000000)={0x0, 0x5716, 0x80, 0x0, 0x1})
io_uring_enter(r1, 0x992, 0x4214, 0x1, 0x0, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
close_range(r1, r2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_open_dev$video4linux(&(0x7f0000000500), 0x20, 0x400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
r4 = gettid()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)

12m3.340667627s ago: executing program 1 (id=704):
syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100}, &(0x7f00000007c0)=<r0=>0x0, &(0x7f0000000800))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a090000000000000000000200000073797a32000000001400000011000100"/67], 0x54}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
unshare(0x20000400)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x0, 0x7}}, './file0\x00'})
socket(0x1d, 0x2, 0x6)
sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

11m47.754657872s ago: executing program 33 (id=704):
syz_io_uring_setup(0x114, &(0x7f0000000140)={0x0, 0xfffffffc, 0x100}, &(0x7f00000007c0)=<r0=>0x0, &(0x7f0000000800))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a090000000000000000000200000073797a32000000001400000011000100"/67], 0x54}}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
unshare(0x20000400)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x0, 0x7}}, './file0\x00'})
socket(0x1d, 0x2, 0x6)
sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

10m28.009764494s ago: executing program 2 (id=836):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
r1 = syz_open_dev$mouse(0x0, 0x1, 0x2000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0xd})
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0)
close(0xffffffffffffffff)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x8, 0x4800003e, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
readv(r0, &(0x7f0000000280), 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200), 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000100)={0x80a0000, 0x208000, 0x8})

10m25.367366714s ago: executing program 2 (id=840):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0x0, 0x5, 0xff81, 0x0, 0x7c, 0x0})
keyctl$clear(0x7, 0xfffffffffffffffb)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r7=>0x0], &(0x7f0000000040), 0x3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff})
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback, 0x8}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

10m24.376785571s ago: executing program 5 (id=841):
landlock_create_ruleset(&(0x7f0000000040)={0x9a93, 0x0, 0x1}, 0xffffffffffffff14, 0x3)
r0 = socket$inet(0x2, 0x3, 0x8)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x3, 0x8695c3813aa3cd9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
chown(&(0x7f0000000000)='./file0\x00', 0x0, r4)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4)
r5 = socket$inet(0x2, 0x3, 0x6)
dup3(r0, r5, 0x0)
setsockopt$inet_int(r5, 0x0, 0x5, &(0x7f0000000000)=0x7, 0x4)
landlock_restrict_self(0xffffffffffffffff, 0x7)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)

10m24.368181511s ago: executing program 2 (id=842):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2}, 0x18)
brk(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10)
setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000280)={&(0x7f0000000340)={0x50, 0x0, 0x6, {0x7, 0x21, 0x85, 0x772542, 0xfbfd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000007300)="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", 0x2000, &(0x7f0000001880)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x2b, 0x2, 0x240000, 0x96ed, 0x40, 0xff, 0x446, 0x0, 0x0, 0x4, 0xfffffff7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', <r5=>0x0})
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0xbd08, @vifc_lcl_ifindex=r5, @multicast2}, 0x10)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '#}+\x19(/(^&&],\x00'})

10m24.005763984s ago: executing program 5 (id=843):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
getpid()

10m20.983558743s ago: executing program 5 (id=845):
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r3, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={<r4=>0x0, 0x5, 0x6, 0x5, 0x4}, &(0x7f0000000bc0)=0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001})
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x14, 0x2, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}}, {0x15, 0x3, 0x0, @multicast1}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000c00)={r4, 0x88000000}, 0x8)
syz_emit_ethernet(0x4d, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000100f97ff50d574fbf04afedb59d30782dd709debecb72481595b550ef51d9"], &(0x7f0000000080)={0x1, 0x1, [0xead, 0x912, 0x9b3, 0xc9]})

10m20.976639156s ago: executing program 2 (id=846):
syz_open_dev$sndmidi(0x0, 0x2, 0x141121)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x7, 0x8, 0x9, 0x0, 0xfffffffffffffffd, 0xf, 0x7, 0x2, 0xfffffffffffffffd, 0x0, 0x5})
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000180))
socket$kcm(0x10, 0x2, 0x4)
add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5)

10m14.055012369s ago: executing program 5 (id=856):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x2})
syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x14000005)
sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="24002abd7000fedbdf250c0000004c0004802400078008000300010100000800010007000000080001001700000008000200060000002400078008000200feffffff0800020002000000080003004abb0000080002000500000000010580080001006574680044000280080001001f00000008000100030000000800040005000000080003000a00000008000300200000000800040008000000080002000100000008000200fbffffff070001006962000007000100696200000800010065746800c8fe010065746800080001006574680007000100696200004400028008000200faffffff0800020000020000080002000ef7263e0800010007000000080003008c00000008000300ed000000080001001f00000008000400ff0000003c000280080001000c000000080004000200000008000300ff0f000008000300080000000800020001000080080001000500000008000300070000005000028008000100060000000800020008000000ab479597080002000100000008000200060000000800020007000000080001005d610000080002000000000008000100070000000800020003000000dc00018038000400200001000a004e2000000000fe8000000000000000000000000000aa001000001421ac1e01010000000000000000080003000c0000000f0001006574683a64766d72703100000d0001007564703a73797a3000df0000080003000900000038000400200001000a004e20000000afff010000000000000000000000000001070000001400020002004e227f0000010000000000000000380004001400010002004e24ac14140a0000000000000000200002000a004e2100000004200100000000000000000000000000000100000056e5e148a9dc04657451b952cef1f6e6223d9dbba786f0f2b9164ce880ffa03118b59ac2f33218457a24"], 0x28c}, 0x1, 0x0, 0x0, 0x4880}, 0x20000100)
io_uring_setup(0xaab, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
socket$inet6(0xa, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {<r8=>0xee01, 0xffffffffffffffff}}, './file0/file0\x00'})
ioprio_get$uid(0x0, r8)

10m13.714283104s ago: executing program 2 (id=857):
socket$nl_generic(0x10, 0x3, 0x10)
add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="2fe8230b59dccf041e5b7dae701213bdd7", 0x11, 0xfffffffffffffffe)
r0 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000240)='-::{\x81\xa8\xa3\x0fB\xdd\x8e\xf9\x0e\xfc', 0xfffffffffffffff8)
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
io_uring_setup(0x4792, &(0x7f00000001c0)={0x0, 0x878f})
r1 = socket(0x10, 0x3, 0x0)
gettid()
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00')
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000406010100000000000000000700000a0500010007000000050001000700000005000100070000000900020073797a3100000000aef8d4bcef6a81804eb155aa6a6172e0cfd2a8ce0954a3d7a95a015dea8cadb342523c95aba01db1971f5cb23bd35cc7ec0cff484d4d8c73ce258dce3913d81be29ce1968339f80d3ba9d391ffaa8d95a4d150390eef8320c2e05886b1a50137d59f8d212a08fadac6c9fab2f454900bf532b235d160401d9a93d624ffe1032d5c29"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x20080, 0x0)
write(r1, &(0x7f0000000280)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
write$sndseq(r4, 0x0, 0x0)

10m11.845714121s ago: executing program 5 (id=858):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xf)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_NMI(r8, 0xae9a)
ioctl$KVM_RUN(r8, 0xae80, 0x28)
shutdown(r2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x52c0, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

10m9.675947189s ago: executing program 5 (id=861):
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x2, 0x3, [{0x2, 0x6}, {0xc00, 0x3ff}, {0x3, 0x5de3}, {0x14, 0xfff}, {0x9, 0x4000069a}, {0x7, 0x7f}, {0x81, 0x5}, {0x82, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280), 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000000c0)=0x3ff, 0x80b, 0x2)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, &(0x7f00000002c0)=0x5, 0x4, 0x5)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r5, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffe, 0x81, 0x6, 0x8, 0xa2f3}}, &(0x7f00000003c0)=0xb0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20343059, 0x0, 0x400000, 0x0, 0x0, 0xfffffffc}})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@generic={0x0, r7}, 0x18)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x2000000, 0x0, 0x0, 0x9, 0x3}, {0xa000006, 0x0, 0x0, 0x8, 0xffff}]})
r9 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x11b000, 0x8)
fchown(r9, 0xffffffffffffffff, 0x0)

10m7.813634758s ago: executing program 2 (id=865):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x20)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03030000000040000000060000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r4, &(0x7f0000000080), 0x0, 0x92, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r6)
gettid()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x31aad000)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000002)

9m53.323120801s ago: executing program 34 (id=861):
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x0, 0x4000})
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x2, 0x3, [{0x2, 0x6}, {0xc00, 0x3ff}, {0x3, 0x5de3}, {0x14, 0xfff}, {0x9, 0x4000069a}, {0x7, 0x7f}, {0x81, 0x5}, {0x82, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280), 0x0)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000000c0)=0x3ff, 0x80b, 0x2)
mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, &(0x7f00000002c0)=0x5, 0x4, 0x5)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={r5, 0x8001, 0x8, 0xf801, 0x247, 0x0, 0x78f0, 0x3, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffffffe, 0x81, 0x6, 0x8, 0xa2f3}}, &(0x7f00000003c0)=0xb0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20343059, 0x0, 0x400000, 0x0, 0x0, 0xfffffffc}})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00'}, 0x10)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@generic={0x0, r7}, 0x18)
r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSNLIST(r8, 0x8010640b, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x2000000, 0x0, 0x0, 0x9, 0x3}, {0xa000006, 0x0, 0x0, 0x8, 0xffff}]})
r9 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x11b000, 0x8)
fchown(r9, 0xffffffffffffffff, 0x0)

9m52.308120884s ago: executing program 35 (id=865):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x20)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x59555956, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x4, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x1}, {0x1}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x4, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03030000000040000000060000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
preadv(r4, &(0x7f0000000080), 0x0, 0x92, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r6)
gettid()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r7, 0x4002f516, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x31aad000)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000002)

5m23.921007282s ago: executing program 4 (id=1236):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000180)=ANY=[], 0x75})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"])
openat$kvm(0xffffff9c, 0x0, 0x80800, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r2 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000007e40)={'wpan0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000084)
fsmount(r1, 0x0, 0x0)
socket$inet6(0xa, 0xa, 0x7c9)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000f31acd0a04c433b5380100000000000400", @ANYBLOB="ef030000000f000008000500", @ANYRES32=r5, @ANYBLOB="1c00128009000100766c616e000000000c00028006"], 0x44}}, 0x4004850)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r6, &(0x7f0000000100)={0x1f, @none}, 0x8)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000002d000100000000090000000004000080350011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7000000"], 0x4c}], 0x1}, 0x20004840)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r7=>r6}, './file0\x00'})
setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x2f, @empty, 0x5}, {0xa, 0x4e24, 0xfffff809, @private0, 0x4}, 0x1, {[0x5, 0x8, 0xbf41, 0x6, 0x100, 0xcdd, 0xff, 0xd]}}, 0x5c)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r7, 0xc028ae92, &(0x7f0000000100)={0x20000000, 0x23000000})
semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000080)=""/141)

5m21.850850395s ago: executing program 4 (id=1242):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@bcast, @default, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
mkdir(&(0x7f0000000000)='./file1\x00', 0xf0a552e37b97b976)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x0, 0x2, 0x40000476, 0x4000000000000000, 0xfffffffffffffffc, 0x8, 0x0, 0xfeff})
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], 0x1, 0x800})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x3c}}, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)

5m19.998620495s ago: executing program 4 (id=1246):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
getpid()

5m12.626347292s ago: executing program 4 (id=1254):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r3=>0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xfc)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x4)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xff)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0xff)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xfe)
syz_io_uring_submit(r3, 0x0, 0x0)

5m9.939370841s ago: executing program 4 (id=1261):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount$9p_rdma(0x0, 0x0, 0x0, 0x1000800, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0})
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockname(r6, &(0x7f0000000380)=@xdp, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

5m8.316597719s ago: executing program 4 (id=1264):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
getpid()

4m51.962842018s ago: executing program 36 (id=1264):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
getpid()

3m1.050932646s ago: executing program 6 (id=1456):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x5}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x8006, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x80000}, 0x50)
getpid()

2m55.236676051s ago: executing program 6 (id=1465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffffffffffff7f0000000000000000dfa2140f1de2682fbe0952"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xd, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x3)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x24, 0x0, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x10, r5}, 0x18)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)=0x3)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x40000000000003, 0xfffffffffffffffa, 0x3fff})

2m52.522305185s ago: executing program 6 (id=1472):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x20004000)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4501, 0x0)
bind$inet6(r2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x10, 0x3, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x5c, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r8=>0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r9, r1, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r8})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)

2m49.895797295s ago: executing program 6 (id=1477):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000a7a000/0x7000)=nil, 0x7000}, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x80000d6)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_io_uring_setup(0x117, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
close(0x3)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xfffffffffffffffc})
setuid(0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10001})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000000c0)={0x73, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
close(0x3)

2m47.064212967s ago: executing program 6 (id=1481):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10)
r1 = memfd_secret(0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000000e142f012bbd7000ffdbdf250800010000000000326a3b4d6479e9b847f978b5f196dbd982a56d30fb44496693301679e2e7d8b985df16410e89dbba3a9537b36d892db376d5fa550b11ffe9e714e62e29f4944b7f30abaf9ff1ff073b93f8267188f433cff941ab01487b4eeedcb571e726bba9e8502d8d4a6987e66b131f3c43"], 0x18}, 0x1, 0x0, 0x0, 0x4118}, 0x4040004)
ftruncate(r1, 0x4)
finit_module(r1, 0x0, 0x1)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00'}, 0x10)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x87, 0xc, 0x0, 0xdd24, 0xb7, 0x7, 0x75, 0xf2, 0x5, 0x2, 0x61, 0x0, 0x40, 0x7, 0x7, 0x8, 0x60, 0xe1, '\x00', 0x1, 0x1})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, 0x0)
r8 = syz_socket_connect_nvme_tcp()
r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r9, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c)
recvfrom$inet_nvme(r8, &(0x7f0000000080)=""/155, 0x9b, 0x0, &(0x7f0000000180)=@hci={0x1f, 0x4, 0x3}, 0x80)

2m44.563853527s ago: executing program 6 (id=1485):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
r1 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x4004004)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f00000000c0))
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000100), 0x4)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x4d, 0x3, 0x8})
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="0100000006008c1431bcaa4a1a9e0c447bd5358b1f103d998f7fbc0100160de3c46b1eb732892b5e6e6e064268737a1326e70d3a70557d9ec07597c3a6dc865efac284c289c3a7094df23fedfdbd79a61be0bcb4f5164280ac8dda1b2a24d4d34faf1fd4a70ffefb5bec55871b83f6ec1ed4b63fe4467adb50c93ce6abbadb574cb967f435b8485e5fb2d3034a98ada2ff525ecfd4a7857ec02a8c3a1087992d05f33bd02ebef7c4cc15cde5ae52069f0f1432e84d2e3d82144894fc91130cc4e4dd58e299c63b229cb7858d0e7af586efe2101ecd019001ba5af7af63d9edccc10a77c1b06bc2"])
write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})

2m28.339828064s ago: executing program 37 (id=1485):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
r1 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x4004004)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f00000000c0))
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000100), 0x4)
getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x4d, 0x3, 0x8})
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}})
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd})
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYBLOB="0100000006008c1431bcaa4a1a9e0c447bd5358b1f103d998f7fbc0100160de3c46b1eb732892b5e6e6e064268737a1326e70d3a70557d9ec07597c3a6dc865efac284c289c3a7094df23fedfdbd79a61be0bcb4f5164280ac8dda1b2a24d4d34faf1fd4a70ffefb5bec55871b83f6ec1ed4b63fe4467adb50c93ce6abbadb574cb967f435b8485e5fb2d3034a98ada2ff525ecfd4a7857ec02a8c3a1087992d05f33bd02ebef7c4cc15cde5ae52069f0f1432e84d2e3d82144894fc91130cc4e4dd58e299c63b229cb7858d0e7af586efe2101ecd019001ba5af7af63d9edccc10a77c1b06bc2"])
write$tcp_mem(r6, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})

25.382836754s ago: executing program 7 (id=1691):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x3, 0x7)
r3 = socket$inet(0xa, 0x801, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x80)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8)
sendto$inet6(r4, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0)
close(r4)
write$dsp(0xffffffffffffffff, 0x0, 0x0)

24.522172111s ago: executing program 9 (id=1692):
r0 = memfd_create(0x0, 0x3)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300))
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x9)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES8=r1, @ANYRES64=r3, @ANYRES32=r1, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x85, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x3})
userfaultfd(0x1)

23.748549146s ago: executing program 3 (id=1694):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000400)=0x4000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200))
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040f04000404089512eafdee781f5cd4efc84cc6e6ff2b8511d293b9e95302f4a8cab44afad5b00553ad5fab8e4de2904fec0df368160cc71c8f38a8374e2eabb343a0"], 0x7)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000040)={0x8000000, 0xa6, 0x2})
socket$inet_sctp(0x2, 0x1, 0x84)

23.402797906s ago: executing program 9 (id=1695):
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/20, 0x14)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000001b40)={0x70, 0xb3}, 0x20)
r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55)
keyctl$read(0xb, r2, &(0x7f0000000380)=""/64, 0x40)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000080))
connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55)
mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000300)={[{@memory_hugetlb_accounting}]})

20.83841205s ago: executing program 3 (id=1697):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003})
r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x42, 0x8)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x440c0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
fanotify_init(0x200, 0x0)
listen(0xffffffffffffffff, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpid()
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$ptys(0xc, 0x3, 0x0)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @multicast1, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c)
setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@empty, @multicast1, 0x1, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x9, 0x8000200, 0x0, 0x7}, 0x3c)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
r5 = inotify_init()
r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001)
inotify_rm_watch(r5, r6)
socket(0x400000000010, 0x3, 0x0)

19.669823965s ago: executing program 9 (id=1698):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wg2\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
timer_create(0x0, 0x0, 0x0)
r6 = syz_open_procfs(r3, 0x0)
write$FUSE_IOCTL(r6, 0x0, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
sched_getattr(r3, &(0x7f0000000c00)={0x38}, 0x38, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
unshare(0x40020000)

17.797568654s ago: executing program 7 (id=1699):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000000a0a01ff"], 0x14}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'ip6gretap0\x00'}}, 0x1e)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91)
close(r6)

17.778517717s ago: executing program 0 (id=1709):
mkdir(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec85"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000001180), 0x82002, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x15, 0x5, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read(r3, &(0x7f0000000040)=""/148, 0xffffff96)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001080)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000994007100a007a290457f0155e65f7b7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/208, 0xd0}], 0x1}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r5 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000580))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]})
r6 = syz_usb_connect(0x3, 0x36, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, &(0x7f0000000200))
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000011c0)=@ethtool_ts_info})
syz_open_dev$evdev(&(0x7f0000001040), 0x1000, 0x80)

14.984635185s ago: executing program 3 (id=1700):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400e}}, 0x0, 0x100, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0x2})
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_int(r4, 0x6, 0x15, &(0x7f0000000180)=0xffffffff, 0x4)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fd}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x48)

14.471301194s ago: executing program 8 (id=1701):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ftruncate(0xffffffffffffffff, 0x6000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r8=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)}, 0x22)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

12.222165262s ago: executing program 7 (id=1702):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$key(0xf, 0x3, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r5, 0x1, 0x10000000000009, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)

12.100518333s ago: executing program 9 (id=1703):
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
getpid()
timer_create(0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x7, 0xf989, "adb18d"}]}}}}}}}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80c0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r2=>0x0})
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r2})
syz_usb_connect(0x2, 0x36, &(0x7f0000001400)={{0x12, 0x1, 0x0, 0x1f, 0xbf, 0xe4, 0x10, 0x79, 0x85eb, 0x90b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd5, 0x0, 0x2, 0xff, 0x5d, 0x1, 0x0, [], [{{0x9, 0x5, 0x4, 0xc, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x9}}]}}]}}]}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)

11.382149121s ago: executing program 8 (id=1704):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000080000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffffffffffffff7f0000000000000000dfa2140f1de2682fbe0952"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0xd, &(0x7f0000000880)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x3)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0)
syz_emit_ethernet(0x7e, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x24, 0x0, 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x10, r5}, 0x18)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000340)=0x3)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800})
ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x40000000000003, 0xfffffffffffffffa, 0x3fff})

9.619301244s ago: executing program 3 (id=1705):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
setgroups(0x0, 0x0)
getgroups(0x1, &(0x7f0000000080)=[<r6=>0xee00])
setregid(0x0, r6)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70)
mkdir(&(0x7f0000000340)='./file0\x00', 0xff0c)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(r7, 0x4004743c, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a0302"], 0x34}}, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12020)
ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000240)=0x10001)
write(r7, &(0x7f0000000180)="1124", 0x2)
fcntl$lock(r5, 0x25, &(0x7f00000000c0))
socket$inet6(0xa, 0x805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)

9.55398943s ago: executing program 0 (id=1706):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
socket(0x18, 0x3, 0x204)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x1, &(0x7f00000005c0)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10168, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94)
socket$packet(0x11, 0x3, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socket(0x25, 0x5, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
setresuid(0x0, 0x0, 0xffffffffffffffff)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0xfffffefc, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x3, 0x8, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe}, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00')
pread64(r4, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20000000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000100)={{0x2, 0xa1}, 0x1, 0x1, 0x2, {0x5, 0xd3}, 0x4, 0xa})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000200)=0x30)

9.459964395s ago: executing program 7 (id=1707):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x20000001)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000d40)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000000080)='.\x00', 0x0)
rename(&(0x7f0000000580)='./file0\x00', 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r6, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000300)=0xb, 0x4)
dup(r6)

7.576629601s ago: executing program 8 (id=1708):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ftruncate(0xffffffffffffffff, 0x6000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22)
sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

7.570680721s ago: executing program 9 (id=1710):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socket(0x200000100000011, 0x3, 0x3)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000300)="b0deaf17acc0f0b130e3e3f7cfc9be61e91c01518934423d9b615053b62cb51bf54abed45dfc532bfe84e67610250f6d0b4c38e237b109152ae9b3b4cc1e584e50d5ac75f12d82fe7bf3ea5f04e98640c9951faa02fe5e38cbdbe0cf564a99d5d9ac090aedc1ca99abc636963a7e68887f467838c21a3134da0fabc90b8d0136d86faa440cc9d11ee3e23184a43b17e39e6227f4efd92fb72d7a", 0x9a}], 0x1)
write$evdev(r5, &(0x7f0000000040), 0x373)
lseek(r4, 0xfffffffffffffff5, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000480)='+\xc2\xc798H#\xff\x7fg\x92\xfa\xfaJ\x84\x9aY_\x7f\x01\a\xf3\x02.\xa4\x8c\\$\xf3h\x94\xcb7\xba\xb4\x89\xf0:5\xb9\xeb\x03S:ie\xbf\x84\xe6\xbf\x1b\x13\xc2Kh\xc74\x0e\x9e\xf1y\xfdX\xd2R5', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc4c85512, &(0x7f0000000c80)={{0x5, 0x1, 0x10, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x213, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe8eb, 0x2, 0x3, 0x8000000000000000, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffff, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xc00000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0xb, 0xc9f, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1cb600000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x3, 0x2c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800000000, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x61928afd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4000000000]})
connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r9, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

6.610677641s ago: executing program 7 (id=1711):
write$proc_mixer(0xffffffffffffffff, 0x0, 0xe4)
io_setup(0x30, &(0x7f0000000600))
socket(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0x222ac00}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x800)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0)
close(r2)
socket(0x22, 0x2, 0x24)

6.514266789s ago: executing program 0 (id=1712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1})
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
syz_open_procfs(0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000020000100000000000000000002000000000000000000000014"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4044)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000, 0x0, 0x0, 0x9, 0x832]}})

5.319091899s ago: executing program 8 (id=1713):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='ext4_allocate_inode\x00', 0xffffffffffffffff, 0x0, 0xfdc3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10)
sendmsg$inet_sctp(r3, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0xffe0}], 0x1, 0x0, 0x0, 0x20000080}, 0x10)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x74}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r7 = socket$inet6(0x10, 0x3, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r8}, 0x18)
sendto$inet6(r7, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x4, &(0x7f0000000040)=0xffffff5c, 0x4)

4.682149029s ago: executing program 0 (id=1714):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0)
read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x4e22, 0x0, @remote, 0x4ffc}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa)
shutdown(r4, 0x1)
io_uring_enter(0xffffffffffffffff, 0xd81, 0x0, 0x0, 0x0, 0x0)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}}, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
r8 = dup(r7)
write$6lowpan_enable(r8, 0x0, 0x0)
fchdir(r1)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x1101)

3.248289996s ago: executing program 8 (id=1715):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ftruncate(0xffffffffffffffff, 0x6000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r8=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)}, 0x22)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

3.190353694s ago: executing program 3 (id=1716):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x5}, @remote}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00')
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400)
ioctl$SG_IO(r2, 0x2285, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a623e02c03cb697a653e336f000000500000000000ff0200000000000000000000000000013200001200000000020090780000000369c46dea0006ff0800000000000000000000000000000001ff0200000000000000000000000000011d000000000000000502040100000000625d0000000000000502200010d492385c3783d3afa4087aac07f72281b3b12267af7a3550aa1c3df47e5193806438916ec2e867d21394d0ececf9700962d3e17e4bb578aafd31a3f1955010879ee9079424526f222aa9e6477366d11ceda8cc0a4a1008153a04ddaa531db1dc129d6fb8f95c13d752d80f25ce2b253934d9a86bdf503653d3730ada1509d9536c165576ddde5926db915dd86eb3e2a03a7e56c01f4067638d6b7a6b4e9712c66ed550b77c6e655dc71d08ae40755d11b56963a28dce50181d34e7c4b0caae8cf4b947526eecd89735717604aec2730381ca1b51ab01ed0a4c78a4ba64a733fec74ad4071ffb454d5a4e2e167705cc70cb4551a1892279fbf20f41698d06c87d4928fab8c35581c02c8b06d25f4cfab68bc929dad45297768657d0f9e3a28e4f385d3ab4f4ebc9a48469fcc680b11ae610a658ca37f442cb8abda0ca080fbfd107f702b3f57f6c29b827a6c9cd6c1a9d010a3eacb011178887d654d395a63fb718e6da50ad25840efb4801a6182f56836a03a91927cf013f3742d1491545656fddd952bbe35611dd164de5a822333d106f767e2b1fbbda7fd780c2ba8ba487e69e259bb1b9bfe90974aea4e9496999180776a13796b9c394f54ae1f6371556443be28b730502000c05028805040116050200040be4bb69246c6dd959322a3c6381cd5ecbbb7131ac5b4c10756fddad9452625b1f85dcb2db18d954111331928b8202efd022be464387d6ab7358c74e997342ee7eb1c46a817d6708b603963384c4499ef4dbf57fb3a40f974a32c25f0f9ae3953b921ea771007c951a3ed9237fc4a068fc39022aa39e70b1af46265c180eab098a06f6fd55b9ec6890f78ea1a3d5a17cac3a3887f13eeb3d163de914bcfbaf40a4a52a94901be888d6845fd4eb61ed9eebcfafb7588f7f92a12711672e4050f36e6a8695ef98eeb35f9f8f631207ba50c041580262f52bdfc87946bc87efba2e7eba9ea2f4a7072a8d83a045895d9642a081ddef313f45aa94fc70c117653ab8ddf92747a49c5c20a771233573e692d1caa10000000000003ec7000000000000c30013ea3bcc03cbfea3899367b93bc9545a9abe3e513929efb617a5c70410c64c077ec9040cc413710e4fbcf7d971af86cdf8d5f8f04948fcbf318c7894000412d2"], 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
gettid()
timer_create(0x6, 0x0, &(0x7f0000bbdffc))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000880))

2.126551914s ago: executing program 8 (id=1717):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)={0x20, 0x200c, 0x3, 0x1d, 0x200b, 0x0})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030d87f626b9e2b303030303030", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d082b9b91aa084522186f531ddba458ddbeb52050133dad0c", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = dup(r2)
fanotify_mark(r2, 0x401, 0x1018, r3, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x90000001})
epoll_pwait(r4, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xe, 0x1814808, 0xfff8, 0x3, 0x4, 0x1, 0x0, 0x0, 0x40, 0x6}}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in={0x2, 0x4e21, @dev}], 0x3c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

2.118385697s ago: executing program 7 (id=1718):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x66, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x0, 0x6, "8cb02b", 0x4, 0x3b, 0x0, @loopback, @local}}}}}}}, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe)
listen(0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$revoke(0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300), 0x8)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r4, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/225, 0xe1}], 0x1, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2, 0x2}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/32, 0x20}, {&(0x7f0000000a40)=""/47, 0x2f}], 0x7, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x2, &(0x7f0000000180)=""/2, 0x41000, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x1, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)=[{0x4, 0x1, 0xa, 0xc}, {0x3, 0x3, 0x6, 0x4}, {0x1, 0x5, 0xb, 0x8}, {0x1, 0x3, 0x8, 0x7}], 0x10, 0x5}, 0x94)

2.103617463s ago: executing program 0 (id=1727):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18)
ftruncate(0xffffffffffffffff, 0x6000000)
socket$nl_route(0x10, 0x3, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r8=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000280), &(0x7f0000000140)}, 0x22)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)

747.741365ms ago: executing program 9 (id=1719):
syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$tipc(r6, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x801, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8028}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x5b4efbb362ec214f}, 0x7000000)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)

447.691253ms ago: executing program 0 (id=1720):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x0, 'veth1_vlan\x00'}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r3)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, 0x0)
unshare(0x24020400)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r6 = socket$kcm(0xa, 0x1, 0x0)
r7 = socket$kcm(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r7], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7})
socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7})

0s ago: executing program 3 (id=1721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000040), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1eba, &(0x7f0000000700)=ANY=[@ANYRESHEX=r3], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_SET(r4, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x34, 0xe}, 0x9, 0x5, 0x2, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x3ff})
shmctl$SHM_UNLOCK(r4, 0xc)
socket(0x2, 0x3, 0x5)
r5 = syz_open_procfs(0x0, &(0x7f0000000380)='wchan\x00')
read$FUSE(r5, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
prlimit64(r6, 0xc, &(0x7f0000000000)={0x1ff, 0x8}, &(0x7f0000000240))
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x12, "518aba4d000000000000000000000000002000"})
r10 = dup(r9)
write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r8, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10})

kernel console output (not intermixed with test programs):

 762.942696][T10551] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  762.998809][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  763.019461][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  763.056112][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  763.080535][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  763.092087][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  763.120935][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  763.214421][T10739] netlink: 200 bytes leftover after parsing attributes in process `syz.4.914'.
[  763.238566][T10739] netlink: 44 bytes leftover after parsing attributes in process `syz.4.914'.
[  763.312102][T10601] hsr_slave_0: entered promiscuous mode
[  763.312613][T10732] netlink: 'syz.4.914': attribute type 1 has an invalid length.
[  763.320756][T10601] hsr_slave_1: entered promiscuous mode
[  763.327266][T10732] netlink: 224 bytes leftover after parsing attributes in process `syz.4.914'.
[  763.337785][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  763.349800][T10601] Cannot create hsr debugfs directory
[  763.412538][T10378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.635488][T10378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.699305][T10567] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  764.051643][T10567] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  764.287990][T10378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.329094][T10567] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  764.347732][ T5837] Bluetooth: hci1: command 0x1003 tx timeout
[  764.365078][T10567] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  764.422904][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  764.623481][T10378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.125634][T10756] befs: (nbd0): No write support. Marking filesystem read-only
[  765.139380][T10756] syz.0.917: attempt to access beyond end of device
[  765.139380][T10756] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[  765.154554][T10756] befs: (nbd0): unable to read superblock
[  765.193767][T10551] 8021q: adding VLAN 0 to HW filter on device bond0
[  765.419468][T10551] 8021q: adding VLAN 0 to HW filter on device team0
[  765.752818][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.760374][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.081971][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.089658][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  769.484470][T10378] bridge_slave_1: left allmulticast mode
[  769.513999][T10378] bridge_slave_1: left promiscuous mode
[  769.540983][T10378] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.562014][T10378] bridge_slave_0: left allmulticast mode
[  769.576602][T10378] bridge_slave_0: left promiscuous mode
[  769.582544][T10378] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.627016][T10378] bridge_slave_1: left allmulticast mode
[  769.632895][T10378] bridge_slave_1: left promiscuous mode
[  769.642713][T10378] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.655580][T10378] bridge_slave_0: left allmulticast mode
[  769.661358][T10378] bridge_slave_0: left promiscuous mode
[  769.672478][T10378] bridge0: port 1(bridge_slave_0) entered disabled state
[  771.188801][T10378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  771.210085][T10378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  771.220958][T10378] bond0 (unregistering): Released all slaves
[  771.606171][T10378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  771.618478][T10378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  771.629283][T10378] bond0 (unregistering): Released all slaves
[  771.756857][T10567] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.871645][T10567] 8021q: adding VLAN 0 to HW filter on device team0
[  771.892991][T10601] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  772.327210][T10808] Bluetooth: hci1: Frame reassembly failed (-84)
[  772.877085][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.884691][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.924528][T10601] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  773.089431][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.096952][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.183079][T10601] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  773.194856][T10601] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  773.469289][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'.
[  773.909110][T10551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  774.114990][T10378] hsr_slave_0: left promiscuous mode
[  774.132521][T10378] hsr_slave_1: left promiscuous mode
[  774.141491][T10378] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.150781][T10378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.161313][T10378] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  774.169537][T10378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.187029][T10378] hsr_slave_0: left promiscuous mode
[  774.193547][T10378] hsr_slave_1: left promiscuous mode
[  774.207631][T10378] batman_adv: batadv0: Removing interface: batadv_slave_0
[  774.220196][T10378] batman_adv: batadv0: Removing interface: batadv_slave_1
[  774.288252][T10378] veth1_macvtap: left promiscuous mode
[  774.294979][T10378] veth0_macvtap: left promiscuous mode
[  774.304658][T10378] veth1_vlan: left promiscuous mode
[  774.322490][T10378] veth1_macvtap: left promiscuous mode
[  774.330211][T10378] veth0_macvtap: left promiscuous mode
[  774.343144][T10378] veth1_vlan: left promiscuous mode
[  774.349841][T10378] veth0_vlan: left promiscuous mode
[  775.032269][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  776.277591][T10835] sctp: [Deprecated]: syz.4.929 (pid 10835) Use of struct sctp_assoc_value in delayed_ack socket option.
[  776.277591][T10835] Use struct sctp_sack_info instead
[  781.294938][T10378] team0 (unregistering): Port device team_slave_1 removed
[  781.370964][T10378] team0 (unregistering): Port device team_slave_0 removed
[  783.000081][T10378] team0 (unregistering): Port device team_slave_1 removed
[  783.063179][T10378] team0 (unregistering): Port device team_slave_0 removed
[  785.323024][T10601] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.464304][T10601] 8021q: adding VLAN 0 to HW filter on device team0
[  785.564591][ T6023] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.572233][ T6023] bridge0: port 1(bridge_slave_0) entered forwarding state
[  785.697491][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state
[  785.704852][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state
[  786.972443][T10567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.073106][T10378] IPVS: stop unused estimator thread 0...
[  787.092514][T10551] veth0_vlan: entered promiscuous mode
[  787.299019][T10551] veth1_vlan: entered promiscuous mode
[  788.644817][T10551] veth0_macvtap: entered promiscuous mode
[  789.394934][T10551] veth1_macvtap: entered promiscuous mode
[  789.484832][T10551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  789.538250][T10551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  789.585103][T10551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  789.605944][T10551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  789.614794][T10551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  789.669660][T10551] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  789.773626][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  792.229092][T10567] veth0_vlan: entered promiscuous mode
[  792.398248][T10567] veth1_vlan: entered promiscuous mode
[  792.674172][T10933] Bluetooth: hci1: Frame reassembly failed (-84)
[  794.181822][T10601] veth0_vlan: entered promiscuous mode
[  794.302417][T10601] veth1_vlan: entered promiscuous mode
[  794.411004][T10034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  794.425856][T10034] Bluetooth: hci4: unexpected event for opcode 0x041b
[  794.436351][T10034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  794.448402][T10034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  794.502700][T10034] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  794.517365][T10034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  794.746331][ T5837] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  794.999283][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  795.031088][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  795.044752][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  795.076037][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  795.091819][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  795.430570][T10955] xt_l2tp: v2 sid > 0xffff: 262144
[  795.849375][ T1165] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  795.941431][T10601] veth0_macvtap: entered promiscuous mode
[  796.318882][T10601] veth1_macvtap: entered promiscuous mode
[  796.491104][ T1165] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  796.594306][ T5837] Bluetooth: hci3: command tx timeout
[  796.732330][T10965] xt_connbytes: Forcing CT accounting to be enabled
[  796.739926][T10965] set match dimension is over the limit!
[  797.068289][ T1165] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.171427][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0
[  797.241816][ T5837] Bluetooth: hci1: command tx timeout
[  797.304745][ T1165] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  797.831981][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1
[  797.881611][T10601] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  797.896701][T10601] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  797.910592][T10601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  797.922515][T10601] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  798.130781][T10942] chnl_net:caif_netlink_parms(): no params data found
[  798.477960][T10946] chnl_net:caif_netlink_parms(): no params data found
[  798.665836][ T5837] Bluetooth: hci3: command tx timeout
[  798.828329][T10946] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.839433][T10946] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.847711][T10946] bridge_slave_0: entered allmulticast mode
[  798.855207][T10946] bridge_slave_0: entered promiscuous mode
[  798.863767][T10942] bridge0: port 1(bridge_slave_0) entered blocking state
[  798.872257][T10942] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.882290][T10942] bridge_slave_0: entered allmulticast mode
[  798.890258][T10942] bridge_slave_0: entered promiscuous mode
[  798.899547][T10942] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.907031][T10942] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.915337][T10942] bridge_slave_1: entered allmulticast mode
[  798.923139][T10942] bridge_slave_1: entered promiscuous mode
[  798.952601][T10946] bridge0: port 2(bridge_slave_1) entered blocking state
[  798.961246][T10946] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.969015][T10946] bridge_slave_1: entered allmulticast mode
[  798.977985][T10946] bridge_slave_1: entered promiscuous mode
[  799.123651][ T6023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.139095][T10942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.153768][ T6023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.174558][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.191578][ T1165] bridge_slave_1: left allmulticast mode
[  799.200032][ T1165] bridge_slave_1: left promiscuous mode
[  799.212905][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  799.231565][ T1165] bridge_slave_0: left allmulticast mode
[  799.237857][ T1165] bridge_slave_0: left promiscuous mode
[  799.243921][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  799.309337][ T5837] Bluetooth: hci1: command tx timeout
[  800.694872][T11001] Bluetooth: hci5: Frame reassembly failed (-84)
[  801.157918][ T5844] Bluetooth: hci3: command tx timeout
[  801.164391][T10034] Bluetooth: hci5: sending frame failed (-49)
[  801.172737][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  801.405725][T10034] Bluetooth: hci1: command tx timeout
[  802.509748][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  802.538093][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  802.547738][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  802.562484][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  802.571700][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  802.662811][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'.
[  802.800566][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  802.815244][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  802.826687][ T1165] bond0 (unregistering): Released all slaves
[  802.844738][T10942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.864036][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  802.968757][T10942] team0: Port device team_slave_0 added
[  803.053992][T10942] team0: Port device team_slave_1 added
[  803.218695][T10946] team0: Port device team_slave_0 added
[  803.227585][ T5837] Bluetooth: hci3: command tx timeout
[  803.251942][T10946] team0: Port device team_slave_1 added
[  803.365357][ T5837] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  803.387113][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.962'.
[  803.430263][ T1165] hsr_slave_0: left promiscuous mode
[  803.438159][ T1165] hsr_slave_1: left promiscuous mode
[  803.444549][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  803.452283][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  803.465327][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  803.475275][ T5837] Bluetooth: hci1: command tx timeout
[  803.481133][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  803.510442][ T1165] veth1_macvtap: left promiscuous mode
[  803.516207][ T1165] veth0_macvtap: left promiscuous mode
[  803.522076][ T1165] veth1_vlan: left promiscuous mode
[  803.562576][ T1165] veth0_vlan: left promiscuous mode
[  804.586277][ T5837] Bluetooth: hci5: command tx timeout
[  806.665738][ T5837] Bluetooth: hci5: command tx timeout
[  806.747389][   T24] IPVS: starting estimator thread 0...
[  806.855410][T11051] IPVS: using max 49 ests per chain, 117600 per kthread
[  807.599960][T11062] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  807.611437][T11062] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  807.626512][T11062] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  807.634874][T11062] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  807.938522][T11055] binfmt_misc: register: failed to install interpreter file ./file0
[  808.050689][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  808.118891][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  808.724467][T10942] batman_adv: batadv0: Adding interface: batadv_slave_0
[  808.733662][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  808.759630][    C1] vkms_vblank_simulate: vblank timer overrun
[  808.766950][T10942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  808.767451][ T5837] Bluetooth: hci5: command tx timeout
[  808.835985][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  808.923436][T10942] batman_adv: batadv0: Adding interface: batadv_slave_1
[  808.939843][T10942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  809.194770][T10942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  809.226463][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0
[  809.233647][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  809.274892][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.169233][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1
[  810.194525][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  810.220869][    C1] vkms_vblank_simulate: vblank timer overrun
[  810.241266][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  810.944885][ T5837] Bluetooth: hci5: command tx timeout
[  811.314209][T11084] netlink: 80 bytes leftover after parsing attributes in process `syz.4.973'.
[  811.394212][T11084] /dev/nullb0: Can't open blockdev
[  814.134073][T11014] chnl_net:caif_netlink_parms(): no params data found
[  814.330941][T10946] hsr_slave_0: entered promiscuous mode
[  814.338086][T10946] hsr_slave_1: entered promiscuous mode
[  814.368499][T10942] hsr_slave_0: entered promiscuous mode
[  814.381715][T10942] hsr_slave_1: entered promiscuous mode
[  814.393593][T10942] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  814.429250][T11088] Bluetooth: MGMT ver 1.23
[  814.469060][T10942] Cannot create hsr debugfs directory
[  815.443665][ T6327] Bluetooth: hci2: Frame reassembly failed (-84)
[  815.935476][T11014] bridge0: port 1(bridge_slave_0) entered blocking state
[  815.946245][T11014] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.954000][T11014] bridge_slave_0: entered allmulticast mode
[  815.968858][T11014] bridge_slave_0: entered promiscuous mode
[  815.985205][T11014] bridge0: port 2(bridge_slave_1) entered blocking state
[  815.994360][T11014] bridge0: port 2(bridge_slave_1) entered disabled state
[  816.007649][T11014] bridge_slave_1: entered allmulticast mode
[  816.071609][T11014] bridge_slave_1: entered promiscuous mode
[  816.283560][T11014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  816.349484][T11014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  816.399094][ T1165] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.481861][ T1165] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.528455][T11014] team0: Port device team_slave_0 added
[  816.557311][T11014] team0: Port device team_slave_1 added
[  816.608025][ T1165] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.693494][ T1165] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.709793][T11014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  816.717269][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.744514][T11014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  816.760132][T11014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  816.767745][T11014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  816.799062][T11014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  816.923896][T11014] hsr_slave_0: entered promiscuous mode
[  816.931793][T11014] hsr_slave_1: entered promiscuous mode
[  816.940205][T11014] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  816.948211][T11014] Cannot create hsr debugfs directory
[  817.109644][ T1165] bridge_slave_1: left allmulticast mode
[  817.117977][ T1165] bridge_slave_1: left promiscuous mode
[  817.123878][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.133731][ T1165] bridge_slave_0: left allmulticast mode
[  817.140458][ T1165] bridge_slave_0: left promiscuous mode
[  817.158840][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.171271][ T1165] bridge_slave_1: left allmulticast mode
[  817.177489][ T1165] bridge_slave_1: left promiscuous mode
[  817.183247][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.192448][ T1165] bridge_slave_0: left allmulticast mode
[  817.200640][ T1165] bridge_slave_0: left promiscuous mode
[  817.207053][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.393292][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  817.765467][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  817.779039][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  817.790046][ T1165] bond0 (unregistering): Released all slaves
[  818.184027][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  818.196224][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.207011][ T1165] bond0 (unregistering): Released all slaves
[  818.549264][ T1165] hsr_slave_0: left promiscuous mode
[  818.555322][ T1165] hsr_slave_1: left promiscuous mode
[  818.561747][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  818.570965][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.580633][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  818.588745][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  818.600630][ T1165] hsr_slave_0: left promiscuous mode
[  818.608934][ T1165] hsr_slave_1: left promiscuous mode
[  818.614994][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.623473][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  818.658747][ T1165] veth1_macvtap: left promiscuous mode
[  818.664526][ T1165] veth0_macvtap: left promiscuous mode
[  818.670448][ T1165] veth1_vlan: left promiscuous mode
[  818.676322][ T1165] veth0_vlan: left promiscuous mode
[  818.706839][ T1165] veth1_vlan: left promiscuous mode
[  818.712598][ T1165] veth0_vlan: left promiscuous mode
[  819.034790][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.4.977'.
[  822.021751][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  822.082433][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  823.059927][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  823.129808][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  823.305943][T10034] Bluetooth: hci5: command 0x0405 tx timeout
[  823.718503][T11120] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ
�D��UD�w�}�zR3��p(@O�>���P��'
[  823.740464][T11120] CPU: 1 UID: 0 PID: 11120 Comm: syz.0.979 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  823.740492][T11120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  823.740507][T11120] Call Trace:
[  823.740515][T11120]  <TASK>
[  823.740521][T11120]  dump_stack_lvl+0x189/0x250
[  823.740541][T11120]  ? __pfx_dump_stack_lvl+0x10/0x10
[  823.740554][T11120]  ? __pfx__printk+0x10/0x10
[  823.740568][T11120]  ? kernfs_path_from_node+0x2c/0x260
[  823.740582][T11120]  ? kernfs_path_from_node+0x2c/0x260
[  823.740593][T11120]  ? kernfs_path_from_node+0x2c/0x260
[  823.740606][T11120]  ? kernfs_path_from_node+0x22c/0x260
[  823.740617][T11120]  ? kernfs_path_from_node+0x2c/0x260
[  823.740631][T11120]  sysfs_warn_dup+0x8e/0xa0
[  823.740643][T11120]  sysfs_do_create_link_sd+0xc0/0x110
[  823.740657][T11120]  device_add_class_symlinks+0x1cf/0x240
[  823.740675][T11120]  device_add+0x475/0xb50
[  823.740692][T11120]  wiphy_register+0x199a/0x26b0
[  823.740719][T11120]  ? __pfx_wiphy_register+0x10/0x10
[  823.740743][T11120]  ieee80211_register_hw+0x33e1/0x4120
[  823.740769][T11120]  ? ieee80211_register_hw+0x1471/0x4120
[  823.740789][T11120]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  823.740807][T11120]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  823.740828][T11120]  ? __hrtimer_setup+0x187/0x210
[  823.740839][T11120]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  823.740858][T11120]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  823.740890][T11120]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  823.740904][T11120]  ? trace_kmalloc+0x1f/0xd0
[  823.740913][T11120]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  823.740924][T11120]  ? kstrndup+0xbf/0x160
[  823.740943][T11120]  hwsim_new_radio_nl+0xea4/0x1b10
[  823.740960][T11120]  ? __pfx___nla_validate_parse+0x10/0x10
[  823.740981][T11120]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  823.741003][T11120]  ? __nla_parse+0x40/0x60
[  823.741018][T11120]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  823.741035][T11120]  genl_family_rcv_msg_doit+0x215/0x300
[  823.741051][T11120]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  823.741070][T11120]  ? bpf_lsm_capable+0x9/0x20
[  823.741082][T11120]  ? security_capable+0x7e/0x2e0
[  823.741101][T11120]  genl_rcv_msg+0x60e/0x790
[  823.741116][T11120]  ? __pfx_genl_rcv_msg+0x10/0x10
[  823.741126][T11120]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  823.741149][T11120]  netlink_rcv_skb+0x205/0x470
[  823.741171][T11120]  ? __pfx_genl_rcv_msg+0x10/0x10
[  823.741190][T11120]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  823.741235][T11120]  ? down_read+0x1ad/0x2e0
[  823.741262][T11120]  genl_rcv+0x28/0x40
[  823.741284][T11120]  netlink_unicast+0x75c/0x8e0
[  823.741324][T11120]  netlink_sendmsg+0x805/0xb30
[  823.741351][T11120]  ? irqentry_exit+0x74/0x90
[  823.741381][T11120]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.741419][T11120]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  823.741438][T11120]  ? __pfx_netlink_sendmsg+0x10/0x10
[  823.741475][T11120]  __sock_sendmsg+0x21c/0x270
[  823.741503][T11120]  ____sys_sendmsg+0x505/0x830
[  823.741541][T11120]  ? __pfx_____sys_sendmsg+0x10/0x10
[  823.741582][T11120]  ? import_iovec+0x74/0xa0
[  823.741614][T11120]  ___sys_sendmsg+0x21f/0x2a0
[  823.741647][T11120]  ? __pfx____sys_sendmsg+0x10/0x10
[  823.741718][T11120]  ? __fget_files+0x2a/0x420
[  823.741739][T11120]  ? __fget_files+0x3a0/0x420
[  823.741774][T11120]  __x64_sys_sendmsg+0x19b/0x260
[  823.741807][T11120]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  823.741850][T11120]  ? rcu_is_watching+0x15/0xb0
[  823.741878][T11120]  ? do_syscall_64+0xbe/0x3b0
[  823.741905][T11120]  do_syscall_64+0xfa/0x3b0
[  823.741929][T11120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.741948][T11120]  ? asm_sysvec_call_function_single+0x1a/0x20
[  823.741966][T11120]  ? clear_bhb_loop+0x60/0xb0
[  823.741991][T11120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.742009][T11120] RIP: 0033:0x7fa5bfb8ebe9
[  823.742037][T11120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  823.742055][T11120] RSP: 002b:00007fa5bddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  823.742077][T11120] RAX: ffffffffffffffda RBX: 00007fa5bfdb6090 RCX: 00007fa5bfb8ebe9
[  823.742093][T11120] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004
[  823.742107][T11120] RBP: 00007fa5bfc11e19 R08: 0000000000000000 R09: 0000000000000000
[  823.742120][T11120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  823.742132][T11120] R13: 00007fa5bfdb6128 R14: 00007fa5bfdb6090 R15: 00007ffeb734a838
[  823.742166][T11120]  </TASK>
[  824.277125][T10942] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  824.359856][T10942] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  824.384337][T10942] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  824.433460][T10942] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  824.887764][T10946] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  825.120671][T10946] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  825.238463][T10946] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  825.270594][T10946] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  825.597930][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'.
[  825.699682][T11135] netlink: 'syz.4.981': attribute type 11 has an invalid length.
[  825.708132][T11135] netlink: 224 bytes leftover after parsing attributes in process `syz.4.981'.
[  825.853447][T10942] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.351419][T10942] 8021q: adding VLAN 0 to HW filter on device team0
[  826.438323][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.445960][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.846667][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.854206][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.993849][T10946] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.033749][T11153] delete_channel: no stack
[  827.100635][T11157] netlink: 'syz.4.986': attribute type 3 has an invalid length.
[  827.109011][T11157] netlink: 'syz.4.986': attribute type 3 has an invalid length.
[  827.735344][T11161] 9pnet_fd: Insufficient options for proto=fd
[  827.772662][T10946] 8021q: adding VLAN 0 to HW filter on device team0
[  827.812475][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.819800][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.855482][T11014] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  827.876716][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.884187][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.048668][T11014] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  828.084930][T11014] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  828.531642][T11169] netlink: 44 bytes leftover after parsing attributes in process `syz.4.988'.
[  829.427587][T11014] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  830.483501][T11014] 8021q: adding VLAN 0 to HW filter on device bond0
[  830.576409][T11014] 8021q: adding VLAN 0 to HW filter on device team0
[  830.641900][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.649863][ T6327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  830.679985][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state
[  830.687444][ T6327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  830.843338][T10942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.951813][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.615628][T11014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  833.764104][T10946] veth0_vlan: entered promiscuous mode
[  833.785001][T10946] veth1_vlan: entered promiscuous mode
[  834.921436][T10946] veth0_macvtap: entered promiscuous mode
[  834.957012][T10946] veth1_macvtap: entered promiscuous mode
[  835.030831][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0
[  835.075142][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1
[  835.129942][T10946] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  835.146333][T10946] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  835.155305][T10946] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  835.185895][T10946] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  835.383283][T10942] veth0_vlan: entered promiscuous mode
[  835.494930][T10942] veth1_vlan: entered promiscuous mode
[  835.925395][T10378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  836.025889][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  836.292518][T10378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  836.397390][T10942] veth0_macvtap: entered promiscuous mode
[  836.447121][T11014] veth0_vlan: entered promiscuous mode
[  836.462481][T11014] veth1_vlan: entered promiscuous mode
[  836.501140][T10942] veth1_macvtap: entered promiscuous mode
[  836.885052][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'.
[  837.028755][T11265] usb usb1: usbfs: process 11265 (syz.4.999) did not claim interface 0 before use
[  837.375205][T11264] kthread_run failed with err -4
[  837.607590][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  837.615729][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  837.682114][T11014] veth0_macvtap: entered promiscuous mode
[  837.886610][T10942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  837.995704][T11275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  838.617903][T11277] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  838.628948][T11277] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  838.919040][T11014] veth1_macvtap: entered promiscuous mode
[  838.940360][T10942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  839.578921][T11283] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1003'.
[  839.889933][T10942] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  839.916125][T10942] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.925107][T10942] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.935831][T10942] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  840.500039][T11014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.527653][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'.
[  840.575186][T11014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.792209][T11014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.882836][T11295] fuse: Unknown parameter '`fd'
[  841.713827][T11014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  841.805140][T11014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.814203][T11014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  842.942826][ T6588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  842.958329][ T6588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  843.913775][T11306] lo speed is unknown, defaulting to 1000
[  843.990630][T11306] lo speed is unknown, defaulting to 1000
[  843.998249][T11306] lo speed is unknown, defaulting to 1000
[  844.019989][T11306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  844.061861][T11306] lo speed is unknown, defaulting to 1000
[  844.072696][T11306] lo speed is unknown, defaulting to 1000
[  844.509896][T11306] lo speed is unknown, defaulting to 1000
[  844.519765][T11306] lo speed is unknown, defaulting to 1000
[  844.527866][T11306] lo speed is unknown, defaulting to 1000
[  844.948132][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.210469][T10657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.786461][T10657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.111750][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  847.369331][ T6327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.451685][ T6327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.828342][T11350] netlink: 'syz.6.1016': attribute type 1 has an invalid length.
[  851.836728][T11350] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1016'.
[  851.947084][T11352] /dev/nullb0: Can't open blockdev
[  852.573494][T11355] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1017'.
[  852.715948][T11360] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1017'.
[  852.747867][T11355] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  852.756491][T11355] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1017'.
[  852.923483][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'.
[  853.735350][T11373] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  853.749824][T11373] /dev/nullb0: Can't open blockdev
[  858.544353][T11380] netlink: 'syz.7.1023': attribute type 10 has an invalid length.
[  858.560947][T11380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  860.860157][T11425] /dev/nullb0: Can't open blockdev
[  860.957777][T11426] ubi: mtd0 is already attached to ubi31
[  861.845968][T11435] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  861.858147][T11435] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  864.643964][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1037'.
[  866.999529][   T30] audit: type=1326 audit(1755000234.070:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  867.011042][T11458] syz.6.1040: attempt to access beyond end of device
[  867.011042][T11458] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0
[  867.060940][T11458] syz.6.1040: attempt to access beyond end of device
[  867.060940][T11458] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0
[  867.076572][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  867.092050][T11458] syz.6.1040: attempt to access beyond end of device
[  867.092050][T11458] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0
[  867.105618][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  867.132685][T11458] syz.6.1040: attempt to access beyond end of device
[  867.132685][T11458] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0
[  867.147649][T11458] syz.6.1040: attempt to access beyond end of device
[  867.147649][T11458] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0
[  867.161711][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  867.173195][T11458] syz.6.1040: attempt to access beyond end of device
[  867.173195][T11458] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0
[  867.187899][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  867.208880][T11458] syz.6.1040: attempt to access beyond end of device
[  867.208880][T11458] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0
[  867.227590][T11458] syz.6.1040: attempt to access beyond end of device
[  867.227590][T11458] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0
[  867.242105][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  867.253267][T11458] syz.6.1040: attempt to access beyond end of device
[  867.253267][T11458] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0
[  867.267016][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  867.280954][T11458] syz.6.1040: attempt to access beyond end of device
[  867.280954][T11458] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0
[  867.295813][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256
[  867.306952][T11458] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512
[  867.321671][T11458] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1)
[  867.321852][   T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  868.432180][   T30] audit: type=1326 audit(1755000234.070:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  868.732689][   T30] audit: type=1326 audit(1755000234.070:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  868.766749][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  868.775067][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  868.782800][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  868.790315][   T24] usb 9-1: device descriptor read/all, error -32
[  868.795699][   T30] audit: type=1326 audit(1755000234.070:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  868.974239][   T30] audit: type=1326 audit(1755000234.070:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  868.998299][   T30] audit: type=1326 audit(1755000234.070:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  870.184227][   T30] audit: type=1326 audit(1755000234.070:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  870.238568][   T30] audit: type=1326 audit(1755000234.070:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  870.264549][   T30] audit: type=1326 audit(1755000234.070:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  870.273544][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  870.291019][   T30] audit: type=1326 audit(1755000234.070:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11448 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[  873.052074][T11501] can0: slcan on ttyS3.
[  873.136275][   T24] IPVS: starting estimator thread 0...
[  874.736834][T11493] can0 (unregistered): slcan off ttyS3.
[  874.839769][T11503] IPVS: using max 33 ests per chain, 79200 per kthread
[  874.873493][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1052'.
[  878.501314][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'.
[  879.985368][T11545] tty tty2: ldisc open failed (-12), clearing slot 1
[  880.183706][T11543] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1059'.
[  882.991832][T11562] tty tty28: ldisc open failed (-12), clearing slot 27
[  885.004780][T11580] vlan1: entered promiscuous mode
[  885.011418][T11580] vlan1: entered allmulticast mode
[  885.016701][T11580] veth0_vlan: entered allmulticast mode
[  885.917553][T11584] =: renamed from tunl0 (while UP)
[  886.429964][T11592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13
[  888.006086][T11596] ALSA: mixer_oss: invalid index 40000
[  893.221812][T11621] lo speed is unknown, defaulting to 1000
[  893.228463][T11621] lo speed is unknown, defaulting to 1000
[  893.234750][T11621] lo speed is unknown, defaulting to 1000
[  893.251133][T11621] infiniband s: RDMA CMA: cma_listen_on_dev, error -98
[  893.280375][T11621] lo speed is unknown, defaulting to 1000
[  893.288442][T11621] lo speed is unknown, defaulting to 1000
[  893.297533][T11621] lo speed is unknown, defaulting to 1000
[  893.304991][T11621] lo speed is unknown, defaulting to 1000
[  893.313530][T11621] lo speed is unknown, defaulting to 1000
[  893.332764][T11621] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  893.340420][T11621] overlayfs: failed to set xattr on upper
[  893.346423][T11621] overlayfs: ...falling back to redirect_dir=nofollow.
[  893.353289][T11621] overlayfs: ...falling back to index=off.
[  893.359183][T11621] overlayfs: ...falling back to uuid=null.
[  893.863783][T11628] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1077'.
[  894.458274][T11643] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1079'.
[  895.033352][T11632] Bluetooth: hci0: load_link_keys: too big key_count value 2816
[  895.346368][T11648] Bluetooth: hci2: Frame reassembly failed (-84)
[  895.940356][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1082'.
[  897.348791][T11665] usb usb6: usbfs: process 11665 (syz.4.1084) did not claim interface 46 before use
[  897.711481][T10034] Bluetooth: hci2: command 0x1003 tx timeout
[  897.963477][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  900.012561][T11684] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1090'.
[  900.031810][T11682] veth1_macvtap: left promiscuous mode
[  900.043489][T11682] macsec0: entered promiscuous mode
[  900.079680][T11682] macsec0: entered allmulticast mode
[  900.424657][T11690] block device autoloading is deprecated and will be removed.
[  900.464348][T11690] bio_check_eod: 2 callbacks suppressed
[  900.464587][T11690] syz.4.1092: attempt to access beyond end of device
[  900.464587][T11690] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  906.095960][T11724] bridge0: port 3(team0) entered blocking state
[  906.103188][T11724] bridge0: port 3(team0) entered disabled state
[  906.112709][T11724] team0: entered allmulticast mode
[  906.118295][T11724] team_slave_0: entered allmulticast mode
[  906.137115][T11724] team_slave_1: entered allmulticast mode
[  906.157660][T11724] team0: entered promiscuous mode
[  906.163405][T11724] team_slave_0: entered promiscuous mode
[  906.176928][T11724] team_slave_1: entered promiscuous mode
[  906.189731][T11724] bridge0: port 3(team0) entered blocking state
[  906.197350][T11724] bridge0: port 3(team0) entered forwarding state
[  907.173441][T11734] : entered promiscuous mode
[  908.776111][T10034] Bluetooth: hci5: command 0x0405 tx timeout
[  910.055785][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'.
[  911.096663][T11745] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1101'.
[  912.434313][T11746] i2c i2c-0: Invalid block write size 34
[  913.732033][T11746] netlink: 'syz.4.1104': attribute type 1 has an invalid length.
[  917.465148][T11746] 8021q: adding VLAN 0 to HW filter on device bond1
[  918.154781][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  918.154802][   T30] audit: type=1326 audit(1755000284.750:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11759 comm="syz.7.1107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9738f8ebe9 code=0x0
[  919.385660][T11761] Bluetooth: hci1: command 0x0406 tx timeout
[  919.391802][T11761] Bluetooth: hci3: command 0x0406 tx timeout
[  921.987332][T11787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  922.742833][T11798] vimc link validate: Scaler:src:4096x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  924.482942][T11804] tipc: Started in network mode
[  924.487989][T11804] tipc: Node identity ac14140f, cluster identity 4711
[  924.506038][T11804] tipc: New replicast peer: 255.255.255.255
[  924.512566][T11804] tipc: Enabled bearer <udp:syz2>, priority 10
[  924.958365][   T24] IPVS: starting estimator thread 0...
[  925.093880][T11815] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  925.246328][T11814] IPVS: using max 31 ests per chain, 74400 per kthread
[  925.523068][    T9] tipc: Node number set to 2886997007
[  926.525777][T11761] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  927.641183][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1121'.
[  928.090485][ T5837] Bluetooth: hci2: command 0x1003 tx timeout
[  928.123168][T10034] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  928.669632][T11845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1124'.
[  929.408527][T11851] sit0: entered promiscuous mode
[  929.614750][T11851] netlink: 'syz.8.1127': attribute type 1 has an invalid length.
[  929.816263][T11857] netlink: 'syz.6.1126': attribute type 1 has an invalid length.
[  929.927612][T11851] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1127'.
[  931.726992][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  933.546068][T11878] Illegal XDP return value 4294967274 on prog  (id 365) dev N/A, expect packet loss!
[  935.491711][T11898] tty tty34: ldisc open failed (-12), clearing slot 33
[  936.885211][T11909] CIFS mount error: No usable UNC path provided in device string!
[  936.885211][T11909] 
[  936.895641][T11909] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  937.476925][ T5837] Bluetooth: hci2: command 0x1003 tx timeout
[  937.520344][T10034] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  938.935021][T11926] netlink: 'syz.8.1145': attribute type 11 has an invalid length.
[  940.275128][    T9] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1
[  940.572553][    T9] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22
[  941.488533][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1142'.
[  943.518588][T11958] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ
�D��UD�w�}�zR3��p(@O�>���P��'
[  943.531086][T11958] CPU: 0 UID: 0 PID: 11958 Comm: syz.7.1149 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  943.531114][T11958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  943.531127][T11958] Call Trace:
[  943.531137][T11958]  <TASK>
[  943.531146][T11958]  dump_stack_lvl+0x189/0x250
[  943.531171][T11958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  943.531184][T11958]  ? __pfx__printk+0x10/0x10
[  943.531198][T11958]  ? kernfs_path_from_node+0x2c/0x260
[  943.531218][T11958]  ? kernfs_path_from_node+0x2c/0x260
[  943.531239][T11958]  ? kernfs_path_from_node+0x2c/0x260
[  943.531265][T11958]  ? kernfs_path_from_node+0x22c/0x260
[  943.531287][T11958]  ? kernfs_path_from_node+0x2c/0x260
[  943.531311][T11958]  sysfs_warn_dup+0x8e/0xa0
[  943.531324][T11958]  sysfs_do_create_link_sd+0xc0/0x110
[  943.531337][T11958]  device_add_class_symlinks+0x1cf/0x240
[  943.531355][T11958]  device_add+0x475/0xb50
[  943.531373][T11958]  wiphy_register+0x199a/0x26b0
[  943.531386][T11958]  ? netdev_run_todo+0xe1d/0xea0
[  943.531407][T11958]  ? __pfx_wiphy_register+0x10/0x10
[  943.531425][T11958]  ? rtnl_unlock+0x9/0x10
[  943.531439][T11958]  ieee80211_register_hw+0x33e1/0x4120
[  943.531466][T11958]  ? ieee80211_register_hw+0x1471/0x4120
[  943.531486][T11958]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  943.531504][T11958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  943.531525][T11958]  ? __hrtimer_setup+0x187/0x210
[  943.531535][T11958]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  943.531553][T11958]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  943.531585][T11958]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  943.531598][T11958]  ? trace_kmalloc+0x1f/0xd0
[  943.531608][T11958]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  943.531619][T11958]  ? kstrndup+0xbf/0x160
[  943.531638][T11958]  hwsim_new_radio_nl+0xea4/0x1b10
[  943.531654][T11958]  ? __pfx___nla_validate_parse+0x10/0x10
[  943.531676][T11958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  943.531698][T11958]  ? __nla_parse+0x40/0x60
[  943.531713][T11958]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  943.531730][T11958]  genl_family_rcv_msg_doit+0x215/0x300
[  943.531745][T11958]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  943.531764][T11958]  ? bpf_lsm_capable+0x9/0x20
[  943.531776][T11958]  ? security_capable+0x7e/0x2e0
[  943.531794][T11958]  genl_rcv_msg+0x60e/0x790
[  943.531808][T11958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  943.531819][T11958]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  943.531852][T11958]  netlink_rcv_skb+0x205/0x470
[  943.531868][T11958]  ? __pfx_genl_rcv_msg+0x10/0x10
[  943.531879][T11958]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  943.531905][T11958]  ? down_read+0x1ad/0x2e0
[  943.531919][T11958]  genl_rcv+0x28/0x40
[  943.531929][T11958]  netlink_unicast+0x75c/0x8e0
[  943.531949][T11958]  netlink_sendmsg+0x805/0xb30
[  943.531969][T11958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  943.531989][T11958]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  943.531999][T11958]  ? __pfx_netlink_sendmsg+0x10/0x10
[  943.532014][T11958]  __sock_sendmsg+0x21c/0x270
[  943.532028][T11958]  ____sys_sendmsg+0x505/0x830
[  943.532047][T11958]  ? __pfx_____sys_sendmsg+0x10/0x10
[  943.532068][T11958]  ? import_iovec+0x74/0xa0
[  943.532087][T11958]  ___sys_sendmsg+0x21f/0x2a0
[  943.532104][T11958]  ? __pfx____sys_sendmsg+0x10/0x10
[  943.532142][T11958]  ? __fget_files+0x2a/0x420
[  943.532153][T11958]  ? __fget_files+0x3a0/0x420
[  943.532171][T11958]  __x64_sys_sendmsg+0x19b/0x260
[  943.532188][T11958]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  943.532210][T11958]  ? rcu_is_watching+0x15/0xb0
[  943.532225][T11958]  ? do_syscall_64+0xbe/0x3b0
[  943.532239][T11958]  do_syscall_64+0xfa/0x3b0
[  943.532251][T11958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.532261][T11958]  ? asm_sysvec_call_function_single+0x1a/0x20
[  943.532271][T11958]  ? clear_bhb_loop+0x60/0xb0
[  943.532283][T11958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  943.532293][T11958] RIP: 0033:0x7f9738f8ebe9
[  943.532304][T11958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  943.532314][T11958] RSP: 002b:00007f9739d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  943.532327][T11958] RAX: ffffffffffffffda RBX: 00007f97391b6180 RCX: 00007f9738f8ebe9
[  943.532335][T11958] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004
[  943.532342][T11958] RBP: 00007f9739011e19 R08: 0000000000000000 R09: 0000000000000000
[  943.532349][T11958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  943.532355][T11958] R13: 00007f97391b6218 R14: 00007f97391b6180 R15: 00007fffd2a1b0c8
[  943.532373][T11958]  </TASK>
[  943.985936][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.481622][T11972] tipc: Started in network mode
[  945.487199][T11972] tipc: Node identity ac14140f, cluster identity 4711
[  945.503817][T11972] tipc: New replicast peer: 255.255.255.255
[  945.524750][T11972] tipc: Enabled bearer <udp:syz>, priority 10
[  946.605934][ T5903] tipc: Node number set to 2886997007
[  946.833691][ T6028] Bluetooth: hci2: Frame reassembly failed (-84)
[  947.997237][T11999] netlink: 'syz.0.1158': attribute type 6 has an invalid length.
[  949.276713][ T5837] Bluetooth: hci2: command 0x1003 tx timeout
[  949.468751][T10034] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  950.820872][   T30] audit: type=1326 audit(1755000316.053:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12006 comm="syz.0.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5bfb8ebe9 code=0x0
[  951.774031][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1161'.
[  956.423353][T12041] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  956.914532][T12052] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.770731][T12054] overlayfs: failed to resolve './file1': -2
[  957.899030][T12056] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  965.638476][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1182'.
[  970.989022][T12141] binder: 12140:12141 ioctl c018620c 200000000640 returned -22
[  972.686485][T10034] Bluetooth: hci5: ISO packet too small
[  973.285716][T12162] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1195'.
[  975.401935][T12175] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  977.813088][T12188] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.822291][T12188] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.835566][T12188] bridge0: entered allmulticast mode
[  978.247733][T12190] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1201'.
[  978.290400][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1201'.
[  983.120388][T12264] batadv_slave_1: entered promiscuous mode
[  983.126200][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'.
[  983.138092][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'.
[  983.147970][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1207'.
[  983.440310][T12266] netlink: 'syz.8.1209': attribute type 39 has an invalid length.
[  984.573643][T10034] Bluetooth: hci4: unexpected event for opcode 0x0062
[  984.610794][T10034] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  986.122880][T12262] batadv_slave_1: left promiscuous mode
[  986.791624][T10034] Bluetooth: hci4: command 0x0c1a tx timeout
[  987.496762][T12286] delete_channel: no stack
[  988.752220][T10034] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  988.763954][T10034] Bluetooth: hci4: Injecting HCI hardware error event
[  988.774651][T10034] Bluetooth: hci4: hardware error 0x00
[  990.903002][T12322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  990.916240][T12322] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  991.470027][T10034] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  993.269141][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  995.349523][T12335] QAT: Device 7 not found
[  995.607019][T12348] netlink: 'syz.7.1227': attribute type 39 has an invalid length.
[  995.622657][T12349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.646621][T12349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1226'.
[  995.656174][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1226'.
[  998.774566][T12370] netlink: 'syz.6.1233': attribute type 1 has an invalid length.
[  998.860002][T12371] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1000.630116][T12360] delete_channel: no stack
[ 1001.392505][   T30] audit: type=1326 audit(1755000367.433:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1001.501580][T12387] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$���UL�vy��آ
�D��UD�w�}�zR3��p(@O�>���P��'
[ 1001.507931][   T30] audit: type=1326 audit(1755000367.433:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1001.554954][T12387] CPU: 1 UID: 0 PID: 12387 Comm: syz.4.1236 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1001.554981][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1001.554995][T12387] Call Trace:
[ 1001.555003][T12387]  <TASK>
[ 1001.555014][T12387]  dump_stack_lvl+0x189/0x250
[ 1001.555044][T12387]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1001.555064][T12387]  ? __pfx__printk+0x10/0x10
[ 1001.555088][T12387]  ? kernfs_path_from_node+0x2c/0x260
[ 1001.555112][T12387]  ? kernfs_path_from_node+0x2c/0x260
[ 1001.555133][T12387]  ? kernfs_path_from_node+0x2c/0x260
[ 1001.555156][T12387]  ? kernfs_path_from_node+0x22c/0x260
[ 1001.555180][T12387]  ? kernfs_path_from_node+0x2c/0x260
[ 1001.555205][T12387]  sysfs_warn_dup+0x8e/0xa0
[ 1001.555226][T12387]  sysfs_do_create_link_sd+0xc0/0x110
[ 1001.555249][T12387]  device_add_class_symlinks+0x1cf/0x240
[ 1001.555283][T12387]  device_add+0x475/0xb50
[ 1001.555316][T12387]  wiphy_register+0x199a/0x26b0
[ 1001.555361][T12387]  ? __pfx_wiphy_register+0x10/0x10
[ 1001.555385][T12387]  ? minstrel_ht_alloc+0x6dd/0x7e0
[ 1001.555418][T12387]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[ 1001.555449][T12387]  ieee80211_register_hw+0x33e1/0x4120
[ 1001.555492][T12387]  ? ieee80211_register_hw+0x1471/0x4120
[ 1001.555536][T12387]  ? __pfx_ieee80211_register_hw+0x10/0x10
[ 1001.555567][T12387]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1001.555603][T12387]  ? __hrtimer_setup+0x187/0x210
[ 1001.555621][T12387]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[ 1001.555655][T12387]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[ 1001.555712][T12387]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1001.555739][T12387]  ? trace_kmalloc+0x1f/0xd0
[ 1001.555754][T12387]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[ 1001.555775][T12387]  ? kstrndup+0xbf/0x160
[ 1001.555809][T12387]  hwsim_new_radio_nl+0xea4/0x1b10
[ 1001.555839][T12387]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1001.555878][T12387]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1001.555910][T12387]  ? preempt_schedule_thunk+0x16/0x30
[ 1001.555947][T12387]  ? __nla_parse+0x40/0x60
[ 1001.555975][T12387]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[ 1001.556006][T12387]  genl_family_rcv_msg_doit+0x215/0x300
[ 1001.556034][T12387]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1001.556069][T12387]  ? bpf_lsm_capable+0x9/0x20
[ 1001.556093][T12387]  ? security_capable+0x7e/0x2e0
[ 1001.556127][T12387]  genl_rcv_msg+0x60e/0x790
[ 1001.556155][T12387]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1001.556175][T12387]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1001.556220][T12387]  netlink_rcv_skb+0x205/0x470
[ 1001.556247][T12387]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1001.556269][T12387]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1001.556317][T12387]  ? down_read+0x1ad/0x2e0
[ 1001.556344][T12387]  genl_rcv+0x28/0x40
[ 1001.556362][T12387]  netlink_unicast+0x75c/0x8e0
[ 1001.556395][T12387]  netlink_sendmsg+0x805/0xb30
[ 1001.556420][T12387]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1001.556446][T12387]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1001.556478][T12387]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1001.556510][T12387]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1001.556537][T12387]  __sock_sendmsg+0x21c/0x270
[ 1001.556564][T12387]  ____sys_sendmsg+0x505/0x830
[ 1001.556598][T12387]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1001.556634][T12387]  ? import_iovec+0x74/0xa0
[ 1001.556662][T12387]  ___sys_sendmsg+0x21f/0x2a0
[ 1001.556696][T12387]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1001.556772][T12387]  ? __fget_files+0x2a/0x420
[ 1001.556795][T12387]  ? __fget_files+0x3a0/0x420
[ 1001.556832][T12387]  __x64_sys_sendmsg+0x19b/0x260
[ 1001.556884][T12387]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1001.556929][T12387]  ? rcu_is_watching+0x15/0xb0
[ 1001.556957][T12387]  ? do_syscall_64+0xbe/0x3b0
[ 1001.556995][T12387]  do_syscall_64+0xfa/0x3b0
[ 1001.557020][T12387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.557044][T12387]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1001.557065][T12387]  ? clear_bhb_loop+0x60/0xb0
[ 1001.557090][T12387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.557110][T12387] RIP: 0033:0x7efc5c18ebe9
[ 1001.557130][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1001.557148][T12387] RSP: 002b:00007efc59fd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1001.557169][T12387] RAX: ffffffffffffffda RBX: 00007efc5c3b6270 RCX: 00007efc5c18ebe9
[ 1001.557183][T12387] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004
[ 1001.557196][T12387] RBP: 00007efc5c211e19 R08: 0000000000000000 R09: 0000000000000000
[ 1001.557208][T12387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1001.557220][T12387] R13: 00007efc5c3b6308 R14: 00007efc5c3b6270 R15: 00007ffedcaa1988
[ 1001.557258][T12387]  </TASK>
[ 1002.052257][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.090217][T12389] pim6reg: entered allmulticast mode
[ 1002.099970][T12389] pim6reg: left allmulticast mode
[ 1002.108543][   T30] audit: type=1326 audit(1755000367.433:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.133816][   T30] audit: type=1326 audit(1755000367.433:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.179791][   T30] audit: type=1326 audit(1755000367.433:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.203131][   T30] audit: type=1326 audit(1755000367.433:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.227176][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.233693][   T30] audit: type=1326 audit(1755000367.433:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.257313][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.263763][   T30] audit: type=1326 audit(1755000367.433:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.287145][   T30] audit: type=1326 audit(1755000367.433:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.310423][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.317346][   T30] audit: type=1326 audit(1755000367.433:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12378 comm="syz.6.1235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f6d7518ebe9 code=0x7ffc0000
[ 1002.342375][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1002.405105][T12392] /dev/nullb0: Can't open blockdev
[ 1002.741004][T12392] orangefs_mount: mount request failed with -4
[ 1003.390979][ T5837] Bluetooth: hci5: command 0x0405 tx timeout
[ 1005.292244][T12414] sit0: left promiscuous mode
[ 1005.694306][T12415] input: syz0 as /devices/virtual/input/input15
[ 1008.128381][T12414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1008.946708][ T5931] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1009.096119][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1250'.
[ 1009.361642][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1250'.
[ 1009.365715][ T5931] usb 7-1: Using ep0 maxpacket: 8
[ 1009.414168][ T5931] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1009.469442][ T5931] usb 7-1: can't read configurations, error -61
[ 1009.665822][ T5931] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1009.863790][ T5931] usb 7-1: Using ep0 maxpacket: 8
[ 1009.871779][ T5931] usb 7-1: device descriptor read/all, error -71
[ 1010.080284][ T5931] usb usb7-port1: attempt power cycle
[ 1012.092697][T12442] team0 (unregistering): Port device team_slave_0 removed
[ 1012.130125][T12442] team0 (unregistering): Port device team_slave_1 removed
[ 1012.388646][T12465] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1014.212529][T12476] syz.7.1257: attempt to access beyond end of device
[ 1014.212529][T12476] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0
[ 1014.228975][T12476] syz.7.1257: attempt to access beyond end of device
[ 1014.228975][T12476] nbd7: rw=0, sector=120, nr_sectors = 8 limit=0
[ 1014.243954][T12476] Mount JFS Failure: -5
[ 1014.248781][T12476] jfs_mount failed w/return code = -5
[ 1014.425710][T10034] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1015.847125][T12489] Can't find ip_set type ha
[ 1015.927764][T12490] binder_alloc: 12486: binder_alloc_buf size 12280 failed, no address space
[ 1015.940348][T12490] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184)
[ 1016.596134][T12495] futex_wake_op: syz.6.1259 tries to shift op by 144; fix this program
[ 1016.804052][T12502] vimc link validate: Scaler:src:4096x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1019.517034][T12516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1019.534848][T12516] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1020.501964][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'.
[ 1022.236957][T12556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1022.371692][T12556] overlayfs: missing 'lowerdir'
[ 1024.037272][T12565] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1024.178658][T12565] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1274'.
[ 1024.219659][T12565] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[ 1024.387556][T12565] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1028.682097][T12598] mkiss: ax0: crc mode is auto.
[ 1030.683838][T12600] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1031.584483][T12590] delete_channel: no stack
[ 1033.641082][T10034] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1035.796258][T10714] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[ 1036.098145][T12625] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[ 1036.271185][T12625] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[ 1036.385662][T10714] usb 7-1: device descriptor read/64, error -71
[ 1036.727428][T10714] usb 7-1: new low-speed USB device number 6 using dummy_hcd
[ 1039.016075][T11761] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1039.040885][T11761] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1039.056001][T11761] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1039.068733][T11761] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1039.077064][T11761] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1039.118720][T12652] lo speed is unknown, defaulting to 1000
[ 1039.126950][T12652] lo speed is unknown, defaulting to 1000
[ 1041.044185][T12684] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1041.692376][T12684] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1041.752596][ T5837] Bluetooth: hci2: command tx timeout
[ 1042.585721][T10034] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1042.586301][ T5837] Bluetooth: hci4: command 0xfc11 tx timeout
[ 1043.059851][T12703] fuse: Bad value for 'fd'
[ 1043.584215][T12652] chnl_net:caif_netlink_parms(): no params data found
[ 1043.806250][T10034] Bluetooth: hci2: command tx timeout
[ 1043.969049][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1304'.
[ 1044.683744][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.691478][T12705] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1044.700220][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1044.712014][T12705] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1045.547102][T12652] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1045.607209][T12652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.881976][T12652] bridge_slave_0: entered allmulticast mode
[ 1045.888569][T10034] Bluetooth: hci2: command tx timeout
[ 1046.213473][T12652] bridge_slave_0: entered promiscuous mode
[ 1046.233722][T12652] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.241779][T12652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.499302][T12652] bridge_slave_1: entered allmulticast mode
[ 1046.507850][T12652] bridge_slave_1: entered promiscuous mode
[ 1046.867555][T12743] netlink: 'syz.7.1310': attribute type 10 has an invalid length.
[ 1047.155073][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1047.170778][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1047.954994][T10034] Bluetooth: hci2: command tx timeout
[ 1048.207965][T12652] team0: Port device team_slave_0 added
[ 1048.361639][T12758] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1048.374220][T12758] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1049.112765][T12652] team0: Port device team_slave_1 added
[ 1051.704001][  T980] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 1053.418150][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1053.425247][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1054.624316][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1054.656894][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1054.665133][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1054.699588][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1054.700714][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.151618][T12782] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1055.161587][T12782] overlayfs: failed to set xattr on upper
[ 1055.167914][T12782] overlayfs: ...falling back to index=off.
[ 1055.174142][T12782] overlayfs: ...falling back to uuid=null.
[ 1055.248882][T12773] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1055.408645][T12773] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1055.434704][T12773] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1056.125767][T12773] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1056.158293][T12773] geneve2: entered allmulticast mode
[ 1057.339725][T12652] hsr_slave_0: entered promiscuous mode
[ 1057.346962][T12652] hsr_slave_1: entered promiscuous mode
[ 1057.354101][T12652] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1057.415815][T12652] Cannot create hsr debugfs directory
[ 1059.316891][T12809] ubi: mtd0 is already attached to ubi31
[ 1062.036694][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[ 1062.066583][T12652] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1062.297420][ T5837] Bluetooth: hci4: command 0x1003 tx timeout
[ 1062.297484][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1062.312896][T12652] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1062.521439][T12652] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1063.563956][T12652] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1064.422306][T12830] befs: (nbd6): No write support. Marking filesystem read-only
[ 1064.433155][T12830] syz.6.1329: attempt to access beyond end of device
[ 1064.433155][T12830] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1064.449579][T12830] befs: (nbd6): unable to read superblock
[ 1065.122443][T12652] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1066.094097][T12652] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.369480][T12864] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1067.136172][ T5837] Bluetooth: hci5: command 0x0405 tx timeout
[ 1067.228772][T12230] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1067.237185][T12230] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1067.649447][T12232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1067.656937][T12232] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1070.599329][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1070.683074][ T5837] Bluetooth: hci4: command 0x1003 tx timeout
[ 1074.010451][T12652] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1074.546068][T12929] ALSA: mixer_oss: invalid OSS volume 'LI'
[ 1076.280045][T12945] netlink: 'syz.0.1349': attribute type 2 has an invalid length.
[ 1077.360227][T12238] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1078.155642][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'.
[ 1079.423668][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1079.608126][T12652] veth0_vlan: entered promiscuous mode
[ 1079.667160][T12652] veth1_vlan: entered promiscuous mode
[ 1079.723548][T12652] veth0_macvtap: entered promiscuous mode
[ 1079.800987][T12652] veth1_macvtap: entered promiscuous mode
[ 1080.245021][T12652] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1080.277959][T12985] /dev/nullb0: Can't open blockdev
[ 1080.868383][T12986] lo speed is unknown, defaulting to 1000
[ 1080.875697][T12986] lo speed is unknown, defaulting to 1000
[ 1081.586559][T12652] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1082.051336][T12652] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.061007][T12652] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.069987][T12652] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.079011][T12652] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.574445][T12993] vlan2: entered promiscuous mode
[ 1082.581534][T12993] bond0: entered promiscuous mode
[ 1082.591542][T12993] bond_slave_0: entered promiscuous mode
[ 1082.615648][T12993] bond_slave_1: entered promiscuous mode
[ 1083.575699][T13002] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1084.065440][T11844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1084.078705][T11844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.127711][T11844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1084.139740][T11844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1084.312185][T13005] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1085.567260][T13014] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1085.627952][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1087.148025][T13032] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1088.185993][ T5837] Bluetooth: hci4: command 0x1003 tx timeout
[ 1088.193357][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1090.076551][T13049] syz.0.1369: attempt to access beyond end of device
[ 1090.076551][T13049] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1090.102772][T13049] (syz.0.1369,13049,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1090.153848][T13049] (syz.0.1369,13049,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1091.975796][T13049] (syz.0.1369,13049,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1091.996463][T13049] (syz.0.1369,13049,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1094.700406][T13064] vimc link validate: Scaler:src:4096x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1095.289657][T13072] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1096.339028][T13077] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[ 1096.459158][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1377'.
[ 1096.858346][T13081] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2
[ 1098.049264][T11761] Bluetooth: hci4: command 0x1003 tx timeout
[ 1098.066109][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1098.965799][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1101.830805][T13101] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1383'.
[ 1102.005811][  T980] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[ 1102.074630][T13105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1384'.
[ 1102.083973][T13105] veth1_to_hsr: entered promiscuous mode
[ 1102.095142][T13105] No source specified
[ 1102.223025][T13105] /dev/nullb0: Can't open blockdev
[ 1102.911555][T13106] binder: BINDER_SET_CONTEXT_MGR already set
[ 1102.926302][T13106] binder: 13103:13106 ioctl 4018620d 200000000040 returned -16
[ 1103.463998][  T980] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1103.572501][T13111] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1386'.
[ 1103.971090][  T980] usb 10-1: not running at top speed; connect to a high speed hub
[ 1104.003664][  T980] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1104.021207][  T980] usb 10-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[ 1104.036618][  T980] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.051517][  T980] usb 10-1: Product: syz
[ 1104.158127][  T980] usb 10-1: Manufacturer: syz
[ 1104.163821][  T980] usb 10-1: SerialNumber: syz
[ 1104.612379][T13118] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[ 1104.955237][T13121] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1104.986876][T13121] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1105.148101][  T980] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input16
[ 1105.187308][ T5191] bcm5974 10-1:1.0: could not read from device
[ 1105.352682][ T5191] bcm5974 10-1:1.0: could not read from device
[ 1105.574036][  T980] usb 10-1: USB disconnect, device number 2
[ 1105.593029][ T5191] bcm5974 10-1:1.0: could not read from device
[ 1111.005905][T13142] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1111.013630][T13142] overlayfs: failed to set xattr on upper
[ 1111.020008][T13142] overlayfs: ...falling back to index=off.
[ 1111.035609][T13142] overlayfs: ...falling back to uuid=null.
[ 1111.536047][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1395'.
[ 1112.620569][T13135] delete_channel: no stack
[ 1112.723972][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1112.724011][   T30] audit: type=1326 audit(1755000478.793:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13150 comm="syz.0.1396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5bfb8ebe9 code=0x0
[ 1116.029195][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.522211][T13191] siw: device registration error -23
[ 1116.549983][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1404'.
[ 1117.909852][  T980] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[ 1117.941868][  T980] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1118.491502][T13220] netlink: 'syz.0.1410': attribute type 11 has an invalid length.
[ 1118.499666][T13220] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1410'.
[ 1122.092297][T13250] Device name cannot be null; rc = [-22]
[ 1124.456764][T13263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'.
[ 1127.525715][T13285] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1128.168497][T11761] Bluetooth: hci4: command 0x1003 tx timeout
[ 1128.385751][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1130.185871][ T5156] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1130.522935][T13297] delete_channel: no stack
[ 1130.816220][T13313] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1131.278670][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'.
[ 1131.679345][T13320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1133.178472][T10034] Bluetooth: hci4: command 0x1003 tx timeout
[ 1133.180717][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1136.718620][T13354] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1138.746027][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1139.321766][T13371] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1445'.
[ 1139.777857][T13374] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1446'.
[ 1140.677137][T13384] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1142.760206][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1142.825942][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[ 1143.246857][T13404] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1143.767366][T13411] ALSA: mixer_oss: invalid OSS volume '3'
[ 1143.773817][T13411] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1143.780914][T13411] ALSA: mixer_oss: invalid OSS volume '4'
[ 1143.786981][T13411] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1143.793582][T13411] ALSA: mixer_oss: invalid OSS volume '5'
[ 1143.800640][T13411] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1143.807879][T13411] ALSA: mixer_oss: invalid OSS volume '6'
[ 1144.815879][T13420] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 1144.827495][T13420] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.953185][T13417] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0'
[ 1146.128546][T13425] sp0: Synchronizing with TNC
[ 1146.230722][T13429] ptrace attach of "./syz-executor exec"[10946] was attempted by ""[13429]
[ 1146.678241][T13415] [U] �
[ 1148.583571][T13458] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1150.666732][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1150.675045][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[ 1152.141355][T13476] block nbd0: shutting down sockets
[ 1152.348871][ T5957] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1152.509444][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.540972][ T5957] usb 10-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44
[ 1152.692021][ T5957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1152.949237][ T5957] usb 10-1: config 0 descriptor??
[ 1153.059563][T13497] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1154.206577][ T5957] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f
[ 1154.260978][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.481956][ T5957] gspca_sn9c20x: Write register 1000 failed -71
[ 1154.491229][ T5957] gspca_sn9c20x: Device initialization failed
[ 1154.509231][ T5957] gspca_sn9c20x 10-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[ 1154.539307][ T5957] usb 10-1: USB disconnect, device number 3
[ 1154.743553][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.934157][T13520] fuse: Unknown parameter ''
[ 1156.649157][T13524] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1158.740219][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1159.747914][   T12] bridge_slave_1: left allmulticast mode
[ 1159.753813][   T12] bridge_slave_1: left promiscuous mode
[ 1159.760554][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1159.771685][   T12] bridge_slave_0: left allmulticast mode
[ 1159.833784][   T12] bridge_slave_0: left promiscuous mode
[ 1159.840007][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1160.362735][T13548] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1160.773112][T13553] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1162.214129][T13555] kernel profiling enabled (shift: 7)
[ 1162.480168][T10034] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1162.487313][T11761] Bluetooth: hci4: command 0x1003 tx timeout
[ 1162.818008][T13555] netlink: 'syz.6.1485': attribute type 10 has an invalid length.
[ 1163.145851][T10034] Bluetooth: hci6: command 0x1003 tx timeout
[ 1163.247758][ T5156] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1163.656822][T13566] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1163.688220][T13566] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1164.280856][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[ 1165.446848][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1491'.
[ 1171.101012][T13612] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1171.555256][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1171.691610][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1171.733078][   T12] bond0 (unregistering): Released all slaves
[ 1171.904007][T13619] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1172.031347][T13619] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1172.191125][ T5837] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1172.203713][ T5156] Bluetooth: hci4: command 0xfc11 tx timeout
[ 1173.040437][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1503'.
[ 1173.264886][T13630] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1173.315624][T13630] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1174.037240][T12230] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1174.191044][   T12] bond1 (unregistering): Released all slaves
[ 1174.214243][T11844] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[ 1174.228247][T11844] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1174.234753][T11844] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1174.800624][T13555] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode
[ 1174.859346][T13555] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1175.120130][   T12] : left promiscuous mode
[ 1176.266249][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1176.418899][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1509'.
[ 1176.600535][   T12] tipc: Disabling bearer <udp:syz>
[ 1176.639021][   T12] tipc: Left network mode
[ 1176.785773][T13654] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1177.539989][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.777285][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1178.816225][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1178.874660][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1178.894882][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1178.908031][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1179.016144][T13673] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1179.028632][T13673] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1179.708915][T13675] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1180.324721][T13683] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1180.586871][T13683] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1180.987301][ T5837] Bluetooth: hci4: command tx timeout
[ 1181.785948][ T5156] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1183.158305][ T5837] Bluetooth: hci4: command tx timeout
[ 1183.393032][T13708] netlink: 'syz.9.1522': attribute type 10 has an invalid length.
[ 1183.401306][T13708] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1522'.
[ 1183.775487][T13681] nvme_fabrics: missing parameter 'transport=%s'
[ 1183.800635][T13706] /dev/nullb0: Can't open blockdev
[ 1183.845069][T13681] nvme_fabrics: missing parameter 'nqn=%s'
[ 1183.890795][T13711] tipc: Failed to remove unknown binding: 66,1,1/0:2652865569/2652865571
[ 1183.900393][T13711] tipc: Failed to remove unknown binding: 66,1,1/0:2652865569/2652865571
[ 1183.991962][T13708] batman_adv: batadv0: Adding interface: virt_wifi0
[ 1184.003262][T13708] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1184.032048][T13708] batman_adv: batadv0: Interface activated: virt_wifi0
[ 1184.214045][   T12] hsr_slave_0: left promiscuous mode
[ 1184.246137][   T12] hsr_slave_1: left promiscuous mode
[ 1184.401482][   T12] veth1_macvtap: left promiscuous mode
[ 1184.408303][   T12] veth0_macvtap: left promiscuous mode
[ 1184.414079][   T12] veth1_vlan: left promiscuous mode
[ 1185.225696][ T5837] Bluetooth: hci4: command tx timeout
[ 1187.383248][ T5837] Bluetooth: hci4: command tx timeout
[ 1187.423778][T13740] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1188.105444][ T5931] libceph: connect (1)[c::]:6789 error -101
[ 1188.117641][ T5931] libceph: mon0 (1)[c::]:6789 connect error
[ 1188.461038][ T5931] libceph: connect (1)[c::]:6789 error -101
[ 1188.467560][T13747] ceph: No mds server is up or the cluster is laggy
[ 1188.468608][ T5931] libceph: mon0 (1)[c::]:6789 connect error
[ 1188.642991][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1189.424989][T13668] lo speed is unknown, defaulting to 1000
[ 1189.437755][T13668] lo speed is unknown, defaulting to 1000
[ 1189.466237][ T5156] Bluetooth: hci5: command 0x1003 tx timeout
[ 1189.472973][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1198.402993][   T24] IPVS: starting estimator thread 0...
[ 1198.616358][T13801] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1198.770270][   T12] IPVS: stop unused estimator thread 0...
[ 1199.009655][T13668] chnl_net:caif_netlink_parms(): no params data found
[ 1199.418495][T13810] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1199.425710][T13810] overlayfs: failed to set xattr on upper
[ 1199.431492][T13810] overlayfs: ...falling back to index=off.
[ 1199.438034][T13810] overlayfs: ...falling back to uuid=null.
[ 1199.533305][ T5903] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1199.964450][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.975917][ T5903] usb 9-1: config 0 has an invalid interface number: 213 but max is 0
[ 1199.984421][ T5903] usb 9-1: config 0 has no interface number 0
[ 1200.053174][ T5903] usb 9-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7
[ 1200.079332][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.118417][ T5903] usb 9-1: Product: syz
[ 1200.126065][ T5903] usb 9-1: Manufacturer: syz
[ 1200.131430][ T5903] usb 9-1: SerialNumber: syz
[ 1200.146088][ T5903] usb 9-1: config 0 descriptor??
[ 1200.230701][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.350700][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.385376][T13668] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1200.424135][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'.
[ 1200.511111][T13668] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.551271][T13668] bridge_slave_0: entered allmulticast mode
[ 1200.705444][T13826] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1546'.
[ 1200.750132][T13668] bridge_slave_0: entered promiscuous mode
[ 1200.930702][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.973162][T13668] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1200.987263][T13668] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1201.012235][T13668] bridge_slave_1: entered allmulticast mode
[ 1201.027959][T13668] bridge_slave_1: entered promiscuous mode
[ 1201.208496][T13668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1201.407123][T13668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1201.705739][T13836] input: syz1 as /devices/virtual/input/input17
[ 1201.948706][T13668] team0: Port device team_slave_0 added
[ 1201.988540][T13668] team0: Port device team_slave_1 added
[ 1202.044373][T12066] usb 9-1: USB disconnect, device number 5
[ 1202.068773][   T12] bridge_slave_1: left allmulticast mode
[ 1202.109719][   T12] bridge_slave_1: left promiscuous mode
[ 1202.140349][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1202.197125][   T12] bridge_slave_0: left allmulticast mode
[ 1202.205815][   T12] bridge_slave_0: left promiscuous mode
[ 1202.229121][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.279905][T13854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1203.286342][T13854] binder: 13844:13854 ioctl 4018620d 200000000040 returned -16
[ 1205.984812][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1206.018253][   T12] bond_slave_0: left promiscuous mode
[ 1206.037715][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1206.069117][   T12] bond_slave_1: left promiscuous mode
[ 1206.089389][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1206.098346][   T12] mac80211_hwsim hwsim29 wlan1: left promiscuous mode
[ 1206.130274][   T12] bond0 (unregistering): Released all slaves
[ 1206.342945][T13875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1207.134850][T13668] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1207.172425][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1207.198655][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1207.245470][T13668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1207.995867][T13865] macsec0: left allmulticast mode
[ 1208.002268][T13866] veth1_macvtap: entered promiscuous mode
[ 1208.008948][T13866] macsec0: left promiscuous mode
[ 1208.075705][   T12] tipc: Disabling bearer <udp:syz2>
[ 1208.082644][   T12] tipc: Left network mode
[ 1208.098908][T13668] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1208.118380][T13668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1208.144953][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1208.568297][T13668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1209.452151][T13896] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1209.467775][T13896] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1209.551465][T13668] hsr_slave_0: entered promiscuous mode
[ 1209.582776][T13668] hsr_slave_1: entered promiscuous mode
[ 1209.664951][T13668] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1209.823428][T13668] Cannot create hsr debugfs directory
[ 1210.698127][T13905] netlink: 'syz.9.1563': attribute type 4 has an invalid length.
[ 1210.705999][T13905] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.1563'.
[ 1211.648692][T13913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1211.829826][T13911] 9pnet_virtio: no channels available for device syz
[ 1213.480238][T13926] /dev/nullb0: Can't open blockdev
[ 1213.625306][T13928] input: syz0 as /devices/virtual/input/input18
[ 1215.881703][T13931] delete_channel: no stack
[ 1216.965847][T13947] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 13947 comm: syz.8.1572)
[ 1217.004068][   T30] audit: type=1800 audit(1755000583.053:172): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1572" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=41690 res=0 errno=0
[ 1217.266277][T12066] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1217.512536][T12066] usb 9-1: Using ep0 maxpacket: 8
[ 1217.631544][T12066] usb 9-1: config 127 has an invalid interface number: 171 but max is 1
[ 1217.778060][T12066] usb 9-1: config 127 has no interface number 1
[ 1217.896469][T12066] usb 9-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x91, changing to 0x81
[ 1218.114430][T12066] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 105, changing to 7
[ 1218.751230][T12066] usb 9-1: config 127 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 25701, setting to 1024
[ 1219.028732][T13958] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1219.055351][T13958] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1219.141826][T12066] usb 9-1: config 127 interface 171 has no altsetting 0
[ 1219.300343][T12066] usb 9-1: config 127 interface 0 has no altsetting 0
[ 1219.608091][T12066] usb 9-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 1219.731154][T12066] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.771260][T12066] usb 9-1: Product: syz
[ 1219.824211][T12066] usb 9-1: Manufacturer: syz
[ 1220.083410][T13968] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1220.107697][   T12] hsr_slave_0: left promiscuous mode
[ 1220.123846][T13968] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1220.196500][T12066] usb 9-1: SerialNumber: syz
[ 1220.556369][   T12] hsr_slave_1: left promiscuous mode
[ 1220.558916][T12066] usb 9-1: can't set config #127, error -71
[ 1220.563174][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1220.604034][T12066] usb 9-1: USB disconnect, device number 6
[ 1220.768632][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1220.814100][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1222.347332][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1223.366269][   T12] veth1_macvtap: left promiscuous mode
[ 1223.371930][   T12] veth0_macvtap: left promiscuous mode
[ 1223.378091][   T12] veth1_vlan: left promiscuous mode
[ 1223.383432][   T12] veth0_vlan: left promiscuous mode
[ 1223.568407][ T5837] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2
[ 1223.578681][ T5837] Bluetooth: hci1: unexpected event for opcode 0x2007
[ 1226.368320][T14005] Falling back ldisc for ttyS3.
[ 1226.991159][T14018] siw: device registration error -23
[ 1227.655749][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1227.678372][ T5837] Bluetooth: hci1: Injecting HCI hardware error event
[ 1227.690351][ T5156] Bluetooth: hci1: hardware error 0x00
[ 1228.100840][T14023] input: syz1 as /devices/virtual/input/input19
[ 1229.869070][ T5156] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1230.243398][  T980] Process accounting resumed
[ 1230.304024][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1587'.
[ 1230.375790][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1230.461354][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1231.442198][T14026] kexec: Could not allocate control_code_buffer
[ 1232.603761][T14036] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1589'.
[ 1234.079554][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[ 1234.094232][T14045] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1235.069605][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1235.079096][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1235.188061][T14056] fuse: Unknown parameter ''
[ 1236.076164][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1236.398235][T14067] loop9: detected capacity change from 0 to 7
[ 1236.407952][T14067] buffer_io_error: 12 callbacks suppressed
[ 1236.407972][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.422642][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.431698][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.440799][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.450079][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.458974][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.469494][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.478080][T14067] ldm_validate_partition_table(): Disk read failed.
[ 1236.485194][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.493682][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.502457][T14067] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1236.533668][T14067] Dev loop9: unable to read RDB block 0
[ 1236.540807][T14067]  loop9: unable to read partition table
[ 1236.548554][T14067] loop9: partition table beyond EOD, truncated
[ 1236.555517][T14067] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[ 1236.555517][T14067] 
) failed (rc=-5)
[ 1237.346085][T14051] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 1237.399556][T14078] input: syz1 as /devices/virtual/input/input20
[ 1239.234291][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1240.407773][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1240.420580][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1240.433278][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1240.444996][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1240.488023][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1241.044950][T14112] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1241.073573][T14112] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1241.483323][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1241.492295][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1241.610544][T14114] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1241.629150][T14114] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1242.242564][T14120] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1604'.
[ 1242.630046][T14101] lo speed is unknown, defaulting to 1000
[ 1242.788354][ T5156] Bluetooth: hci5: command tx timeout
[ 1242.840267][T14101] lo speed is unknown, defaulting to 1000
[ 1242.909529][T14125] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1243.438830][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1606'.
[ 1244.478197][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1244.487470][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1244.783404][   T12] IPVS: stop unused estimator thread 0...
[ 1244.907700][ T5156] Bluetooth: hci5: command tx timeout
[ 1245.486304][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1246.985663][ T5156] Bluetooth: hci5: command tx timeout
[ 1247.299515][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1247.308119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1247.585235][T14162] Bluetooth: hci6: Frame reassembly failed (-84)
[ 1248.166586][T14170] new mount options do not match the existing superblock, will be ignored
[ 1248.769467][T14174] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1248.779927][T14174] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1248.847278][T14101] chnl_net:caif_netlink_parms(): no params data found
[ 1249.166081][ T5837] Bluetooth: hci5: command tx timeout
[ 1249.787467][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1249.796349][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1249.865919][ T5156] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1251.100748][T11844] bridge_slave_1: left allmulticast mode
[ 1251.107012][T11844] bridge_slave_1: left promiscuous mode
[ 1251.415835][T11844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.861958][T11844] bridge_slave_0: left allmulticast mode
[ 1251.885827][T11844] bridge_slave_0: left promiscuous mode
[ 1251.895933][T11844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1253.633521][   T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1253.641922][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1254.018654][T11844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1254.200776][T11844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1254.217937][T11844] bond0 (unregistering): Released all slaves
[ 1254.613646][T14101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1255.121488][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1255.491440][T14241] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1624'.
[ 1255.985500][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1255.994439][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1256.043829][T14242] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1256.062400][T14242] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1256.731283][T14101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1257.167759][T14101] bridge_slave_0: entered allmulticast mode
[ 1257.321345][T14101] bridge_slave_0: entered promiscuous mode
[ 1257.447473][T14101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1257.495945][T14101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1257.503315][T14101] bridge_slave_1: entered allmulticast mode
[ 1257.511406][T14101] bridge_slave_1: entered promiscuous mode
[ 1258.141279][T11844] hsr_slave_0: left promiscuous mode
[ 1258.211055][T14251] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1258.415844][T11844] hsr_slave_1: left promiscuous mode
[ 1258.422778][T11844] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1258.591647][T11844] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1259.331086][T10378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1259.339870][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1260.267596][ T5837] Bluetooth: hci4: command 0x1003 tx timeout
[ 1260.274635][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1261.214611][T14279] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1261.224800][T14279] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1261.973595][T11844] team0 (unregistering): Port device team_slave_1 removed
[ 1262.592097][T10378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1262.600751][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1263.128680][T11844] team0 (unregistering): Port device team_slave_0 removed
[ 1264.173587][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1264.257068][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1264.520743][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1264.534039][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1264.543165][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.423284][T14310] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1265.523311][T14310] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1265.794291][T14307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.803306][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.822264][T14307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.832204][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1265.909762][T14101] team0: Port device team_slave_0 added
[ 1267.722542][T14101] team0: Port device team_slave_1 added
[ 1268.349915][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1268.358354][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1268.944018][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1268.952990][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1269.058733][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1270.042854][T12238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1270.051596][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1270.228938][T14359] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1270.238614][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1270.247421][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1270.831915][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1271.902730][T14101] hsr_slave_0: entered promiscuous mode
[ 1271.909492][T14101] hsr_slave_1: entered promiscuous mode
[ 1271.921700][T14101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1271.929623][T14101] Cannot create hsr debugfs directory
[ 1272.029914][T14373] Cannot find add_set index 0 as target
[ 1272.040836][T14373] netlink: 'syz.7.1649': attribute type 9 has an invalid length.
[ 1272.060379][T14373] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1273.092916][T14374] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1274.112529][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1274.121140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1274.155356][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1274.488114][T14387] Invalid source name
[ 1274.492204][T14387] UBIFS error (pid: 14387): cannot open "./file0", error -22
[ 1274.506662][T14387] binder: 14380:14387 ioctl 40046210 0 returned -14
[ 1274.526817][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1650'.
[ 1276.040644][T12245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1276.049611][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1276.608183][T14406] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1276.633226][T14406] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1276.964851][T14407] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1276.986002][T14407] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1277.409109][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'.
[ 1280.091230][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1280.099785][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1280.968338][T14101] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1281.169393][T14101] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1281.667732][T14101] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1281.923940][T12238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1281.932406][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1282.962744][T14447] netlink: 'syz.8.1660': attribute type 2 has an invalid length.
[ 1283.765320][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1283.773299][T14101] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1284.482585][T14101] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1284.726907][T14101] 8021q: adding VLAN 0 to HW filter on device team0
[ 1284.781695][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1284.788915][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1284.840031][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1284.847947][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1285.383598][T14482] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1285.397670][T14482] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1285.744264][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1285.752792][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1286.649390][T14101] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1286.890142][T14101] veth0_vlan: entered promiscuous mode
[ 1286.983672][T14101] veth1_vlan: entered promiscuous mode
[ 1287.088581][T14101] veth0_macvtap: entered promiscuous mode
[ 1287.130897][T14101] veth1_macvtap: entered promiscuous mode
[ 1287.220194][T14101] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1287.263889][T14101] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1287.444012][T14101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.490367][T14101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.649237][T14509] vimc link validate: Scaler:src:4096x16 (0x33424752, 5, 0, 4, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1287.726554][T14101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.738205][T14101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1287.848345][   T30] audit: type=1326 audit(1755000653.783:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14502 comm="syz.0.1680" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5bfb8ebe9 code=0x0
[ 1287.993859][T12232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1288.002651][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1288.896291][T14511] netlink: 'syz.9.1672': attribute type 20 has an invalid length.
[ 1289.401860][T14520] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1674'.
[ 1289.412463][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1674'.
[ 1289.490631][T14520] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1289.824771][T14513] dvmrp17: entered allmulticast mode
[ 1289.992312][T12238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1290.033636][T12238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1290.106089][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1290.317588][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1290.450374][T14528] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1290.460149][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1291.049945][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1291.120624][T14521] pim6reg: entered allmulticast mode
[ 1291.403030][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1291.411760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1291.424439][T14531] pim6reg: left allmulticast mode
[ 1291.525668][T14539] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1292.429555][T14544] netlink: 'syz.7.1677': attribute type 8 has an invalid length.
[ 1293.334944][  T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1293.989432][T10378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1293.998064][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1294.961787][T14561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1682'.
[ 1296.439102][T12066] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1296.544882][T14579] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1297.057009][T14581] random: crng reseeded on system resumption
[ 1297.086152][T12066] usb 10-1: Using ep0 maxpacket: 16
[ 1297.134500][T12066] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1297.158046][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1297.163534][T12066] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1297.166934][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1297.223960][T12066] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1297.266726][T12066] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.347648][T14588] overlay: ./file0 is not a directory
[ 1297.448199][T12066] usb 10-1: Product: syz
[ 1297.448390][T12066] usb 10-1: Manufacturer: syz
[ 1297.448575][T12066] usb 10-1: SerialNumber: syz
[ 1297.685384][T14573] fuse: Bad value for 'user_id'
[ 1297.685400][T14573] fuse: Bad value for 'user_id'
[ 1297.687994][T14573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.688299][T14573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1297.689788][T14573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.690051][T14573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.040580][T12066] usb 10-1: 0:2 : does not exist
[ 1300.086493][T12238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1300.095006][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1300.107647][T14593] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[ 1300.210503][T12066] usb 10-1: USB disconnect, device number 4
[ 1300.313291][T14616] random: crng reseeded on system resumption
[ 1300.364278][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1302.547580][ T5931] IPVS: starting estimator thread 0...
[ 1303.523074][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1303.585798][T14629] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1303.732520][T14634] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1303.764711][T14634] trusted_key: encrypted_key: master key parameter '00N004093' is invalid
[ 1303.797982][T10657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1303.806559][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1305.150592][ T6023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1305.159146][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1307.298836][T14652] /dev/nullb0: Can't open blockdev
[ 1309.129336][T14653] lo speed is unknown, defaulting to 1000
[ 1309.136658][T14653] lo speed is unknown, defaulting to 1000
[ 1309.395042][T12230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1309.403715][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1311.861619][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1311.870193][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1313.161314][T12948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1314.024700][T14681] trusted_key: syz.7.1702 sent an empty control message without MSG_MORE.
[ 1314.335007][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1702'.
[ 1315.067605][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1315.076198][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1315.296271][T14697] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1315.365637][ T5931] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 1315.439661][T14702] netlink: 'syz.0.1706': attribute type 10 has an invalid length.
[ 1316.439375][T14697] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.448627][T14697] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1316.892174][ T5931] usb 10-1: device descriptor read/all, error -71
[ 1317.064897][T14697] bridge0: entered allmulticast mode
[ 1317.626097][T11844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1317.634677][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1318.062472][T14697] syz.3.1705 (14697) used obsolete PPPIOCDETACH ioctl
[ 1319.273811][T14733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'.
[ 1320.014349][T14715] delete_channel: no stack
[ 1320.262937][T14739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1320.274021][T14739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1320.451739][T14742] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1713'.
[ 1321.202110][   T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1321.210579][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1322.836680][T12948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1323.820773][T12245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1323.829478][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1326.233567][T14777] ------------[ cut here ]------------
[ 1326.239777][T14777] WARNING: CPU: 1 PID: 14777 at net/ipv6/route.c:4856 rt6_multipath_rebalance+0x455/0x8b0
[ 1326.250176][T14777] Modules linked in:
[ 1326.254793][T14777] CPU: 1 UID: 0 PID: 14777 Comm: syz.9.1719 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1326.265062][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1326.275262][T14777] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[ 1326.281741][T14777] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 6d 02 f8 e9 78 fe ff ff e8 23 87 a2 f7 eb 05 e8 1c 87 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 1326.301818][T14777] RSP: 0018:ffffc90003e16420 EFLAGS: 00010283
[ 1326.308204][T14777] RAX: ffffffff8a1d9e9d RBX: ffff888055eca000 RCX: 0000000000080000
[ 1326.317103][T14777] RDX: ffffc9001b2a4000 RSI: 000000000001f03a RDI: 000000000001f03b
[ 1326.325883][T14777] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1326.334123][T14777] R10: dffffc0000000000 R11: fffff520007c2c7c R12: ffff888032e110de
[ 1326.342724][T14777] R13: ffff888055eca090 R14: 0000000000000000 R15: 1ffff1100abd9412
[ 1326.350739][T14777] FS:  00007fb64c1f06c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[ 1326.359812][T14777] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1326.366432][T14777] CR2: 0000555578391808 CR3: 0000000068176000 CR4: 00000000003526f0
[ 1326.374760][T14777] Call Trace:
[ 1326.378080][T14777]  <TASK>
[ 1326.381006][T14777]  fib6_ifdown+0x401/0x4c0
[ 1326.385633][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1326.390844][T14777]  fib6_clean_node+0x24d/0x590
[ 1326.395695][T14777]  ? __pfx_fib6_clean_node+0x10/0x10
[ 1326.401075][T14777]  ? __lock_acquire+0xab9/0xd20
[ 1326.406159][T14777]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1326.411656][T14777]  fib6_walk_continue+0x678/0x910
[ 1326.416738][T14777]  fib6_walk+0x149/0x290
[ 1326.420995][T14777]  __fib6_clean_all+0x234/0x380
[ 1326.425979][T14777]  ? __fib6_clean_all+0x9b/0x380
[ 1326.430942][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1326.435930][T14777]  ? __pfx___fib6_clean_all+0x10/0x10
[ 1326.441322][T14777]  ? __pfx_fib6_clean_node+0x10/0x10
[ 1326.446748][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1326.451707][T14777]  rt6_disable_ip+0x120/0x720
[ 1326.456444][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.461201][T14777]  ? __pfx_rt6_disable_ip+0x10/0x10
[ 1326.466638][T14777]  addrconf_ifdown+0x15d/0x1880
[ 1326.471660][T14777]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1326.477497][T14777]  ? __pfx___mutex_lock+0x10/0x10
[ 1326.482514][T14777]  ? tls_dev_event+0x717/0xec0
[ 1326.487563][T14777]  ? __pfx_addrconf_ifdown+0x10/0x10
[ 1326.492864][T14777]  addrconf_notify+0x1bc/0x1010
[ 1326.497759][T14777]  notifier_call_chain+0x1b3/0x3e0
[ 1326.502927][T14777]  __dev_notify_flags+0x18d/0x2e0
[ 1326.508463][T14777]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1326.514012][T14777]  ? __dev_change_flags+0x4cc/0x6d0
[ 1326.519331][T14777]  ? __pfx___dev_change_flags+0x10/0x10
[ 1326.524924][T14777]  ? netif_state_change+0x256/0x3a0
[ 1326.530347][T14777]  ? __pfx_netif_state_change+0x10/0x10
[ 1326.536212][T14777]  netif_change_flags+0xe8/0x1a0
[ 1326.541246][T14777]  do_setlink+0xc55/0x41c0
[ 1326.545868][T14777]  ? finish_task_switch+0x266/0x950
[ 1326.551326][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.556127][T14777]  ? __pfx_do_setlink+0x10/0x10
[ 1326.561082][T14777]  ? trace_sched_exit_tp+0x38/0x120
[ 1326.566303][T14777]  ? __schedule+0x16c8/0x4c90
[ 1326.570991][T14777]  ? preempt_schedule_irq+0xb5/0x150
[ 1326.576381][T14777]  ? __pfx___schedule+0x10/0x10
[ 1326.581223][T14777]  ? __mutex_trylock_common+0x153/0x260
[ 1326.586817][T14777]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1326.592725][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.597721][T14777]  ? trace_irq_disable+0x37/0x110
[ 1326.602832][T14777]  ? preempt_schedule_irq+0xde/0x150
[ 1326.608498][T14777]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1326.614486][T14777]  ? irqentry_exit+0x74/0x90
[ 1326.619127][T14777]  rtnl_newlink+0x149f/0x1c70
[ 1326.624167][T14777]  ? finish_task_switch+0x18b/0x950
[ 1326.629623][T14777]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1326.634859][T14777]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1326.640305][T14777]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1326.646357][T14777]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1326.651677][T14777]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1326.657842][T14777]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1326.664436][T14777]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[ 1326.671150][T14777]  ? __pfx___schedule+0x10/0x10
[ 1326.676117][T14777]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[ 1326.683056][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.688114][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.692873][T14777]  ? rcu_read_unlock_special+0x3fe/0x4c0
[ 1326.698548][T14777]  ? irqentry_exit+0x74/0x90
[ 1326.703318][T14777]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1326.708481][T14777]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1326.713641][T14777]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1326.718914][T14777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1326.725127][T14777]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[ 1326.732513][T14777]  netlink_rcv_skb+0x205/0x470
[ 1326.737466][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.742434][T14777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1326.747945][T14777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1326.753249][T14777]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1326.758568][T14777]  netlink_unicast+0x75c/0x8e0
[ 1326.763433][T14777]  netlink_sendmsg+0x805/0xb30
[ 1326.768229][T14777]  ? tomoyo_socket_sendmsg_permission+0x141/0x300
[ 1326.774649][T14777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1326.780138][T14777]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1326.785451][T14777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1326.790767][T14777]  __sock_sendmsg+0x21c/0x270
[ 1326.795566][T14777]  ____sys_sendmsg+0x505/0x830
[ 1326.800348][T14777]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1326.805746][T14777]  ? import_iovec+0x74/0xa0
[ 1326.810419][T14777]  ___sys_sendmsg+0x21f/0x2a0
[ 1326.815201][T14777]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1326.820446][T14777]  ? __fget_files+0x2a/0x420
[ 1326.825026][T14777]  ? __fget_files+0x3a0/0x420
[ 1326.829727][T14777]  __x64_sys_sendmsg+0x19b/0x260
[ 1326.834661][T14777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1326.840246][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1326.845104][T14777]  ? do_syscall_64+0xbe/0x3b0
[ 1326.850004][T14777]  do_syscall_64+0xfa/0x3b0
[ 1326.854504][T14777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.860640][T14777]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1326.866517][T14777]  ? clear_bhb_loop+0x60/0xb0
[ 1326.871488][T14777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.877527][T14777] RIP: 0033:0x7fb64b38ebe9
[ 1326.881941][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1326.901942][T14777] RSP: 002b:00007fb64c1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1326.910424][T14777] RAX: ffffffffffffffda RBX: 00007fb64b5b6180 RCX: 00007fb64b38ebe9
[ 1326.918702][T14777] RDX: 0000000007000000 RSI: 0000200000000440 RDI: 0000000000000009
[ 1326.926812][T14777] RBP: 00007fb64b411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1326.935071][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1326.943104][T14777] R13: 00007fb64b5b6218 R14: 00007fb64b5b6180 R15: 00007ffc9236a7a8
[ 1326.951244][T14777]  </TASK>
[ 1326.954274][T14777] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1326.961826][T14777] CPU: 1 UID: 0 PID: 14777 Comm: syz.9.1719 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1326.972065][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1326.982208][T14777] Call Trace:
[ 1326.985511][T14777]  <TASK>
[ 1326.988542][T14777]  dump_stack_lvl+0x99/0x250
[ 1326.993328][T14777]  ? __asan_memcpy+0x40/0x70
[ 1326.998014][T14777]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1327.003360][T14777]  ? __pfx__printk+0x10/0x10
[ 1327.008053][T14777]  panic+0x2db/0x790
[ 1327.012058][T14777]  ? __pfx_panic+0x10/0x10
[ 1327.016629][T14777]  ? show_trace_log_lvl+0x4fb/0x550
[ 1327.021849][T14777]  __warn+0x31b/0x4b0
[ 1327.025826][T14777]  ? rt6_multipath_rebalance+0x455/0x8b0
[ 1327.031559][T14777]  ? rt6_multipath_rebalance+0x455/0x8b0
[ 1327.037379][T14777]  report_bug+0x2be/0x4f0
[ 1327.041696][T14777]  ? rt6_multipath_rebalance+0x455/0x8b0
[ 1327.047400][T14777]  ? rt6_multipath_rebalance+0x455/0x8b0
[ 1327.053031][T14777]  ? rt6_multipath_rebalance+0x457/0x8b0
[ 1327.058702][T14777]  handle_bug+0x84/0x160
[ 1327.062996][T14777]  exc_invalid_op+0x1a/0x50
[ 1327.067529][T14777]  asm_exc_invalid_op+0x1a/0x20
[ 1327.072589][T14777] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0
[ 1327.079047][T14777] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 dd 6d 02 f8 e9 78 fe ff ff e8 23 87 a2 f7 eb 05 e8 1c 87 a2 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[ 1327.099188][T14777] RSP: 0018:ffffc90003e16420 EFLAGS: 00010283
[ 1327.105419][T14777] RAX: ffffffff8a1d9e9d RBX: ffff888055eca000 RCX: 0000000000080000
[ 1327.113396][T14777] RDX: ffffc9001b2a4000 RSI: 000000000001f03a RDI: 000000000001f03b
[ 1327.121396][T14777] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[ 1327.129365][T14777] R10: dffffc0000000000 R11: fffff520007c2c7c R12: ffff888032e110de
[ 1327.137374][T14777] R13: ffff888055eca090 R14: 0000000000000000 R15: 1ffff1100abd9412
[ 1327.145438][T14777]  ? rt6_multipath_rebalance+0x44d/0x8b0
[ 1327.151265][T14777]  fib6_ifdown+0x401/0x4c0
[ 1327.155689][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1327.160630][T14777]  fib6_clean_node+0x24d/0x590
[ 1327.165477][T14777]  ? __pfx_fib6_clean_node+0x10/0x10
[ 1327.170758][T14777]  ? __lock_acquire+0xab9/0xd20
[ 1327.175777][T14777]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1327.181202][T14777]  fib6_walk_continue+0x678/0x910
[ 1327.186227][T14777]  fib6_walk+0x149/0x290
[ 1327.190657][T14777]  __fib6_clean_all+0x234/0x380
[ 1327.195551][T14777]  ? __fib6_clean_all+0x9b/0x380
[ 1327.200516][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1327.205471][T14777]  ? __pfx___fib6_clean_all+0x10/0x10
[ 1327.210864][T14777]  ? __pfx_fib6_clean_node+0x10/0x10
[ 1327.216153][T14777]  ? __pfx_fib6_ifdown+0x10/0x10
[ 1327.221116][T14777]  rt6_disable_ip+0x120/0x720
[ 1327.225800][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.230564][T14777]  ? __pfx_rt6_disable_ip+0x10/0x10
[ 1327.235946][T14777]  addrconf_ifdown+0x15d/0x1880
[ 1327.240799][T14777]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1327.246788][T14777]  ? __pfx___mutex_lock+0x10/0x10
[ 1327.251985][T14777]  ? tls_dev_event+0x717/0xec0
[ 1327.256842][T14777]  ? __pfx_addrconf_ifdown+0x10/0x10
[ 1327.262140][T14777]  addrconf_notify+0x1bc/0x1010
[ 1327.267490][T14777]  notifier_call_chain+0x1b3/0x3e0
[ 1327.272605][T14777]  __dev_notify_flags+0x18d/0x2e0
[ 1327.277722][T14777]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1327.283268][T14777]  ? __dev_change_flags+0x4cc/0x6d0
[ 1327.288497][T14777]  ? __pfx___dev_change_flags+0x10/0x10
[ 1327.294051][T14777]  ? netif_state_change+0x256/0x3a0
[ 1327.299374][T14777]  ? __pfx_netif_state_change+0x10/0x10
[ 1327.305005][T14777]  netif_change_flags+0xe8/0x1a0
[ 1327.310137][T14777]  do_setlink+0xc55/0x41c0
[ 1327.314657][T14777]  ? finish_task_switch+0x266/0x950
[ 1327.319882][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.324733][T14777]  ? __pfx_do_setlink+0x10/0x10
[ 1327.329576][T14777]  ? trace_sched_exit_tp+0x38/0x120
[ 1327.334809][T14777]  ? __schedule+0x16c8/0x4c90
[ 1327.339506][T14777]  ? preempt_schedule_irq+0xb5/0x150
[ 1327.344893][T14777]  ? __pfx___schedule+0x10/0x10
[ 1327.349834][T14777]  ? __mutex_trylock_common+0x153/0x260
[ 1327.355453][T14777]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1327.361461][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.366298][T14777]  ? trace_irq_disable+0x37/0x110
[ 1327.371420][T14777]  ? preempt_schedule_irq+0xde/0x150
[ 1327.376996][T14777]  ? __pfx_preempt_schedule_irq+0x10/0x10
[ 1327.382819][T14777]  ? irqentry_exit+0x74/0x90
[ 1327.387551][T14777]  rtnl_newlink+0x149f/0x1c70
[ 1327.392245][T14777]  ? finish_task_switch+0x18b/0x950
[ 1327.397463][T14777]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1327.402704][T14777]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1327.407911][T14777]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1327.413825][T14777]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1327.419015][T14777]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1327.424992][T14777]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1327.431495][T14777]  ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40
[ 1327.438388][T14777]  ? __pfx___schedule+0x10/0x10
[ 1327.443413][T14777]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[ 1327.450441][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.455376][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.460135][T14777]  ? rcu_read_unlock_special+0x3fe/0x4c0
[ 1327.465855][T14777]  ? irqentry_exit+0x74/0x90
[ 1327.470618][T14777]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1327.475649][T14777]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1327.480765][T14777]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1327.486577][T14777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1327.492409][T14777]  ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10
[ 1327.499537][T14777]  netlink_rcv_skb+0x205/0x470
[ 1327.504393][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.509224][T14777]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1327.514785][T14777]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1327.520075][T14777]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1327.525391][T14777]  netlink_unicast+0x75c/0x8e0
[ 1327.530373][T14777]  netlink_sendmsg+0x805/0xb30
[ 1327.535485][T14777]  ? tomoyo_socket_sendmsg_permission+0x141/0x300
[ 1327.541916][T14777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1327.547220][T14777]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1327.552690][T14777]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1327.557988][T14777]  __sock_sendmsg+0x21c/0x270
[ 1327.562954][T14777]  ____sys_sendmsg+0x505/0x830
[ 1327.567916][T14777]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1327.573231][T14777]  ? import_iovec+0x74/0xa0
[ 1327.577767][T14777]  ___sys_sendmsg+0x21f/0x2a0
[ 1327.582656][T14777]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1327.587992][T14777]  ? __fget_files+0x2a/0x420
[ 1327.592766][T14777]  ? __fget_files+0x3a0/0x420
[ 1327.597539][T14777]  __x64_sys_sendmsg+0x19b/0x260
[ 1327.602485][T14777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1327.607961][T14777]  ? rcu_is_watching+0x15/0xb0
[ 1327.612901][T14777]  ? do_syscall_64+0xbe/0x3b0
[ 1327.617580][T14777]  do_syscall_64+0xfa/0x3b0
[ 1327.622129][T14777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.628408][T14777]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1327.634037][T14777]  ? clear_bhb_loop+0x60/0xb0
[ 1327.639065][T14777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.645399][T14777] RIP: 0033:0x7fb64b38ebe9
[ 1327.649951][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1327.670192][T14777] RSP: 002b:00007fb64c1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1327.678697][T14777] RAX: ffffffffffffffda RBX: 00007fb64b5b6180 RCX: 00007fb64b38ebe9
[ 1327.686852][T14777] RDX: 0000000007000000 RSI: 0000200000000440 RDI: 0000000000000009
[ 1327.695181][T14777] RBP: 00007fb64b411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1327.703433][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1327.711410][T14777] R13: 00007fb64b5b6218 R14: 00007fb64b5b6180 R15: 00007ffc9236a7a8
[ 1327.719656][T14777]  </TASK>
[ 1327.723236][T14777] Kernel Offset: disabled
[ 1327.728008][T14777] Rebooting in 86400 seconds..