last executing test programs:

19.252533984s ago: executing program 4 (id=175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xd, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

19.141706566s ago: executing program 2 (id=177):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@local, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0xb200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}, {0x0}], 0x2, 0xffffff01, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

18.87494072s ago: executing program 4 (id=178):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r3 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1ay\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x878me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0)
fallocate(r3, 0x0, 0x0, 0x200401)

17.920956225s ago: executing program 2 (id=180):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r4 = fanotify_init(0xf00, 0x1)
fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)

15.987998451s ago: executing program 2 (id=182):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x1, {0x2, 0xff, 0x3}, 0xfe}, 0x18)
sendmmsg(r3, &(0x7f0000000100)=[{{&(0x7f0000000040)=@can={0x1d, r4, 0xc7}, 0x80, 0x0}}], 0x1, 0xf5)

10.078783208s ago: executing program 2 (id=195):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000001"], 0x108}}], 0x1, 0xc040)
syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000009040000030300"], 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}, 0x1, 0x0, 0x0, 0x24}, 0x0)

9.912267817s ago: executing program 4 (id=198):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair(0x1, 0x100000005, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r1}, 0x80, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x1, {0x2, 0xff, 0x3}, 0xfe}, 0x18)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5)

9.291806979s ago: executing program 4 (id=200):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved})
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3}], 0x1, 0x40800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00907584760b22f116000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000040000000000ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/221], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe0000000000000092010000000003000000000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844)
r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r4)
socket(0x10, 0x3, 0x0)
r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000000580)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f00000001c0)=""/63, 0x3f}, {0x0}], 0x6, &(0x7f0000000e00)=[{&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/111, 0x6f}], 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2e00ec9fc47033f7340cb6fa165387db10b6850a24be95ea33b2669c167927b5edb45e62353016baf64a38ea65c80efa27efcd675154801e8da758b1de5fe771fb55b5189d69a9b0c69d1fdf0c0de8c163bc30755d0850c76f51b1c283169f568c631168ba62e1cfc900ea5653ed8677e07c8814be6fc2a41b706784009aea5a318a5dd1c8f0c4c43228c1bc978ea6479a7120acf8e8e9aa4442d95c0ba4e1b47ebaeff3bba82cae2f8cf8c92dfb2bc099f0541f9507b45efed0e4b96e11200928019fe40d4c3bc8b16d5fd193ba0ab0af5754eecf"])
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x24000041)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0)

7.450150416s ago: executing program 4 (id=202):
socket$igmp6(0xa, 0x3, 0x2)
mq_open(0x0, 0x42, 0x197, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

6.815144961s ago: executing program 3 (id=206):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000540)={0x0, 0x3}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r1 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
execveat(r1, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800004, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x12, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x10000000, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
socket$nl_route(0x10, 0x3, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
getrandom(&(0x7f0000000080)=""/16, 0x10, 0x1)

6.667488645s ago: executing program 0 (id=208):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@local, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0xb200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGKBDIACR(r4, 0x4b4a, 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_devices(r6, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0)
pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}, {0x0}], 0x2, 0xffffff01, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.807800481s ago: executing program 2 (id=212):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000a80)=""/179, 0xb3}], 0x3}, 0x10100)

4.752213645s ago: executing program 0 (id=213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)

4.506979633s ago: executing program 0 (id=214):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved})
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3}], 0x1, 0x40800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00907584760b22f116000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000040000000000ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/221], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe0000000000000092010000000003000000000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844)
r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r4)
socket(0x10, 0x3, 0x0)
r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000000580)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f00000001c0)=""/63, 0x3f}, {0x0}], 0x6, &(0x7f0000000e00)=[{&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/111, 0x6f}], 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2e00ec9fc47033f7340cb6fa165387db10b6850a24be95ea33b2669c167927b5edb45e62353016baf64a38ea65c80efa27efcd675154801e8da758b1de5fe771fb55b5189d69a9b0c69d1fdf0c0de8c163bc30755d0850c76f51b1c283169f568c631168ba62e1cfc900ea5653ed8677e07c8814be6fc2a41b706784009aea5a318a5dd1c8f0c4c43228c1bc978ea6479a7120acf8e8e9aa4442d95c0ba4e1b47ebaeff3bba82cae2f8cf8c92dfb2bc099f0541f9507b45efed0e4b96e11200928019fe40d4c3bc8b16d5fd193ba0ab0af5754eecf"])
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x24000041)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0)

4.35290243s ago: executing program 5 (id=215):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0)

4.221870878s ago: executing program 0 (id=216):
syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000a0", @ANYRES16=r1, @ANYBLOB="01002bbd7000feffffff1e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0021000000000000000c0090000500000000004000"], 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x20044010)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x400246}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x1b, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r11 = socket(0x1e, 0x1, 0x0)
write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r11], 0x14)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0xa, 0x4, &(0x7f0000000100)="5a5c80e52ec8b08ab080e7afac8501a4dd802852791f118d432664d56c27b25af1eeb99a02688349fa0f0dbadacddbb8a63376a2ccad47a719309033db66cd6f3e9739e91f202cac035f87dc144b40d683d58cdc9756313c4a547303813706121aee6df57ed444dd0abaca950cb58465", 0x70, 0x4, 0x0, {0x0, r12}})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)

4.073820393s ago: executing program 5 (id=217):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

3.430907834s ago: executing program 5 (id=218):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1010, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0xfe0, 0x2, [@TCA_TCINDEX_ACT={0xfdc, 0x7, [@m_xt={0x170, 0x17, 0x0, 0x0, {{0x7}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x1e, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1010}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.952928732s ago: executing program 5 (id=219):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
write(r0, &(0x7f0000000000)="08001800", 0x4)
read(r0, &(0x7f00000003c0)=""/14, 0xe)

2.78883232s ago: executing program 1 (id=220):
close(0x3)

2.569424945s ago: executing program 0 (id=221):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

2.404531338s ago: executing program 5 (id=222):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.404043049s ago: executing program 1 (id=223):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_getevents(0x0, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r4 = fanotify_init(0xf00, 0x1)
fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)

2.215062522s ago: executing program 0 (id=224):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000001"], 0x108}}], 0x1, 0xc040)
syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000009040000030300"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002800038024000080040002800400078004000180080003"], 0xe8}, 0x1, 0x0, 0x0, 0x24}, 0x0)

1.970695861s ago: executing program 5 (id=225):
r0 = memfd_create(&(0x7f0000004500)='@\\%\\!--\xee\x00', 0x6)
sync_file_range(r0, 0x6, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
r1 = getpgrp(0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r3, 0x8)
landlock_restrict_self(r4, 0x6)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x5)
landlock_restrict_self(r4, 0x4)
landlock_restrict_self(r4, 0x5)
landlock_restrict_self(r4, 0x1)
landlock_restrict_self(r3, 0xc)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1.766474162s ago: executing program 3 (id=226):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="8f5ce04ccea7c28f2c60cd6c9a489cb61b9824", 0x13}, {&(0x7f0000000180)="4bb604e5a835279ae3a4ab4092d3871ae557b95127c30c9f0b9b768e3ddcd2fb9d2c8850511568490216c4f823061edfebf6ea9553b07d44da530c98051577", 0x3f}, {&(0x7f0000000940)="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", 0x125}, {&(0x7f0000000800)="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", 0x101}, {&(0x7f0000001400)="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", 0x12e}], 0x5, &(0x7f0000000c00)=[@dstopts={{0x1e0, 0x29, 0x37, {0x5e, 0x39, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x3, 0x9c, "6fd9e953e686cdc02bbfb7b1ba34b25f8e11ff5156b7be70249b89d925bba608124f82e703cf77156e00bc1d00000000b93a12e02e0241e4b7d61137fd8084e47059b848b36818e390639be9cd7d13a264b726f7e56b086046657fd1fd6be9118715c8e14d011f41b8bf76a8322a14b5172e5989134fc6981353d7c8e51f5079d857be02558a541980831d2becf49bd497d7f8b42ed4cc578ab03ade"}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x0, 0xcc, "53283b7dd2fcc42bdaa268178048fb965cc37930a7261926a4aab7ad6d32a672c4f760dffa921d116506fa0872f640784efed3e375c78e617e41472c8b9e0285a29ec86256d6fab200309ad5c6549f166ae682797af2a4ac440c52e9c5ac605c79fa8e3eec904739b0c68ff1664be6a2aaabc1ea894f3f763431f1beae6d27047bb4496d1eedf469243e6adef9a741fe3984b7961529d17d0f015ac18dc060ce93f910fc34ed340e916137838ab5cda146d10e54498cfa917e79dd50a45cb33dbbe62f3c9fd22c859ef52fac"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x97, 0xff, [0x1000008, 0x0, 0x1, 0x2, 0x479]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x33}}}], 0x1f8}, 0x8040)
sendmsg$inet6(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)="9baf4d", 0x3}], 0x1}, 0x4000001)

1.106972103s ago: executing program 1 (id=227):
socket$alg(0x26, 0x5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x1, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0406"], 0x7)

795.330211ms ago: executing program 3 (id=228):
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved})
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf15", 0x57}], 0x3}], 0x1, 0x40800)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00907584760b22f116000000000000000000000000000092010000000000000600000000000000ffff0000000000001c25080000000000020000040000000000ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/221], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe0000000000000092010000000003000000000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844)
r4 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r4)
socket(0x10, 0x3, 0x0)
r5 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0)
r6 = getpid()
process_vm_readv(r6, &(0x7f0000000580)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f00000001c0)=""/63, 0x3f}, {0x0}], 0x6, &(0x7f0000000e00)=[{&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/111, 0x6f}], 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2e00ec9fc47033f7340cb6fa165387db10b6850a24be95ea33b2669c167927b5edb45e62353016baf64a38ea65c80efa27efcd675154801e8da758b1de5fe771fb55b5189d69a9b0c69d1fdf0c0de8c163bc30755d0850c76f51b1c283169f568c631168ba62e1cfc900ea5653ed8677e07c8814be6fc2a41b706784009aea5a318a5dd1c8f0c4c43228c1bc978ea6479a7120acf8e8e9aa4442d95c0ba4e1b47ebaeff3bba82cae2f8cf8c92dfb2bc099f0541f9507b45efed0e4b96e11200928019fe40d4c3bc8b16d5fd193ba0ab0af5754eecf"])
sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x24000041)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80}, [@FRA_DST={0x14, 0x1, @remote}]}, 0x30}}, 0x0)

772.450418ms ago: executing program 1 (id=229):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42042, 0x85)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)})
syz_clone3(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r2, 0x402, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x1, r0, 0x4})
syz_create_resource$binfmt(&(0x7f0000000100)='.\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

555.957556ms ago: executing program 3 (id=230):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0xfd02, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0)

463.775782ms ago: executing program 1 (id=231):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}}, 0x24}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

308.279432ms ago: executing program 4 (id=232):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1010, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0xfe0, 0x2, [@TCA_TCINDEX_ACT={0xfdc, 0x7, [@m_xt={0x170, 0x17, 0x0, 0x0, {{0x7}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe68, 0x1e, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1010}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

258.061925ms ago: executing program 3 (id=233):
syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000a0", @ANYRES16=r1, @ANYBLOB="01002bbd7000feffffff1e0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008003e00000000000c008f0021000000000000000c0090000500000000004000"], 0x54}, 0x1, 0x0, 0x0, 0x4044080}, 0x20044010)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0x79af, 0x0, 0x8000, 0x400246}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x1b, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0xffffffffffffffff, 0x400}}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
r11 = socket(0x1e, 0x1, 0x0)
write$nci(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r7, @ANYRES16=r11], 0x14)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd_index=0xa, 0x4, &(0x7f0000000100)="5a5c80e52ec8b08ab080e7afac8501a4dd802852791f118d432664d56c27b25af1eeb99a02688349fa0f0dbadacddbb8a63376a2ccad47a719309033db66cd6f3e9739e91f202cac035f87dc144b40d683d58cdc9756313c4a547303813706121aee6df57ed444dd0abaca950cb58465", 0x70, 0x4, 0x0, {0x0, r12}})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0)

224.212569ms ago: executing program 1 (id=234):
r0 = gettid()
clock_nanosleep(0x2, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000002a87199102633da1ff7f0cadc4c31ca5d3154fa6a556576461a95658d841bfa5353897ce50244a2cf658461d955d83877a1e515c8b75ded2bb062acd81cc4b3fd50cdf2d89c1905ecfdf6a295dcadde6012ffff3e0ed17e0ef91234a1ce8e884950b287c5c3fa71797d82721653ef9bc5f945ed5fbde1f8e5323a5fe8b9caafe733e23a1a7c1b11095653d8d0090b3a1f904000000000000007bd7b586a62581019fce63b606485335f9de1e1f9098363e26b328f37232b597", @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf250400000008000800ac1414310800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x400c014)
r4 = getpid()
move_pages(r0, 0x4, &(0x7f0000000180)=[&(0x7f0000323000/0x1000)=nil, &(0x7f00003fa000/0x4000)=nil, &(0x7f00006c7000/0x4000)=nil, &(0x7f0000301000/0x3000)=nil], 0x0, &(0x7f0000000280), 0xc)
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
fsopen(0x0, 0x0)
r7 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000200))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000500)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r7, 0x3516, 0x67f, 0x64, 0x0, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

105.150436ms ago: executing program 2 (id=235):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)
write(r0, &(0x7f0000000000)="08001800", 0x4)
read(r0, &(0x7f00000003c0)=""/14, 0xe)

0s ago: executing program 3 (id=236):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts.
[   76.701378][ T5806] cgroup: Unknown subsys name 'net'
[   76.838003][ T5806] cgroup: Unknown subsys name 'cpuset'
[   76.847496][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.379899][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.862485][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.893408][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.902489][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.910686][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.911624][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.923414][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.927167][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.933159][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.947547][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   80.948097][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.956421][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   80.963664][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.971418][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   80.977279][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.985267][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   80.990520][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.998627][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   81.005563][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.019784][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.020467][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.028043][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.042848][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.051185][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.052100][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.066537][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.068743][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.083483][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.093337][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.096521][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.108012][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.035273][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   82.051499][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   82.120140][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   82.257278][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   82.279211][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   82.379128][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   82.521734][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.529803][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.537223][ T5822] bridge_slave_0: entered allmulticast mode
[   82.545091][ T5822] bridge_slave_0: entered promiscuous mode
[   82.560480][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.567690][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.574998][ T5826] bridge_slave_0: entered allmulticast mode
[   82.582438][ T5826] bridge_slave_0: entered promiscuous mode
[   82.617696][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.624995][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.632643][ T5828] bridge_slave_0: entered allmulticast mode
[   82.640382][ T5828] bridge_slave_0: entered promiscuous mode
[   82.647665][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.654832][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.661991][ T5822] bridge_slave_1: entered allmulticast mode
[   82.669624][ T5822] bridge_slave_1: entered promiscuous mode
[   82.684212][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.691369][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.699075][ T5826] bridge_slave_1: entered allmulticast mode
[   82.706552][ T5826] bridge_slave_1: entered promiscuous mode
[   82.750002][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.757303][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.764587][ T5828] bridge_slave_1: entered allmulticast mode
[   82.772134][ T5828] bridge_slave_1: entered promiscuous mode
[   82.903114][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.910348][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.917771][ T5819] bridge_slave_0: entered allmulticast mode
[   82.925383][ T5819] bridge_slave_0: entered promiscuous mode
[   82.935084][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.942249][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.949693][ T5819] bridge_slave_1: entered allmulticast mode
[   82.957649][ T5819] bridge_slave_1: entered promiscuous mode
[   82.992658][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.006445][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.016818][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.025317][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.032510][ T5825] bridge_slave_0: entered allmulticast mode
[   83.040304][ T5825] bridge_slave_0: entered promiscuous mode
[   83.050469][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.073115][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.080345][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.088025][ T5820] bridge_slave_0: entered allmulticast mode
[   83.094410][ T5841] Bluetooth: hci5: command tx timeout
[   83.096449][ T5820] bridge_slave_0: entered promiscuous mode
[   83.108152][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.115522][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.123668][ T5820] bridge_slave_1: entered allmulticast mode
[   83.131182][ T5820] bridge_slave_1: entered promiscuous mode
[   83.140719][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.152383][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.161823][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.169342][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.176930][ T5825] bridge_slave_1: entered allmulticast mode
[   83.183107][ T5841] Bluetooth: hci3: command tx timeout
[   83.183387][ T5843] Bluetooth: hci4: command tx timeout
[   83.188915][ T5841] Bluetooth: hci0: command tx timeout
[   83.194801][ T5140] Bluetooth: hci1: command tx timeout
[   83.200896][ T5841] Bluetooth: hci2: command tx timeout
[   83.209154][ T5825] bridge_slave_1: entered promiscuous mode
[   83.220780][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.261399][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.358834][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.370853][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.384415][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.439811][ T5826] team0: Port device team_slave_0 added
[   83.485259][ T5828] team0: Port device team_slave_0 added
[   83.493005][ T5819] team0: Port device team_slave_0 added
[   83.502167][ T5822] team0: Port device team_slave_0 added
[   83.510776][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.522845][ T5826] team0: Port device team_slave_1 added
[   83.543555][ T5819] team0: Port device team_slave_1 added
[   83.551362][ T5828] team0: Port device team_slave_1 added
[   83.559196][ T5822] team0: Port device team_slave_1 added
[   83.567849][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.606647][ T5820] team0: Port device team_slave_0 added
[   83.615724][ T5820] team0: Port device team_slave_1 added
[   83.712203][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.719471][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.745586][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.783558][ T5825] team0: Port device team_slave_0 added
[   83.789929][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.797409][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.823884][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.848030][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.855300][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.881864][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.893960][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.900910][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.927313][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.940050][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.947164][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.973358][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.986913][ T5825] team0: Port device team_slave_1 added
[   84.008167][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.016101][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.043581][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.055551][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.062490][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.088910][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.110364][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.117644][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.143855][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.155777][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.162758][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.194018][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.249162][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.256620][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.283079][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.368650][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.375877][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.410060][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.423696][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.430723][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.456940][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.508051][ T5819] hsr_slave_0: entered promiscuous mode
[   84.515200][ T5819] hsr_slave_1: entered promiscuous mode
[   84.573679][ T5828] hsr_slave_0: entered promiscuous mode
[   84.580416][ T5828] hsr_slave_1: entered promiscuous mode
[   84.586913][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   84.592727][ T5828] Cannot create hsr debugfs directory
[   84.641853][ T5826] hsr_slave_0: entered promiscuous mode
[   84.648683][ T5826] hsr_slave_1: entered promiscuous mode
[   84.655157][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   84.660881][ T5826] Cannot create hsr debugfs directory
[   84.695351][ T5820] hsr_slave_0: entered promiscuous mode
[   84.702049][ T5820] hsr_slave_1: entered promiscuous mode
[   84.708663][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   84.714729][ T5820] Cannot create hsr debugfs directory
[   84.727772][ T5822] hsr_slave_0: entered promiscuous mode
[   84.734392][ T5822] hsr_slave_1: entered promiscuous mode
[   84.740653][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   84.746441][ T5822] Cannot create hsr debugfs directory
[   84.850495][ T5825] hsr_slave_0: entered promiscuous mode
[   84.857411][ T5825] hsr_slave_1: entered promiscuous mode
[   84.864655][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   84.870383][ T5825] Cannot create hsr debugfs directory
[   85.173229][ T5841] Bluetooth: hci5: command tx timeout
[   85.253444][ T5841] Bluetooth: hci2: command tx timeout
[   85.258889][ T5841] Bluetooth: hci4: command tx timeout
[   85.264402][ T5831] Bluetooth: hci1: command tx timeout
[   85.264897][ T5843] Bluetooth: hci0: command tx timeout
[   85.269823][ T5831] Bluetooth: hci3: command tx timeout
[   85.603936][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.618396][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.629896][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.651321][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.714634][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.735748][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.748131][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.761295][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.855478][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.874944][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.888163][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.899941][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.994896][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   86.007647][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   86.018721][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   86.030441][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.105666][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.138099][   T29] cfg80211: failed to load regulatory.db
[   86.190105][ T5825] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   86.206763][ T5825] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   86.236875][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   86.244509][ T5825] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   86.277145][ T5825] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   86.350438][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.357899][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.412184][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.419460][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.431909][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.460998][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   86.475341][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   86.487285][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   86.510996][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   86.547591][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.619009][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   86.656572][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   86.682512][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.689705][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.699605][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.706853][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.733840][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.741002][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.800887][  T129] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.808093][  T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.887117][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.931286][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.961377][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   87.001097][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.008279][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.038713][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   87.057705][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.064925][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.131973][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.139206][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.166260][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.173472][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.228322][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.263049][ T5831] Bluetooth: hci5: command tx timeout
[   87.302572][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.335269][ T5831] Bluetooth: hci3: command tx timeout
[   87.340712][ T5831] Bluetooth: hci4: command tx timeout
[   87.346228][ T5841] Bluetooth: hci0: command tx timeout
[   87.346276][   T51] Bluetooth: hci2: command tx timeout
[   87.359636][ T5843] Bluetooth: hci1: command tx timeout
[   87.411686][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   87.507568][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.514775][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.547527][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.567680][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.574956][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.715661][ T5819] veth0_vlan: entered promiscuous mode
[   87.757641][ T5819] veth1_vlan: entered promiscuous mode
[   87.767416][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.865786][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.953147][ T5819] veth0_macvtap: entered promiscuous mode
[   87.975093][ T5820] veth0_vlan: entered promiscuous mode
[   87.988262][ T5819] veth1_macvtap: entered promiscuous mode
[   88.011654][ T5820] veth1_vlan: entered promiscuous mode
[   88.052594][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.110524][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.137036][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.166708][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.228476][ T5820] veth0_macvtap: entered promiscuous mode
[   88.253316][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.264937][   T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.299343][   T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.339158][ T5820] veth1_macvtap: entered promiscuous mode
[   88.366282][   T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.507879][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.540066][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.550722][ T5822] veth0_vlan: entered promiscuous mode
[   88.617121][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.656820][ T5822] veth1_vlan: entered promiscuous mode
[   88.683911][   T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.702619][ T5826] veth0_vlan: entered promiscuous mode
[   88.722797][   T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.732568][   T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.746042][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.765624][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.766746][   T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.832481][ T5826] veth1_vlan: entered promiscuous mode
[   88.880939][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.886380][ T5822] veth0_macvtap: entered promiscuous mode
[   88.890419][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.970161][ T5822] veth1_macvtap: entered promiscuous mode
[   88.984471][ T5825] veth0_vlan: entered promiscuous mode
[   88.993899][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.999841][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.027359][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.039358][ T5828] veth0_vlan: entered promiscuous mode
[   89.058044][ T5825] veth1_vlan: entered promiscuous mode
[   89.128663][ T5828] veth1_vlan: entered promiscuous mode
[   89.169502][ T5826] veth0_macvtap: entered promiscuous mode
[   89.184843][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.192698][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.204104][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.220557][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.249815][ T5826] veth1_macvtap: entered promiscuous mode
[   89.298410][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.324954][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.335160][ T5843] Bluetooth: hci5: command tx timeout
[   89.350681][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.372790][ T5825] veth0_macvtap: entered promiscuous mode
[   89.383172][ T5828] veth0_macvtap: entered promiscuous mode
[   89.389728][ T5971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7'.
[   89.395318][ T5828] veth1_macvtap: entered promiscuous mode
[   89.413314][ T5843] Bluetooth: hci4: command tx timeout
[   89.418798][ T5140] Bluetooth: hci3: command tx timeout
[   89.425063][ T5831] Bluetooth: hci1: command tx timeout
[   89.425102][ T5831] Bluetooth: hci2: command tx timeout
[   89.434026][ T5971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7'.
[   89.439590][   T51] Bluetooth: hci0: command tx timeout
[   89.464309][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.486908][ T5825] veth1_macvtap: entered promiscuous mode
[   89.550466][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.611327][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.656541][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.725520][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.742236][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.787131][   T83] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.802792][   T83] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.887897][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.901393][   T83] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.212280][   T83] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.287935][   T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.444010][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.475797][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.506143][   T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.527694][   T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.620036][   T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.653072][   T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.714663][   T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.733032][   T83] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.774742][   T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.808249][  T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.843126][  T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.858200][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.895822][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.988291][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.027292][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.168513][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.196636][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.279375][  T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.303873][  T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.361744][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.386760][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.480999][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.506232][ T5985] loop0: detected capacity change from 0 to 32768
[   91.512333][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.734635][ T5985] read_mapping_page failed!
[   93.743063][ T5985] jfs_mount: dbMount failed w/rc = -5
[   93.749030][ T5985] Mount JFS Failure: -5
[   93.875535][ T5985] jfs_mount failed w/return code = -5
[   95.499139][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'.
[   95.578515][ T6009] process 'syz.0.15' launched '/dev/fd/4/./file0' with NULL argv: empty string added
[   95.765355][ T6013] kernel profiling enabled (shift: 9)
[   95.773478][ T6013] loop1: detected capacity change from 0 to 512
[   96.074090][ T6013] EXT4-fs (loop1): orphan cleanup on readonly fs
[   96.124271][ T6013] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   96.153522][ T6013] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   96.161549][ T6013] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   96.180019][ T6013] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   96.183060][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   96.198964][    C1] EXT4-fs (loop1): last error at time 1774485789: ext4_ext_check_inode:521: inode 13
[   96.217309][ T6013] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2: couldn't read orphan inode 13 (err -117)
[   96.229174][ T6013] loop1: lost filesystem error report for type 5 error -117
[   96.239061][ T6015] netlink: 144 bytes leftover after parsing attributes in process `syz.0.15'.
[   96.246566][ T6013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   96.773415][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16'.
[   96.800510][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.907056][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16'.
[   97.211394][  T791] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   97.435592][  T791] usb 4-1: Using ep0 maxpacket: 16
[   97.697722][  T791] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[   97.780507][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.923086][  T791] usb 4-1: Product: syz
[   97.929518][  T791] usb 4-1: Manufacturer: syz
[   97.972528][  T791] usb 4-1: SerialNumber: syz
[   98.000372][  T791] usb 4-1: config 0 descriptor??
[   98.076615][  T791] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   98.137259][  T791] usb 4-1: Detected FT-X
[   98.287768][  T791] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   98.365835][  T791] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   98.396325][  T791] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[   98.456558][  T791] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   98.509962][ T6037] loop4: detected capacity change from 0 to 256
[   98.529063][  T791] usb 4-1: USB disconnect, device number 2
[   98.538300][ T6037] =======================================================
[   98.538300][ T6037] WARNING: The mand mount option has been deprecated and
[   98.538300][ T6037]          and is ignored by this kernel. Remove the mand
[   98.538300][ T6037]          option from the mount to silence this warning.
[   98.538300][ T6037] =======================================================
[   99.086808][  T791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   99.094658][ T6037] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[   99.120495][  T791] ftdi_sio 4-1:0.0: device disconnected
[  100.383356][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.745251][ T6043] loop0: detected capacity change from 0 to 131072
[  100.752734][ T6043] xfs: Deprecated parameter 'ikeep'
[  100.757989][ T6043] XFS: ikeep mount option is deprecated.
[  100.826230][ T6047] loop1: detected capacity change from 0 to 256
[  100.850852][ T6043] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  100.882116][ T6054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28'.
[  100.921350][ T6043] XFS (loop0): Starting recovery (logdev: internal)
[  100.935684][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  100.955654][ T6043] XFS (loop0): Ending recovery (logdev: internal)
[  101.030067][ T6043] Zero length message leads to an empty skb
[  101.735264][   T10] usb 6-1: Using ep0 maxpacket: 32
[  101.777116][   T10] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  102.499580][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.518276][   T10] usb 6-1: config 0 has no interface number 0
[  102.527110][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  102.539278][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.547593][   T10] usb 6-1: Product: syz
[  102.551766][   T10] usb 6-1: Manufacturer: syz
[  102.556774][   T10] usb 6-1: SerialNumber: syz
[  102.566295][   T10] usb 6-1: config 0 descriptor??
[  102.687693][ T5820] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  102.750592][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'.
[  102.994827][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.31'.
[  103.765492][ T6077] loop0: detected capacity change from 0 to 512
[  103.829426][ T6077] EXT4-fs (loop0): orphan cleanup on readonly fs
[  103.843489][ T6077] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  103.863998][ T6077] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  103.875051][ T6077] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.30: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  103.892813][ T6077] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  103.892928][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  103.908570][    C1] EXT4-fs (loop0): last error at time 1774485796: ext4_ext_check_inode:521: inode 13
[  103.937932][ T6077] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.30: couldn't read orphan inode 13 (err -117)
[  103.949772][ T6077] loop0: lost filesystem error report for type 5 error -117
[  103.952437][ T6077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.125208][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.226190][  T976] usb 6-1: USB disconnect, device number 2
[  104.767371][ T6094] loop1: detected capacity change from 0 to 40427
[  104.785658][ T6094] F2FS-fs (loop1): invalid crc value
[  104.889825][ T6094] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  104.901480][ T6094] F2FS-fs (loop1): Start checkpoint disabled!
[  104.919554][ T6094] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  104.928412][ T6094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  105.303398][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'.
[  106.232970][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  106.293689][   T51] Bluetooth: hci4: command 0x2016 tx timeout
[  106.392942][ T5917] usb 6-1: Using ep0 maxpacket: 32
[  106.406403][ T5917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.452686][ T6119] loop4: detected capacity change from 0 to 512
[  106.482961][ T5917] usb 6-1: config 0 has no interfaces?
[  106.483557][ T6119] EXT4-fs (loop4): orphan cleanup on readonly fs
[  106.503956][ T6119] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  106.523003][ T5917] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  106.556507][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.565260][ T6119] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  106.575201][ T6119] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.48: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  106.593131][ T6119] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  106.602972][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  106.618636][    C1] EXT4-fs (loop4): last error at time 1774485799: ext4_ext_check_inode:521: inode 13
[  106.629591][ T6119] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.48: couldn't read orphan inode 13 (err -117)
[  106.643578][ T6119] loop4: lost filesystem error report for type 5 error -117
[  106.656701][ T6119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.676530][ T5917] usb 6-1: config 0 descriptor??
[  107.342730][ T5917] usb 6-1: USB disconnect, device number 3
[  107.435719][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.472939][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  108.662015][ T5140] Bluetooth: hci4: command 0x2016 tx timeout
[  110.168050][ T6144] loop3: detected capacity change from 0 to 40427
[  110.188682][ T6144] F2FS-fs (loop3): invalid crc value
[  110.271109][ T6144] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  110.283631][ T6144] F2FS-fs (loop3): Start checkpoint disabled!
[  110.305799][ T6144] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  110.319957][ T6144] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  110.814223][ T6147] dummy0: entered allmulticast mode
[  110.820397][ T6145] dummy0: left allmulticast mode
[  110.925811][ T6154] loop1: detected capacity change from 0 to 256
[  110.965693][ T6157] netlink: 108 bytes leftover after parsing attributes in process `syz.4.61'.
[  111.018771][ T6157] 9p: Bad value for 'wfdno'
[  111.186590][ T5917] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  111.404125][ T5917] usb 6-1: Using ep0 maxpacket: 32
[  111.455146][ T5917] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  111.498450][ T5917] usb 6-1: config 0 has no interface number 0
[  111.556244][ T5917] usb 6-1: config 0 interface 12 has no altsetting 0
[  111.604510][ T5917] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  111.659771][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.703712][ T5917] usb 6-1: Product: syz
[  111.773583][ T5917] usb 6-1: Manufacturer: syz
[  111.778245][ T5917] usb 6-1: SerialNumber: syz
[  111.856873][ T5917] usb 6-1: config 0 descriptor??
[  112.035127][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.421750][ T6176] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[  112.911661][ T5917] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  112.980548][ T6175] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.002426][ T5917] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  113.048537][ T6176] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.218748][ T5917] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  113.249499][ T5917] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  113.313137][ T5917] usb 6-1: USB disconnect, device number 4
[  113.833090][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'.
[  114.826938][ T6006] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  114.898389][ T6216] loop5: detected capacity change from 0 to 256
[  114.944311][ T6217] netlink: 108 bytes leftover after parsing attributes in process `syz.1.76'.
[  115.014342][ T6006] usb 4-1: Using ep0 maxpacket: 32
[  115.052159][ T6006] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  115.088422][ T6006] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.089194][ T6217] 9p: Bad value for 'wfdno'
[  115.162934][ T6006] usb 4-1: config 0 has no interface number 0
[  115.169141][ T6006] usb 4-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  115.232743][ T6006] usb 4-1: config 0 interface 89 has no altsetting 0
[  115.289133][ T6006] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  115.500465][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.586841][ T6227] netlink: 'syz.5.79': attribute type 10 has an invalid length.
[  116.177312][ T6006] usb 4-1: Product: syz
[  116.203080][ T6006] usb 4-1: Manufacturer: syz
[  116.207715][ T6006] usb 4-1: SerialNumber: syz
[  116.256244][ T6006] usb 4-1: config 0 descriptor??
[  116.340948][ T6227] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  117.783018][  T791] usb 4-1: USB disconnect, device number 3
[  118.009120][ T6263] netlink: 144 bytes leftover after parsing attributes in process `syz.0.89'.
[  118.558261][ T6265] loop4: detected capacity change from 0 to 256
[  119.895646][ T6282] netlink: 108 bytes leftover after parsing attributes in process `syz.4.96'.
[  119.907210][ T6282] 9p: Bad value for 'wfdno'
[  120.364265][ T6029] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  120.452374][ T6293] netlink: 'syz.1.98': attribute type 10 has an invalid length.
[  121.153285][ T6029] usb 4-1: Using ep0 maxpacket: 32
[  121.689319][ T6029] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  121.769147][ T6029] usb 4-1: config 0 has no interface number 0
[  121.943033][ T6029] usb 4-1: config 0 interface 12 has no altsetting 0
[  121.965330][ T6029] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  122.039341][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.091298][ T6029] usb 4-1: Product: syz
[  122.112282][ T6029] usb 4-1: Manufacturer: syz
[  122.137431][ T6029] usb 4-1: SerialNumber: syz
[  122.166253][ T6029] usb 4-1: config 0 descriptor??
[  122.177574][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'.
[  122.423714][  T791] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.564795][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[  122.593076][  T791] usb 5-1: Using ep0 maxpacket: 32
[  122.628441][ T6029] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  122.640935][  T791] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  122.655760][ T6029] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  122.669349][  T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.685644][ T6311] loop0: detected capacity change from 0 to 256
[  122.692239][ T6029] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  122.701240][  T791] usb 5-1: config 0 has no interface number 0
[  122.710201][ T6029] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  122.723420][  T791] usb 5-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.785224][ T6029] usb 4-1: USB disconnect, device number 4
[  122.793354][  T791] usb 5-1: config 0 interface 89 has no altsetting 0
[  122.830952][  T791] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  122.867219][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.902246][  T791] usb 5-1: Product: syz
[  122.914994][  T791] usb 5-1: Manufacturer: syz
[  122.923610][  T791] usb 5-1: SerialNumber: syz
[  122.949349][  T791] usb 5-1: config 0 descriptor??
[  123.263055][  T976] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  123.416246][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.2.112'.
[  123.545740][ T6326] 9p: Bad value for 'wfdno'
[  123.552963][  T976] usb 1-1: Using ep0 maxpacket: 32
[  123.564773][  T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.594856][  T976] usb 1-1: config 0 has no interfaces?
[  123.617726][  T976] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  123.653624][  T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.748657][  T976] usb 1-1: config 0 descriptor??
[  124.346841][ T5917] usb 1-1: USB disconnect, device number 2
[  124.412790][ T6338] loop5: detected capacity change from 0 to 512
[  124.429361][ T6338] EXT4-fs (loop5): orphan cleanup on readonly fs
[  124.436840][ T6338] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  124.453398][ T6338] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  124.460342][ T6338] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #13: comm syz.5.116: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  124.478165][ T6338] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  124.483113][ T6338] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.116: couldn't read orphan inode 13 (err -117)
[  124.504018][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  124.504052][    C1] EXT4-fs (loop5): last error at time 1774485817: ext4_ext_check_inode:521: inode 13
[  124.520187][ T6338] loop5: lost filesystem error report for type 5 error -117
[  124.523367][ T6338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.716377][ T5825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.224655][ T6029] usb 5-1: USB disconnect, device number 2
[  125.496492][ T6359] loop4: detected capacity change from 0 to 256
[  126.237301][ T6364] syzkaller0: entered allmulticast mode
[  126.914664][ T6364] syzkaller0 (unregistering): left allmulticast mode
[  127.698443][ T6368] loop4: detected capacity change from 0 to 131072
[  127.705988][ T6368] xfs: Deprecated parameter 'ikeep'
[  127.711176][ T6368] XFS: ikeep mount option is deprecated.
[  127.763179][ T6368] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  127.878602][ T6379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.126'.
[  127.961996][ T6368] XFS (loop4): Starting recovery (logdev: internal)
[  127.982467][ T6379] 9p: Bad value for 'wfdno'
[  128.016690][ T6368] XFS (loop4): Ending recovery (logdev: internal)
[  128.954603][ T5826] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  129.825374][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'.
[  130.057566][ T6408] loop2: detected capacity change from 0 to 256
[  132.468775][ T6429] loop2: detected capacity change from 0 to 131072
[  132.476318][ T6429] xfs: Deprecated parameter 'ikeep'
[  132.481521][ T6429] XFS: ikeep mount option is deprecated.
[  132.503683][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.510251][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.584838][ T6429] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  132.714456][ T6429] XFS (loop2): Starting recovery (logdev: internal)
[  132.742097][ T6429] XFS (loop2): Ending recovery (logdev: internal)
[  132.783173][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'.
[  133.574112][ T6445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'.
[  133.711506][ T6453] loop4: detected capacity change from 0 to 512
[  133.764558][ T6453] EXT4-fs (loop4): orphan cleanup on readonly fs
[  133.773035][ T6453] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  133.789699][ T6453] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  133.798092][ T6453] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.130: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  133.815939][ T6453] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  133.817235][ T6453] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.130: couldn't read orphan inode 13 (err -117)
[  133.826425][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  133.826455][    C1] EXT4-fs (loop4): last error at time 1774485826: ext4_ext_check_inode:521: inode 13
[  133.856510][ T6453] loop4: lost filesystem error report for type 5 error -117
[  133.861309][ T6453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  133.936056][ T5819] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  134.010501][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.197206][ T6456] netlink: 5 bytes leftover after parsing attributes in process `syz.0.151'.
[  135.842386][ T6461] loop3: detected capacity change from 0 to 256
[  137.013611][ T6491] overlayfs: failed to resolve './file0': -2
[  138.019402][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.165'.
[  138.058387][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.165'.
[  138.297130][ T6499] loop4: detected capacity change from 0 to 512
[  138.316525][ T6499] EXT4-fs (loop4): orphan cleanup on readonly fs
[  138.317188][ T6504] netlink: 108 bytes leftover after parsing attributes in process `syz.0.169'.
[  138.324923][ T6499] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  138.363014][ T6499] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  138.370265][ T6499] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.166: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  138.389092][ T6499] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  138.389597][ T6499] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.166: couldn't read orphan inode 13 (err -117)
[  138.398819][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  138.398843][    C1] EXT4-fs (loop4): last error at time 1774485831: ext4_ext_check_inode:521: inode 13
[  138.427105][ T6499] loop4: lost filesystem error report for type 5 error -117
[  138.429500][ T6499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.437590][ T6504] 9p: Bad value for 'wfdno'
[  138.783159][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  140.188795][ T5826] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.303245][ T6513] loop3: detected capacity change from 0 to 512
[  140.507069][ T6513] EXT4-fs (loop3): orphan cleanup on readonly fs
[  140.515153][ T6513] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  140.531599][ T6513] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  140.539430][ T6513] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.168: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  140.557677][ T6513] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  140.562911][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  140.578602][    C1] EXT4-fs (loop3): last error at time 1774485833: ext4_ext_check_inode:521: inode 13
[  140.588601][ T6513] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.168: couldn't read orphan inode 13 (err -117)
[  140.602045][ T6513] loop3: lost filesystem error report for type 5 error -117
[  140.607091][ T6513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.631130][ T6552] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  145.135506][ T6559] netlink: 108 bytes leftover after parsing attributes in process `syz.0.186'.
[  146.463227][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  146.886202][ T6559] 9p: Bad value for 'wfdno'
[  147.165271][ T5822] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.505880][ T6567] loop0: detected capacity change from 0 to 512
[  148.158755][ T6567] EXT4-fs (loop0): orphan cleanup on readonly fs
[  148.166530][ T6567] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  148.166551][ T6569] loop3: detected capacity change from 0 to 1024
[  148.191175][ T6567] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  148.198421][ T6567] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  148.219505][ T6567] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  148.220284][ T6567] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.188: couldn't read orphan inode 13 (err -117)
[  148.229472][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  148.229498][    C1] EXT4-fs (loop0): last error at time 1774485841: ext4_ext_check_inode:521: inode 13
[  148.257962][ T6567] loop0: lost filesystem error report for type 5 error -117
[  148.273524][ T6567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  148.551378][ T5820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.574606][ T6572] loop5: detected capacity change from 0 to 256
[  149.023515][ T6575] loop0: detected capacity change from 0 to 764
[  149.515536][   T30] audit: type=1326 audit(1774485842.053:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.0.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f487719c799 code=0x0
[  150.487573][   T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  152.332316][ T6606] netlink: 108 bytes leftover after parsing attributes in process `syz.4.200'.
[  152.443925][ T6606] 9p: Bad value for 'wfdno'
[  152.482364][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.492815][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  152.512299][   T24] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  152.541961][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  152.562272][   T24] usb 3-1: Product: syz
[  152.605459][   T24] usb 3-1: Manufacturer: syz
[  152.627600][   T24] usb 3-1: SerialNumber: syz
[  152.690275][   T24] usb 3-1: config 0 descriptor??
[  152.754361][   T24] radio-si470x 3-1:0.0: could not find interrupt in endpoint
[  152.773096][   T24] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  152.784211][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  152.955642][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[  152.965041][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[  153.019592][  T791] usb 3-1: USB disconnect, device number 2
[  155.573190][   T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  155.654665][ T6639] netlink: 108 bytes leftover after parsing attributes in process `syz.0.214'.
[  155.696732][ T6639] 9p: Bad value for 'wfdno'
[  155.786481][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.816092][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  155.857197][   T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  155.882112][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  155.930970][   T10] usb 2-1: Product: syz
[  155.935740][   T10] usb 2-1: Manufacturer: syz
[  155.951799][   T10] usb 2-1: SerialNumber: syz
[  156.024514][   T10] usb 2-1: config 0 descriptor??
[  156.143651][   T10] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[  156.193023][   T10] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  156.247450][   T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  156.613469][   T10] usb 2-1: USB disconnect, device number 2
[  158.292964][  T791] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  158.939873][ T6674] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  159.098006][   T51] Bluetooth: hci5: unexpected event 0x06 length: 4 > 3
[  159.106628][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.128006][  T791] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  159.152420][  T791] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  159.172622][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  159.204376][  T791] usb 1-1: Product: syz
[  159.218415][  T791] usb 1-1: Manufacturer: syz
[  159.238239][  T791] usb 1-1: SerialNumber: syz
[  159.272778][  T791] usb 1-1: config 0 descriptor??
[  159.296511][ T6681] netlink: 108 bytes leftover after parsing attributes in process `syz.3.228'.
[  159.301534][  T791] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  159.340634][  T791] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  159.383829][ T6681] 9p: Bad value for 'wfdno'
[  159.395489][  T791] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  159.531853][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'.
[  159.578508][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'.
[  159.636681][  T791] usb 1-1: USB disconnect, device number 3
[  161.123150][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  161.624371][ T5140] Bluetooth: hci5: command 0x2016 tx timeout
[  161.633083][ T5140] ------------[ cut here ]------------
[  161.638731][ T5140] refcnt < 0
[  161.638749][ T5140] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:1/5140
[  161.652561][ T5140] Modules linked in:
[  161.657227][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  161.666944][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  161.677249][ T5140] Workqueue: hci5 hci_conn_timeout
[  161.682393][ T5140] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  161.688010][ T5140] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 2c d6 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 12 d6 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  161.707697][ T5140] RSP: 0018:ffffc900105afab0 EFLAGS: 00010293
[  161.713878][ T5140] RAX: ffffffff8aa1cc1e RBX: ffff888032268000 RCX: ffff888036e58000
[  161.722467][ T5140] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  161.731898][ T5140] RBP: 00000000ffffffff R08: ffff888032268013 R09: 1ffff1100644d002
[  161.742017][ T5140] R10: dffffc0000000000 R11: ffffed100644d003 R12: dffffc0000000000
[  161.750524][ T5140] R13: ffff8880363ebb18 R14: ffff888032268a40 R15: ffff888032268010
[  161.758989][ T5140] FS:  0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000
[  161.768425][ T5140] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  161.775365][ T5140] CR2: 00007f133371587c CR3: 000000007d7b3000 CR4: 0000000000350ef0
[  161.783425][ T5140] Call Trace:
[  161.786718][ T5140]  <TASK>
[  161.789660][ T5140]  ? process_scheduled_works+0xa8d/0x18c0
[  161.795473][ T5140]  process_scheduled_works+0xb6e/0x18c0
[  161.801097][ T5140]  ? __pfx_process_scheduled_works+0x10/0x10
[  161.807290][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.813015][ T5140]  ? assign_work+0x3d5/0x5e0
[  161.817656][ T5140]  worker_thread+0xa53/0xfc0
[  161.822288][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.828607][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.834398][ T5140]  kthread+0x388/0x470
[  161.838494][ T5140]  ? __pfx_worker_thread+0x10/0x10
[  161.843716][ T5140]  ? __pfx_kthread+0x10/0x10
[  161.848349][ T5140]  ret_from_fork+0x51e/0xb90
[  161.853040][ T5140]  ? __pfx_ret_from_fork+0x10/0x10
[  161.858226][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.863972][ T5140]  ? __switch_to+0xc7d/0x1450
[  161.868681][ T5140]  ? __pfx_kthread+0x10/0x10
[  161.873331][ T5140]  ret_from_fork_asm+0x1a/0x30
[  161.878139][ T5140]  </TASK>
[  161.881159][ T5140] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  161.888455][ T5140] CPU: 1 UID: 0 PID: 5140 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  161.897933][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  161.908015][ T5140] Workqueue: hci5 hci_conn_timeout
[  161.913165][ T5140] Call Trace:
[  161.916449][ T5140]  <TASK>
[  161.919379][ T5140]  vpanic+0x56c/0xa60
[  161.923382][ T5140]  ? __pfx__printk+0x10/0x10
[  161.928547][ T5140]  ? __pfx_vpanic+0x10/0x10
[  161.933066][ T5140]  ? is_bpf_text_address+0x292/0x2b0
[  161.938459][ T5140]  ? is_bpf_text_address+0x26/0x2b0
[  161.943686][ T5140]  panic+0xc5/0xd0
[  161.947427][ T5140]  ? __pfx_panic+0x10/0x10
[  161.951870][ T5140]  ? ret_from_fork_asm+0x1a/0x30
[  161.956846][ T5140]  __warn+0x315/0x4f0
[  161.960843][ T5140]  ? hci_conn_timeout+0xff/0x2c0
[  161.965876][ T5140]  ? hci_conn_timeout+0xff/0x2c0
[  161.970816][ T5140]  __report_bug+0x29a/0x540
[  161.975328][ T5140]  ? __pfx_stack_trace_save+0x10/0x10
[  161.980708][ T5140]  ? hci_conn_timeout+0xff/0x2c0
[  161.985651][ T5140]  ? __pfx___report_bug+0x10/0x10
[  161.990681][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  161.996316][ T5140]  ? add_lock_to_list+0xc7/0x100
[  162.001267][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.006904][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.012537][ T5140]  ? __lock_acquire+0x146e/0x2cf0
[  162.017574][ T5140]  ? hci_conn_timeout+0xff/0x2c0
[  162.022513][ T5140]  report_bug+0x16a/0x220
[  162.026850][ T5140]  ? hci_conn_timeout+0xff/0x2c0
[  162.031786][ T5140]  ? hci_conn_timeout+0x101/0x2c0
[  162.036835][ T5140]  handle_bug+0x9c/0x200
[  162.041430][ T5140]  exc_invalid_op+0x1a/0x50
[  162.046199][ T5140]  asm_exc_invalid_op+0x1a/0x20
[  162.051217][ T5140] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  162.056754][ T5140] Code: 48 89 df e8 c3 98 09 00 eb 07 e8 2c d6 23 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 97 a8 fe ff e8 12 d6 23 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  162.076442][ T5140] RSP: 0018:ffffc900105afab0 EFLAGS: 00010293
[  162.082511][ T5140] RAX: ffffffff8aa1cc1e RBX: ffff888032268000 RCX: ffff888036e58000
[  162.090479][ T5140] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  162.098445][ T5140] RBP: 00000000ffffffff R08: ffff888032268013 R09: 1ffff1100644d002
[  162.106499][ T5140] R10: dffffc0000000000 R11: ffffed100644d003 R12: dffffc0000000000
[  162.114464][ T5140] R13: ffff8880363ebb18 R14: ffff888032268a40 R15: ffff888032268010
[  162.122439][ T5140]  ? hci_conn_timeout+0xfe/0x2c0
[  162.127388][ T5140]  ? process_scheduled_works+0xa8d/0x18c0
[  162.133132][ T5140]  process_scheduled_works+0xb6e/0x18c0
[  162.138730][ T5140]  ? __pfx_process_scheduled_works+0x10/0x10
[  162.144727][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.150388][ T5140]  ? assign_work+0x3d5/0x5e0
[  162.154993][ T5140]  worker_thread+0xa53/0xfc0
[  162.159593][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.165242][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.170895][ T5140]  kthread+0x388/0x470
[  162.174963][ T5140]  ? __pfx_worker_thread+0x10/0x10
[  162.180081][ T5140]  ? __pfx_kthread+0x10/0x10
[  162.184668][ T5140]  ret_from_fork+0x51e/0xb90
[  162.189274][ T5140]  ? __pfx_ret_from_fork+0x10/0x10
[  162.194385][ T5140]  ? srso_alias_return_thunk+0x5/0xfbef5
[  162.200018][ T5140]  ? __switch_to+0xc7d/0x1450
[  162.204699][ T5140]  ? __pfx_kthread+0x10/0x10
[  162.209308][ T5140]  ret_from_fork_asm+0x1a/0x30
[  162.214101][ T5140]  </TASK>
[  162.217398][ T5140] Kernel Offset: disabled
[  162.221715][ T5140] Rebooting in 86400 seconds..