last executing test programs:

32m34.798377363s ago: executing program 4 (id=255):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x26243, 0x103)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x4542, 0x1ba)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32m33.389451773s ago: executing program 4 (id=261):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

32m30.936139616s ago: executing program 4 (id=269):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040)=0x2, 0x4)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

32m29.687357529s ago: executing program 4 (id=274):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$alg(0x26, 0x5, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020)

32m28.788195755s ago: executing program 4 (id=277):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1403, 0x0)
unshare(0x22020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00')
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x0)

32m25.756225653s ago: executing program 4 (id=282):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000100))
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @start={0x2}})

32m24.555292297s ago: executing program 32 (id=282):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000000)=0x1, 0x7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000100))
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @start={0x2}})

19m31.22517793s ago: executing program 5 (id=2057):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000)
getsockname$packet(r1, 0x0, &(0x7f0000000340))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000)

19m28.740604174s ago: executing program 5 (id=2060):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x4004551e, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

19m26.25362314s ago: executing program 5 (id=2064):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500"], 0x70}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0)

19m24.954461597s ago: executing program 5 (id=2065):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4000000000, 0x82)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)
r4 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x2400c049, &(0x7f00000001c0)={0xa, 0x4e20, 0x18000000, @loopback, 0x800}, 0x1c)
sendto$inet6(r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0xf}, {{&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=""/219, 0xdb}, 0x9}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0xfffffff7}], 0x3, 0x2, 0x0)
syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRES8=r0, @ANYRES64=r4], 0x15)
r6 = dup(r2)
write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
creat(&(0x7f00000003c0)='./file0\x00', 0x197)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

19m21.812347663s ago: executing program 5 (id=2072):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = gettid()
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r4 = fcntl$dupfd(r2, 0x406, r2)
bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r3, 0x2, {0x0, 0xff}, 0xfe}, 0x18)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x1, 0xfffffffffffffffc, 0x0, 0x4})
r5 = socket(0xa, 0x3, 0x3a)
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, {0x1fffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000040)=0xb4a576444e33d728, 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

19m18.744226895s ago: executing program 5 (id=2080):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x0, 0x0, 0x9})
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000229f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x5, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
listen(r5, 0x80)
r6 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r6, 0x3a5)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0xffffd6c0, r2}, 0x38)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}]}}}]}, 0x3c}}, 0x4000000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'r\x00\x00\a', 0x5, 0x5, 0x2, 0x207be, 0x0, "eccb132df52031a1de0480161000", "0200001a", "0400", '\x00', ["8bbb00fda8e45cfe00000900", "ab528617aa00000000387716", '\x00', "000b000000010000401000"]})

19m1.955433972s ago: executing program 33 (id=2080):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x10002, 0x0, 0x0, 0x9})
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000229f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x5, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
listen(r5, 0x80)
r6 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r6, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
listen(r6, 0x3a5)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140), 0xffffd6c0, r2}, 0x38)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x2}]}}}]}, 0x3c}}, 0x4000000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={'r\x00\x00\a', 0x5, 0x5, 0x2, 0x207be, 0x0, "eccb132df52031a1de0480161000", "0200001a", "0400", '\x00', ["8bbb00fda8e45cfe00000900", "ab528617aa00000000387716", '\x00', "000b000000010000401000"]})

16m59.477842927s ago: executing program 1 (id=2303):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}})
open(&(0x7f0000000180)='.\x02\x00', 0x1a081, 0x37)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x102)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x21, @remote}, {0x2, 0x4e23, @broadcast}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0x7, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x2800, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}})

16m57.735327534s ago: executing program 1 (id=2308):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = socket(0xb, 0x1, 0x2)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f00000000c0)={0x0, 0x0}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007340), 0x0, 0x2042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
recvmmsg(r0, &(0x7f0000000940), 0x0, 0x40000000, 0x0)
r3 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0xffffffffffffffff, 0x20000000)

16m49.676783229s ago: executing program 1 (id=2320):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

16m47.68625913s ago: executing program 1 (id=2323):
r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800009c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x3, 0x0, [{0x4000, 0xa4, &(0x7f0000000400)=""/164}, {0xf000, 0x46, &(0x7f0000000100)=""/70}, {0x4, 0x1b, &(0x7f00000001c0)=""/27}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102400, 0x19000)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5453, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300"], 0x5c}}, 0x20000000)
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x44084)

16m46.484105737s ago: executing program 1 (id=2325):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0x2284, &(0x7f00000000c0)={0x0, 0x2083, 0x0, 0x0})
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

16m45.500457503s ago: executing program 1 (id=2327):
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400)=0xfffffffe, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

16m29.696318004s ago: executing program 34 (id=2327):
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000400)=0xfffffffe, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)

8m37.132103444s ago: executing program 3 (id=3111):
r0 = syz_socket_connect_nvme_tcp()
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x1, 0x0, 0x0, {0x4e22}}}, 0x4c}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2={0x1f, 0x3ff, @any, 0x400, 0x1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x2}}, @can, 0xfff8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

8m32.16555223s ago: executing program 3 (id=3120):
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001740)=@multiplanar_fd={0x33b114d4, 0x4, 0x4, 0x1002, 0x6, {0x0, 0x2710}, {0x1, 0xd, 0x7, 0x0, 0x8, 0x8, "79e0ce6d"}, 0x81, 0x4, {&(0x7f0000001600)=[{0x35, 0xf3, {}, 0x1}, {0x7, 0x8, {}, 0x2}]}, 0x1})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000100000000002000000010000000000001105000000090000000000f42880ef3d48cf50b2b69fb7f579f615b6bf11076b7b83297e711b3c282ce1ecc954042c0cfd71f87b068b00d61f9821c2eb08324e23ffdc863e1608a34d626bcdfa"], 0x0, 0x2a, 0x0, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x20000000008)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001380)=0x22)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2004, @fd, 0x4, 0x20000000, 0x8020, 0x0, 0x0, {0x1}})
r3 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
ftruncate(r4, 0x2007ffb)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5)
sendmsg$NFC_CMD_FW_DOWNLOAD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '[-.'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}}, 0x0)

8m27.976088306s ago: executing program 3 (id=3128):
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2)
syz_open_procfs$namespace(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

8m25.811347491s ago: executing program 3 (id=3130):
r0 = syz_socket_connect_nvme_tcp()
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x12, 0x1, 0x0, 0x0, {0xa, 0x1, 0x0, 0x0, {0x4e22}}}, 0x4c}}, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @l2={0x1f, 0x3ff, @any, 0x400, 0x1}, @tipc=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x2}}, @can, 0xfff8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

8m22.645875032s ago: executing program 3 (id=3139):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendto$inet(r3, &(0x7f00000000c0)="34d5f77ee415d816b1d0fb02a69985bf96f9f6ef3b9e2291e848eb7637a749d789c253bbfa84cdb76e5fdf90567a07c03756b515eb8c847c70d1351d4ad694424d420fe3b7e20de38c874123c7c800c4f153a4f9cfb9547da3", 0x59, 0x4, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

8m14.680375909s ago: executing program 3 (id=3151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)=0x3)
read$dsp(0xffffffffffffffff, &(0x7f0000000040)=""/194, 0xc2)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x6c143, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000000000008, 0x129002)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x774a, 0x2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xffffffb9, 0x1, 0x1c09, 0x31364d59, [0xa8ec, 0x3], [0x1ff, 0x4], 0xfeedcafe}})

7m58.019031709s ago: executing program 35 (id=3151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x536, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6(0xa, 0x2, 0x3a)
bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)=0x3)
read$dsp(0xffffffffffffffff, &(0x7f0000000040)=""/194, 0xc2)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x6c143, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000000000008, 0x129002)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x774a, 0x2)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xffffffb9, 0x1, 0x1c09, 0x31364d59, [0xa8ec, 0x3], [0x1ff, 0x4], 0xfeedcafe}})

7m10.922278326s ago: executing program 0 (id=3241):
syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00')
openat$sysfs(0xffffff9c, 0x0, 0x309080, 0x1)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x143082, 0x0)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
prlimit64(0x0, 0xe, 0x0, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)

7m6.274735551s ago: executing program 0 (id=3252):
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x440a4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
prlimit64(0x0, 0x2, &(0x7f0000000000)={0x40000004000000, 0x800000008000000}, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28)
read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

7m1.792244778s ago: executing program 0 (id=3258):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x4, 0x3010, 0x0, 0x0, 0x4, 0x0, 0x2}})
syz_open_procfs(0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]})
close_range(r6, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0x5c, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x67}, 0x8)
close(0xffffffffffffffff)

7m0.640943063s ago: executing program 0 (id=3262):
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35b", 0x6)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x2000)

6m59.570569755s ago: executing program 0 (id=3265):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)

6m58.154633403s ago: executing program 0 (id=3266):
request_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)='keyring\x00', 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0)
keyctl$link(0x8, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0)
fsopen(&(0x7f0000000380)='pipefs\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xe, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x80000007, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)

6m43.114689613s ago: executing program 36 (id=3266):
request_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)='keyring\x00', 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0)
keyctl$link(0x8, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00')
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0)
fsopen(&(0x7f0000000380)='pipefs\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xe, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x80000007, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r1, 0x1000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)

20.880191336s ago: executing program 6 (id=3915):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)

19.771877969s ago: executing program 7 (id=3919):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)

18.690853201s ago: executing program 6 (id=3922):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
ioctl$TCXONC(r7, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

16.942811711s ago: executing program 8 (id=3923):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r2, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r1, 0xab03)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)

15.962840571s ago: executing program 6 (id=3925):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4000)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}})
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4, 0x0, 0xffffffffffffffff}, 0x18)
r5 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002840)=""/4093, 0x0, 0x1}, 0x94)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

14.487888096s ago: executing program 9 (id=3927):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00')
preadv(r5, &(0x7f0000000180), 0x0, 0x644a, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

14.480467492s ago: executing program 6 (id=3928):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r2, 0x0, 0x481e)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c73697274696f657874656e642c6163638173733d616e792c676b6368653d66736361636865a14a697273696f6e3d3970323030302e75"])
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e000000100000010"], 0x1c)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r3, 0x0)
migrate_pages(0x0, 0x3, 0x0, 0x0)

13.29183766s ago: executing program 7 (id=3930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000580)='mountinfo\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x38, 0x0, 0xfffffffffffffe0d)
mount$bind(&(0x7f0000000380)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000906010800000000000020000200feff0900020073797a310000000008000940000004390500010007000000100008800c000780084cb9a576"], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

13.261830463s ago: executing program 2 (id=3931):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006)
r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
setfsgid(0xee00)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/26)
pipe2$9p(&(0x7f0000000100), 0x80400)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000))
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}})
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/203)

12.862420725s ago: executing program 8 (id=3932):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)

11.293833206s ago: executing program 7 (id=3933):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x64})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0], [0x0, 0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9})
socket$inet6_udplite(0xa, 0x2, 0x88)
ioprio_get$uid(0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, 0x0, 0x24040884)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))

10.799375586s ago: executing program 9 (id=3934):
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}})
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
process_mrelease(0xffffffffffffffff, 0x0)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10)
io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

10.797881165s ago: executing program 2 (id=3935):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000815}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000902"], 0x0, 0x4a}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x70bda87d, 0x77}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xd811}, 0x4000)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r6, r6, 0x0, 0x40008)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd9)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
close_range(r7, 0xffffffffffffffff, 0x0)

8.580588461s ago: executing program 2 (id=3936):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
poll(&(0x7f0000000100)=[{r0, 0x80}], 0x1, 0x7)
r1 = socket(0x10, 0x803, 0x0)
ioperm(0x284, 0x7f, 0xe3)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r2 = gettid()
tkill(r2, 0x12)
io_setup(0x6, &(0x7f0000000040)=<r3=>0x0)
io_pgetevents(r3, 0x3, 0x800000000000046, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x20000000000e]}, 0x8})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r5}, 0x18)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94)
socket(0x2c, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="0a000600080211000000000038005080080003000dac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6)
r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x254500, 0x0)
ioctl$SOUND_MIXER_READ_RECMASK(r12, 0x80044dfd, &(0x7f00000001c0))
ioctl$PPPIOCGDEBUG(r11, 0x80047441, &(0x7f0000000400))
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x173}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4081, 0x564}, {&(0x7f0000000400)=""/106, 0x2f}, {&(0x7f00000006c0)=""/66, 0x12}, {&(0x7f0000000200)=""/77, 0x65f}, {&(0x7f0000000540)=""/166, 0x4a}, {&(0x7f0000000100)=""/10, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}, 0x1}], 0x4000000000003b4, 0x12022, &(0x7f0000000080)={0x77359400})

8.564212468s ago: executing program 9 (id=3937):
r0 = gettid()
prlimit64(r0, 0xe, &(0x7f0000000000)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sigaltstack(&(0x7f0000000240)={&(0x7f0000000540)=""/83, 0x2, 0x53}, &(0x7f0000000440)={&(0x7f00000005c0)=""/77, 0x0, 0x4d})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xb4ed6000)
ftruncate(r2, 0xc254)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0xfff})
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1080, 0x0)
ftruncate(0xffffffffffffffff, 0xffff)
fallocate(0xffffffffffffffff, 0x0, 0x3, 0x1)
lseek(0xffffffffffffffff, 0x5, 0x3)
execve(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)

8.560320155s ago: executing program 6 (id=3938):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

8.190879156s ago: executing program 8 (id=3939):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=<r2=>0x0)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xfe8e, 0x12)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f00000003c0)=@buf)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x44}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32000000001400000011000100"], 0x88}}, 0x0)

5.620636966s ago: executing program 8 (id=3940):
socket$alg(0x26, 0x5, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x28, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xa65c}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
setresuid(0xee01, 0x0, 0x0)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4", 0x20)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000180)="6da0", 0x2, 0x190, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6, @loopback, 0xffffffff}, 0x1c)
shutdown(r3, 0x2)
dup3(r2, r3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4010)
r4 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)

5.619105898s ago: executing program 7 (id=3950):
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10100)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x44d01, 0x0)
r5 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1})
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000", 0x1b)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000340))
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r11, 0xae80, 0x0)
pwrite64(r10, &(0x7f00000006c0)="c6b93185253205abbe027760107486665269ada97f6f021a90726e150bd72a560601053cbb1c2d2ed0baf87bb6a7c709d5899c446f17d608ba67bdd5213f523d9437acaa991a4db5923539ce25e67c590b47f4c332ea81103304b9a47146a5b7f3fcddf0c2a184033587eeeedb5d3db716af79dcd861f1df954904f45cb96cb9111f9523c39276624d4cfec2a6d6df99828f", 0x92, 0x0)
io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029fcdbdf2511000000fd0015d90100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000000)

4.789487479s ago: executing program 6 (id=3941):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
r3 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x0, 0x10fff9)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}})
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$NBD_DO_IT(r3, 0xab03)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0)

4.28183857s ago: executing program 2 (id=3942):
r0 = socket(0x28, 0x5, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x2}, 0x94)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x1})
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x18)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4)
writev(r3, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x84040)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
shutdown(r3, 0x1)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12)

4.277734646s ago: executing program 8 (id=3943):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x900}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
writev(r4, &(0x7f0000000880)=[{0x0}, {&(0x7f00000002c0)="c892f2ec2ad509fa1d4b8a6a65541730fbccbe65f68ab3baf7c970631b07a11a4e98e7c36851c844e95508a981c51854da16f62d0d8459ae0f0e9cb555dab53afb3d4d8898ee5b64103d0906beed8586dfefe71f5158fc55115a2a0f975b2ea06d8c8c46eadb176fed424a4b6ea6db3a2236f99058bba6ef9eaf072bd1216cf344e07d9aeb8c95bd1a62f0124b15492b041281c5c965009bdeaf8605c86e12c261c70e6ea0c2075d30bbeea6c5", 0xad}, {&(0x7f0000000380)="5353608a26e85fdfd9881a1ee9fe66c56ee68d460628c02e6c1ae7e300f28de80c257d3e4419b0f55c921316b4d38cd93b5f9d8e4c95e5", 0x37}, {&(0x7f00000003c0)="e70f222438ea2cd479dade79add6cb9e3df2524cf0b7970ed4025d2d6bd7b6fd12142833a92099ccf270470d8734d4b0a334085b15b087f3d71135bee27f964da46be1b7039322bd7b8b37b5ed9e637b70792525b3c9c582e0951c3147076e000cec7bf4825b0661d44f7fe185b21f3276a7585e51dc59fb17b6ae535cb24e21fae56574e0998bab141811e7acfbed70728396f1923f7314655d3c4190e8dd85a0aa2fa8e76b4aaa5966ff491138dd904ed3572427f4a85bbbf069f9e93b595704c8ea91cb1470668212a75f0926d392910f5988eb46", 0xd6}, {&(0x7f00000006c0)="bba95202b8d6a4aaa9f5e49090f75b0e73c2a3cd38917f627c686b0def0653d1ed2cadec1176ad412d8d8a45b4524c464ba3b7ce27c7fcd1d789859e", 0x3c}, {&(0x7f0000000780)="ab97eee44dd916aaca28d91a5eed5baac399ec4e2d1c7866a1e4911df2db179c694e09a18a31e3e4abadff843ff16b78dc29c6d956453a66bab5ecffdbed1ed27cae1d02fe646e6380f792995d80b36dcbe23e408f16fb363f92b3e22a521ed9d4a19388e7ebfa4512da5c5d1e67b3c9037f50b4b7a0011471b4d2f9ef6ba750a41ac56078835fa11415a6431df583896a0c2efa576377cbf29a8ae9af600959c5b5964ed83ca5f6500bed06e7941315934fbbf6", 0xb4}], 0x6)
shutdown(r4, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
clock_gettime(0x0, &(0x7f0000000380))

3.997788148s ago: executing program 9 (id=3944):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
keyctl$setperm(0x5, 0x0, 0x9290101)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0)
r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
ioctl$TCXONC(r7, 0x4b3a, 0x2)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
unshare(0x26020480)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)

2.420206992s ago: executing program 9 (id=3945):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
socket$inet(0x2, 0x1, 0x100)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="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", 0x50a}, {&(0x7f0000002640)="67bc1270103215f70ba82603356704de3f11", 0xfffffffc}, {&(0x7f0000000200)="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", 0x11f}], 0x3}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0x541}], 0x1}}], 0x4000000000001e5, 0xc010)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
shutdown(r0, 0x1)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r8, 0x0, 0x0}, 0x10)

2.068265374s ago: executing program 7 (id=3946):
syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000007880)={0x1, 0x58, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000001, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
socket(0x400000000010, 0x3, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x1)
r3 = mq_open(0x0, 0x42, 0x1f0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syslog(0x2, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x8, 0x11, r4, 0x0)
r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000100))
syslog(0x4, &(0x7f00000000c0)=""/27, 0x1b)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0xfd, 0x0}, 0x4623, 0x0, 'dh\x00', 0x1, 0x10001, 0x49}, 0x2c)

1.429568791s ago: executing program 2 (id=3947):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008040)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x900}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5)
writev(r4, &(0x7f0000000880)=[{0x0}, {&(0x7f00000002c0)="c892f2ec2ad509fa1d4b8a6a65541730fbccbe65f68ab3baf7c970631b07a11a4e98e7c36851c844e95508a981c51854da16f62d0d8459ae0f0e9cb555dab53afb3d4d8898ee5b64103d0906beed8586dfefe71f5158fc55115a2a0f975b2ea06d8c8c46eadb176fed424a4b6ea6db3a2236f99058bba6ef9eaf072bd1216cf344e07d9aeb8c95bd1a62f0124b15492b041281c5c965009bdeaf8605c86e12c261c70e6ea0c2075d30bbeea6c5", 0xad}, {&(0x7f0000000380)="5353608a26e85fdfd9881a1ee9fe66c56ee68d460628c02e6c1ae7e300f28de80c257d3e4419b0f55c921316b4d38cd93b5f9d8e4c95e5", 0x37}, {&(0x7f00000003c0)="e70f222438ea2cd479dade79add6cb9e3df2524cf0b7970ed4025d2d6bd7b6fd12142833a92099ccf270470d8734d4b0a334085b15b087f3d71135bee27f964da46be1b7039322bd7b8b37b5ed9e637b70792525b3c9c582e0951c3147076e000cec7bf4825b0661d44f7fe185b21f3276a7585e51dc59fb17b6ae535cb24e21fae56574e0998bab141811e7acfbed70728396f1923f7314655d3c4190e8dd85a0aa2fa8e76b4aaa5966ff491138dd904ed3572427f4a85bbbf069f9e93b595704c8ea91cb1470668212a75f0926d392910f5988eb46", 0xd6}, {&(0x7f00000006c0)="bba95202b8d6a4aaa9f5e49090f75b0e73c2a3cd38917f627c686b0def0653d1ed2cadec1176ad412d8d8a45b4524c464ba3b7ce27c7fcd1d789859e", 0x3c}, {&(0x7f0000000780)="ab97eee44dd916aaca28d91a5eed5baac399ec4e2d1c7866a1e4911df2db179c694e09a18a31e3e4abadff843ff16b78dc29c6d956453a66bab5ecffdbed1ed27cae1d02fe646e6380f792995d80b36dcbe23e408f16fb363f92b3e22a521ed9d4a19388e7ebfa4512da5c5d1e67b3c9037f50b4b7a0011471b4d2f9ef6ba750a41ac56078835fa11415a6431df583896a0c2efa576377cbf29a8ae9af600959c5b5964ed83ca5f6500bed06e7941315934fbbf6", 0xb4}], 0x6)
shutdown(r4, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
clock_gettime(0x0, &(0x7f0000000380))

1.25158514s ago: executing program 9 (id=3948):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x79af, 0x1000, 0x8000, 0x40024e}, 0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
close(0x3)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d)
creat(0x0, 0xecf86c37d53049cc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(0x0, 0x0)
fanotify_init(0xf00, 0x1)
fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

447.053346ms ago: executing program 7 (id=3949):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r2, 0x0, 0x481e)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c73697274696f657874656e642c6163638173733d616e792c676b6368653d66736361636865a14a697273696f6e3d3970323030302e75"])
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e000000100000010"], 0x1c)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, r3, 0x0)
migrate_pages(0x0, 0x3, 0x0, 0x0)

81.474556ms ago: executing program 2 (id=3951):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
ioctl$SG_GET_COMMAND_Q(r1, 0x2270, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x7)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3)
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
preadv(r3, &(0x7f0000000500)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000240)}, {&(0x7f0000000440)=""/138, 0x8a}], 0x5, 0x3, 0x75)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r5, 0x80047437, 0x10004000000006)
futex(&(0x7f000000cffc)=0x1, 0xd, 0xfffffffd, 0x0, 0x0, 0x800)

0s ago: executing program 8 (id=3952):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000000)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})

kernel console output (not intermixed with test programs):

 50:50:50:50:50:50
[ 1416.245415][T13756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1416.256425][T13756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1416.797524][T13656] Bluetooth: hci1: command tx timeout
[ 1417.079065][T16524] ubi31: attaching mtd0
[ 1417.085389][T16524] ubi31: scanning is finished
[ 1417.850326][T16452] veth0_vlan: entered promiscuous mode
[ 1417.927211][T16524] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 1418.057927][T16452] veth1_vlan: entered promiscuous mode
[ 1418.934793][ T5835] Bluetooth: hci1: command tx timeout
[ 1421.222379][T16452] veth0_macvtap: entered promiscuous mode
[ 1421.789924][T16452] veth1_macvtap: entered promiscuous mode
[ 1422.027706][T16452] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1422.040337][T16452] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1422.051916][T16452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1422.071106][T16452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1422.082732][T16452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1422.102240][T16452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1422.464281][T16550] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[ 1423.040955][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.660251][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.272580][T16558] Invalid ELF header magic: != ELF
[ 1425.046573][T13656] Bluetooth: hci5: command 0x1003 tx timeout
[ 1425.053996][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1425.072511][T14190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1425.371207][T14190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1426.157364][T14161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1427.354899][T14161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1430.449511][T16623] random: crng reseeded on system resumption
[ 1433.117095][   T30] kauditd_printk_skb: 14 callbacks suppressed
[ 1433.117114][   T30] audit: type=1804 audit(1751573936.631:271): pid=16640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2754" name="file0" dev="tmpfs" ino=3674 res=1 errno=0
[ 1433.234319][ T5889] IPVS: starting estimator thread 0...
[ 1433.549950][T16641] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1434.034417][T16642] tmpfs: Unknown parameter 's�f}Ûize'
[ 1435.962727][T16672] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1435.971892][T16672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1435.986392][T16672] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1435.995319][T16672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1436.287463][T16672] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2762'.
[ 1437.640814][ T5835] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[ 1439.343688][ T1776] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1439.563043][T16686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2766'.
[ 1439.610304][ T1776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1439.711550][ T1776] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1439.931913][ T1776] usb 7-1: New USB device found, idVendor=1e7f, idProduct=2d50, bcdDevice= 0.00
[ 1439.970083][ T1776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.972219][T16696] Bluetooth: MGMT ver 1.23
[ 1439.985552][T16693] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[ 1440.021460][ T1776] usb 7-1: config 0 descriptor??
[ 1440.307938][   T30] audit: type=1326 audit(1751573943.831:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16687 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1440.523782][   T30] audit: type=1326 audit(1751573943.831:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16687 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1440.576488][ T1776] hid-generic 0003:1E7F:2D50.0006: unknown main item tag 0x4
[ 1440.623403][ T1776] hid-generic 0003:1E7F:2D50.0006: item fetching failed at offset 3/5
[ 1440.645491][   T30] audit: type=1326 audit(1751573943.831:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16687 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1440.694704][ T1776] hid-generic 0003:1E7F:2D50.0006: probe with driver hid-generic failed with error -22
[ 1441.134759][   T30] audit: type=1326 audit(1751573943.831:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16687 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1441.205020][   T30] audit: type=1326 audit(1751573943.831:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16687 comm="syz.7.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1441.284066][T16702] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2772'.
[ 1442.503847][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1443.728124][   T45] usb 7-1: USB disconnect, device number 2
[ 1447.790880][T16726] netlink: 'syz.6.2778': attribute type 1 has an invalid length.
[ 1447.802322][T16727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1447.808913][T16727] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1447.817113][T16727] vhci_hcd vhci_hcd.0: Device attached
[ 1447.945163][T16739] vhci_hcd: connection closed
[ 1447.960237][T14191] vhci_hcd: stop threads
[ 1447.972270][T14191] vhci_hcd: release socket
[ 1447.982505][T14191] vhci_hcd: disconnect device
[ 1448.388388][T16749] loop9: detected capacity change from 0 to 8
[ 1448.415999][T16749]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 1448.421647][T16749] loop9: partition table partially beyond EOD, truncated
[ 1448.431703][T16749] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 1449.609715][T16373] udevd[16373]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[ 1451.829409][T16773] loop9: detected capacity change from 0 to 7
[ 1451.841004][T16773] buffer_io_error: 9 callbacks suppressed
[ 1451.848922][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.857742][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.866765][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.875922][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.884714][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.893492][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.901902][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.910562][T16773] ldm_validate_partition_table(): Disk read failed.
[ 1451.917643][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.926447][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.966050][T16773] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1451.975463][T16773] Dev loop9: unable to read RDB block 0
[ 1451.982565][T16773]  loop9: unable to read partition table
[ 1451.989080][T16773] loop9: partition table beyond EOD, truncated
[ 1451.995962][T16773] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1451.995962][T16773] 
) failed (rc=-5)
[ 1453.316418][T16780] netlink: zone id is out of range
[ 1453.613016][T16780] netlink: set zone limit has 4 unknown bytes
[ 1454.220627][T16782] tipc: Failed to remove unknown binding: 66,1,1/0:2412347754/2412347756
[ 1454.614885][T16788] syz.0.2791: attempt to access beyond end of device
[ 1454.614885][T16788] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1455.232338][T16783] tipc: Failed to remove unknown binding: 66,1,1/0:2412347754/2412347756
[ 1455.244190][T16783] tipc: Failed to remove unknown binding: 66,1,1/0:2412347754/2412347756
[ 1455.653841][   T30] audit: type=1326 audit(1751573958.611:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1455.694009][   T30] audit: type=1326 audit(1751573958.611:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1455.715787][   T30] audit: type=1326 audit(1751573958.611:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1455.763308][   T30] audit: type=1326 audit(1751573958.611:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1455.966701][   T30] audit: type=1326 audit(1751573958.611:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1455.993965][   T30] audit: type=1326 audit(1751573958.611:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1456.007480][T16798] syz.3.2793: attempt to access beyond end of device
[ 1456.007480][T16798] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[ 1456.030924][T16798] vxfs: unable to read disk superblock at 1
[ 1456.039972][T16798] syz.3.2793: attempt to access beyond end of device
[ 1456.039972][T16798] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[ 1456.054997][T16798] vxfs: unable to read disk superblock at 8
[ 1456.061193][T16798] vxfs: can't find superblock.
[ 1456.543461][   T30] audit: type=1326 audit(1751573958.611:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16784 comm="syz.0.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f699cd8e929 code=0x7fc00000
[ 1460.611368][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'.
[ 1470.181237][ T5820] IPVS: starting estimator thread 0...
[ 1470.500794][T16906] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1470.515805][T16906] overlayfs: overlapping lowerdir path
[ 1470.633326][T16902] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1474.032808][ T5835] Bluetooth: hci4: Malformed Event: 0x02
[ 1478.783289][T16948] TCP: out of memory -- consider tuning tcp_mem
[ 1484.488376][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.495235][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.569977][T17015] batadv1: entered promiscuous mode
[ 1484.607278][T17016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'.
[ 1486.778831][T17031] .: renamed from bond0
[ 1489.475982][T17060] bridge1: left allmulticast mode
[ 1490.675400][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'.
[ 1492.594945][T17075] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2859'.
[ 1494.273425][T17088] block device autoloading is deprecated and will be removed.
[ 1496.885156][T17110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1497.266312][T17112] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2869'.
[ 1497.279624][T17112] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1497.437819][T17113] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 1497.447556][T17113] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 1500.015797][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'.
[ 1502.624602][T13656] Bluetooth: hci1: command 0x0405 tx timeout
[ 1503.588547][T17130] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1503.616239][T17130] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1503.918854][T17130] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1504.518498][T17130] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1504.552604][T17130] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1504.720194][T17130] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1504.741375][T17130] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1505.593609][T13656] Bluetooth: hci2: command 0x0406 tx timeout
[ 1506.256246][ T5835] Bluetooth: hci4: command 0x0406 tx timeout
[ 1506.563203][T13656] Bluetooth: hci1: command 0x0405 tx timeout
[ 1508.393267][T13656] Bluetooth: hci2: command 0x0406 tx timeout
[ 1508.673167][T13656] Bluetooth: hci1: command 0x0405 tx timeout
[ 1509.370978][T17206] kthread_run failed with err -4
[ 1510.116431][T17213] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1510.126913][T17213] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1511.470655][T13656] Bluetooth: hci1: command 0x0405 tx timeout
[ 1514.020248][T17221] devtmpfs: Unknown parameter 'nr_Inode'
[ 1514.756277][T17248] netlink: 'syz.0.2899': attribute type 126 has an invalid length.
[ 1515.494332][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2899'.
[ 1517.240769][T13656] Bluetooth: hci4: Malformed Event: 0x02
[ 1517.795194][T17269] overlayfs: failed to clone upperpath
[ 1519.156350][T17285] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 1522.052246][T17301] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2914'.
[ 1523.137675][T13656] Bluetooth: hci1: Malformed Event: 0x02
[ 1527.476258][T17348] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[ 1530.160961][T17357] (syz.0.2926,17357,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1530.169839][T17357] (syz.0.2926,17357,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1531.119276][T13656] Bluetooth: hci4: Malformed Event: 0x02
[ 1531.878934][T17373] JFS: discard option not supported on device
[ 1531.891381][T17373] Mount JFS Failure: -22
[ 1531.895874][T17373] jfs_mount failed w/return code = -22
[ 1532.829507][T17381] netlink: 'syz.7.2933': attribute type 10 has an invalid length.
[ 1532.984639][T17381] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1533.010411][T17381] team0: Port device bond0 added
[ 1535.210795][T17396] overlayfs: failed to resolve './file0': -2
[ 1535.613296][T17407] overlayfs: failed to clone lowerpath
[ 1537.702045][   T30] audit: type=1804 audit(1751574041.221:284): pid=17422 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.2944" name="/newroot/38/file0" dev="tmpfs" ino=228 res=1 errno=0
[ 1539.439050][T17430] batadv1: entered promiscuous mode
[ 1539.696681][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2948'.
[ 1540.451670][T17433] random: crng reseeded on system resumption
[ 1540.785517][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2947'.
[ 1541.796790][T17448] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1541.824735][T17448] ALSA: mixer_oss: invalid OSS volume ''
[ 1543.883619][T17453] lo speed is unknown, defaulting to 1000
[ 1543.889446][T17453] lo speed is unknown, defaulting to 1000
[ 1543.895883][T17453] lo speed is unknown, defaulting to 1000
[ 1543.911011][T17453] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1543.934408][T17453] lo speed is unknown, defaulting to 1000
[ 1543.941441][T17453] lo speed is unknown, defaulting to 1000
[ 1543.948464][T17453] lo speed is unknown, defaulting to 1000
[ 1543.955482][T17453] lo speed is unknown, defaulting to 1000
[ 1543.962493][T17453] lo speed is unknown, defaulting to 1000
[ 1545.684073][T17464] ALSA: mixer_oss: invalid OSS volume 'V3'
[ 1545.689982][T17464] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1545.696567][T17464] ALSA: mixer_oss: invalid OSS volume '13'
[ 1545.702404][T17464] ALSA: mixer_oss: invalid OSS volume '010000E0'
[ 1545.708842][T17464] ALSA: mixer_oss: invalid OSS volume '6A0000E0'
[ 1545.919012][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.925588][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.339933][T17482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2960'.
[ 1546.349199][T17482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2960'.
[ 1546.434912][T17483] netlink: 'syz.3.2960': attribute type 1 has an invalid length.
[ 1548.484579][T13656] Bluetooth: hci0: connection err: -111
[ 1548.858155][T17489] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:21
[ 1549.665160][ T5889] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[ 1550.426529][ T5889] usb 1-1: device descriptor read/64, error -71
[ 1550.733723][ T5889] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[ 1550.963860][ T5889] usb 1-1: device descriptor read/64, error -71
[ 1551.254425][ T5889] usb usb1-port1: attempt power cycle
[ 1552.233528][ T5889] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[ 1553.038876][ T5889] usb 1-1: device descriptor read/8, error -71
[ 1553.530976][T17514] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1555.530348][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'.
[ 1562.635279][T17588] overlayfs: failed to clone lowerpath
[ 1562.712542][T17589] overlayfs: failed to clone upperpath
[ 1564.932389][T17608] fuse: Bad value for 'fd'
[ 1577.518652][T17682] xt_connbytes: Forcing CT accounting to be enabled
[ 1577.589043][T17682] Cannot find set identified by id 0 to match
[ 1577.933439][   T30] audit: type=1326 audit(1751574081.441:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17675 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1579.275908][   T30] audit: type=1326 audit(1751574082.801:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17675 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7eae58e929 code=0x7fc00000
[ 1579.461147][T17704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1580.202701][T17705] netlink: 'syz.3.3012': attribute type 1 has an invalid length.
[ 1580.210568][T17705] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3012'.
[ 1581.601022][T17721] mkiss: ax0: crc mode is auto.
[ 1581.628896][T17718] netlink: 'syz.3.3015': attribute type 10 has an invalid length.
[ 1581.641205][T17718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1581.649599][T17718] team0: Port device bond0 added
[ 1582.629837][T17726] xt_connbytes: Forcing CT accounting to be enabled
[ 1582.637329][T17726] Cannot find set identified by id 0 to match
[ 1583.296166][T13656] Bluetooth: hci4: Malformed Event: 0x02
[ 1584.404126][T17756] loop6: detected capacity change from 0 to 524287999
[ 1589.142530][T17776] ptrace attach of ""[17777] was attempted by "./syz-executor exec"[17776]
[ 1593.723861][T17816] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3038'.
[ 1593.778449][T17816] unsupported nlmsg_type 40
[ 1593.793783][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3038'.
[ 1593.929401][T13656] Bluetooth: hci1: unexpected event for opcode 0x200a
[ 1595.360798][T13656] Bluetooth: hci4: Malformed Event: 0x02
[ 1597.472224][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'.
[ 1597.481379][T17854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3048'.
[ 1601.120529][T17883] loop9: detected capacity change from 0 to 7
[ 1601.131767][T17883] buffer_io_error: 4 callbacks suppressed
[ 1601.131809][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.146453][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.155247][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.163810][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.172445][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.181438][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.190063][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.198502][T17883] ldm_validate_partition_table(): Disk read failed.
[ 1601.237381][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.246191][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.254885][T17883] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1601.263648][T17883] Dev loop9: unable to read RDB block 0
[ 1601.270981][T17883]  loop9: unable to read partition table
[ 1601.278045][T17883] loop9: partition table beyond EOD, truncated
[ 1601.284550][T17883] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1601.284550][T17883] 
) failed (rc=-5)
[ 1604.920024][   T30] audit: type=1326 audit(1751574108.121:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1605.122200][   T30] audit: type=1326 audit(1751574108.441:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1605.145399][   T30] audit: type=1326 audit(1751574108.441:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1605.167095][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1605.873967][T17911] vivid-000: kernel_thread() failed
[ 1605.996221][   T30] audit: type=1326 audit(1751574108.441:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1606.017818][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1606.024784][   T30] audit: type=1326 audit(1751574108.461:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1606.051845][   T30] audit: type=1326 audit(1751574108.461:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1606.140161][   T30] audit: type=1326 audit(1751574108.461:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1606.162680][   T30] audit: type=1326 audit(1751574108.471:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1606.184288][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1606.404210][   T30] audit: type=1326 audit(1751574108.471:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc75098d290 code=0x7ffc0000
[ 1606.430400][   T30] audit: type=1326 audit(1751574108.471:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17898 comm="syz.2.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 1607.367591][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.374274][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.457155][T17975] loop9: detected capacity change from 0 to 7
[ 1613.465299][T17975] buffer_io_error: 4 callbacks suppressed
[ 1613.465351][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1613.479519][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1613.497776][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1613.518147][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1613.533182][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1613.835147][T17977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1613.862715][T17977] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1614.294438][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1614.324507][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1614.332578][T17975] ldm_validate_partition_table(): Disk read failed.
[ 1614.339524][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1614.353769][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1614.478147][T17975] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1614.488344][T17975] Dev loop9: unable to read RDB block 0
[ 1614.497549][T17975]  loop9: unable to read partition table
[ 1614.504784][T17975] loop9: partition table beyond EOD, truncated
[ 1614.511272][T17975] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1614.511272][T17975] 
) failed (rc=-5)
[ 1619.379664][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1619.379681][   T30] audit: type=1804 audit(1751574122.871:303): pid=18004 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3084" name="file0" dev="tmpfs" ino=4077 res=1 errno=0
[ 1621.517310][T18016] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1621.525789][T18016] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1621.953596][T18020] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1621.977504][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'.
[ 1623.165608][T18027] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1623.177191][T18027] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1624.980686][T18037] loop9: detected capacity change from 0 to 7
[ 1624.989830][T18037] buffer_io_error: 4 callbacks suppressed
[ 1624.989884][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.004266][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.012632][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.033825][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.043293][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.063400][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.877002][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.891030][T18037] ldm_validate_partition_table(): Disk read failed.
[ 1625.897963][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.906012][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.914067][T18037] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1625.922136][T18037] Dev loop9: unable to read RDB block 0
[ 1625.928390][T18037]  loop9: unable to read partition table
[ 1625.935895][T18037] loop9: partition table beyond EOD, truncated
[ 1625.942820][T18037] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1625.942820][T18037] 
) failed (rc=-5)
[ 1625.980312][T18038] lo speed is unknown, defaulting to 1000
[ 1633.401846][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1633.957962][T18079] ceph: No mds server is up or the cluster is laggy
[ 1633.976188][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1634.345692][T18084] vxfs: WRONG superblock magic 00000000 at 1
[ 1634.389523][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1634.413366][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1634.433896][T13656] Bluetooth: hci1: connection err: -111
[ 1634.436684][T18084] vxfs: WRONG superblock magic 00000000 at 8
[ 1634.446702][T18084] vxfs: can't find superblock.
[ 1636.121149][ T1776] libceph: connect (1)[c::]:6789 error -101
[ 1636.159482][ T1776] libceph: mon0 (1)[c::]:6789 connect error
[ 1637.223986][T18109] xt_hashlimit: overflow, rate too high: 0
[ 1639.690737][T18133] vivid-000: disconnect
[ 1640.033270][T18126] vivid-000: reconnect
[ 1640.103137][ T5820] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1640.744058][T18141] netlink: zone id is out of range
[ 1640.749390][T18141] netlink: zone id is out of range
[ 1640.754715][T18141] netlink: zone id is out of range
[ 1640.760014][T18141] netlink: zone id is out of range
[ 1640.765551][T18141] netlink: zone id is out of range
[ 1640.770769][T18141] netlink: zone id is out of range
[ 1640.776588][T18141] netlink: zone id is out of range
[ 1640.781789][T18141] netlink: zone id is out of range
[ 1640.787822][T18141] netlink: zone id is out of range
[ 1640.793723][T18141] netlink: zone id is out of range
[ 1641.223412][ T5820] usb 7-1: Using ep0 maxpacket: 32
[ 1641.494954][T18112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1641.790354][T18112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1643.097893][T18152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1643.108582][T18152] netlink: 'syz.0.3119': attribute type 4 has an invalid length.
[ 1643.119657][T18152] netlink: 'syz.0.3119': attribute type 4 has an invalid length.
[ 1644.387166][ T5820] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1644.404678][ T5820] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1644.417321][ T5820] usb 7-1: can't read configurations, error -71
[ 1645.917516][T18174] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0)
[ 1645.945495][   T30] audit: type=1326 audit(1751574149.471:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18170 comm="syz.6.3124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f745df8e929 code=0x0
[ 1646.866974][T18178] netlink: 'syz.7.3126': attribute type 11 has an invalid length.
[ 1649.374973][T13656] Bluetooth: hci0: Malformed Event: 0x02
[ 1650.571636][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3131'.
[ 1651.833408][ T1776] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1652.030614][ T1776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1652.056333][ T1776] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1652.097957][ T1776] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1652.161211][ T1776] usb 7-1: config 0 descriptor??
[ 1653.094755][T18228] netlink: 'syz.6.3133': attribute type 14 has an invalid length.
[ 1653.578233][ T1776] ath6kl: Failed to submit usb control message: -110
[ 1653.686709][   T30] audit: type=1804 audit(1751574157.011:305): pid=18236 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3140" name="/newroot/74/file0" dev="tmpfs" ino=416 res=1 errno=0
[ 1654.148767][ T1776] ath6kl: unable to send the bmi data to the device: -110
[ 1654.156077][ T1776] ath6kl: Unable to send get target info: -110
[ 1654.164372][ T1776] ath6kl: Failed to init ath6kl core: -110
[ 1654.177206][ T1776] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1654.719809][T13656] Bluetooth: hci1: Malformed Event: 0x02
[ 1655.613281][ T1776] usb 7-1: USB disconnect, device number 5
[ 1659.009506][T18262] mkiss: ax0: crc mode is auto.
[ 1660.398208][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3149'.
[ 1663.131378][T18269] bond0: (slave bond_slave_1): Releasing backup interface
[ 1665.765794][T18284] random: crng reseeded on system resumption
[ 1668.300985][T18289] net_ratelimit: 7 callbacks suppressed
[ 1668.301027][T18289] openvswitch: netlink: Message has 24 unknown bytes.
[ 1668.313839][T18289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1668.957842][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.964551][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.183361][T13656] Bluetooth: hci2: Malformed Event: 0x02
[ 1669.507382][T18300] IPVS: Error connecting to the multicast addr
[ 1676.041079][T18340] bridge0: port 1(netdevsim0) entered blocking state
[ 1676.048480][T18340] bridge0: port 1(netdevsim0) entered disabled state
[ 1676.057093][T18340] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1676.080089][T18340] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1676.092050][T18340] bridge0: port 1(netdevsim0) entered blocking state
[ 1676.100968][T18340] bridge0: port 1(netdevsim0) entered forwarding state
[ 1679.548914][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1680.200612][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1680.365352][T18361] ceph: No mds server is up or the cluster is laggy
[ 1680.536759][   T45] libceph: connect (1)[c::]:6789 error -101
[ 1680.542960][   T45] libceph: mon0 (1)[c::]:6789 connect error
[ 1680.587303][ T5827] syz_tun (unregistering): left allmulticast mode
[ 1680.614812][ T5827] bridge0: port 1(syz_tun) entered disabled state
[ 1681.085936][   T45] libceph: connect (1)[c::]:6789 error -101
[ 1681.352016][   T45] libceph: mon0 (1)[c::]:6789 connect error
[ 1682.642871][   T30] audit: type=1326 audit(1751574186.161:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18378 comm="syz.2.3178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x0
[ 1683.096931][T17177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1683.109090][T17177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1683.117636][T17177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1683.126357][T17177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1683.136886][T17177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1683.365114][T18389] lo speed is unknown, defaulting to 1000
[ 1685.194892][T13656] Bluetooth: hci4: command tx timeout
[ 1685.251915][T18389] chnl_net:caif_netlink_parms(): no params data found
[ 1687.273476][T13656] Bluetooth: hci4: command tx timeout
[ 1687.979991][T18389] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1687.987460][T18389] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1688.003670][T18389] bridge_slave_0: entered allmulticast mode
[ 1688.113910][T18389] bridge_slave_0: entered promiscuous mode
[ 1688.284289][T18389] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1688.291896][T18389] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1688.333891][T18389] bridge_slave_1: entered allmulticast mode
[ 1688.341850][T18389] bridge_slave_1: entered promiscuous mode
[ 1688.553508][T18438] loop9: detected capacity change from 0 to 7
[ 1688.564466][T18438] buffer_io_error: 4 callbacks suppressed
[ 1688.570628][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.579214][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.587949][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.596954][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.605922][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.614580][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.623181][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.631894][T18438] ldm_validate_partition_table(): Disk read failed.
[ 1688.639425][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.648367][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.657015][T18438] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1688.704644][T18438] Dev loop9: unable to read RDB block 0
[ 1688.711671][T18438]  loop9: unable to read partition table
[ 1688.719873][T18438] loop9: partition table beyond EOD, truncated
[ 1688.726224][T18438] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[ 1688.726224][T18438] 
) failed (rc=-5)
[ 1689.353333][T13656] Bluetooth: hci4: command tx timeout
[ 1689.763992][T18442] new mount options do not match the existing superblock, will be ignored
[ 1690.946781][T18389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1691.168841][T18389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1691.674874][T13656] Bluetooth: hci4: command tx timeout
[ 1692.022288][T18389] team0: Port device team_slave_0 added
[ 1692.894214][T18389] team0: Port device team_slave_1 added
[ 1692.938898][T18462] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3189'.
[ 1693.311397][T18389] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1694.043190][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1694.206671][T18389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1694.275394][T18389] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1694.282408][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1694.455912][T18389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1695.941147][T18413] syz.0.3182 (18413): drop_caches: 2
[ 1696.023477][T18389] hsr_slave_0: entered promiscuous mode
[ 1696.031724][T18389] hsr_slave_1: entered promiscuous mode
[ 1696.051783][T18389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1696.059556][T18389] Cannot create hsr debugfs directory
[ 1698.236314][T18502] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[ 1700.656470][T18517] trusted_key: encrypted_key: insufficient parameters specified
[ 1701.991792][T18389] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1702.061317][T18389] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1703.045390][   T30] audit: type=1804 audit(1751574206.351:307): pid=18531 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3206" name="/newroot/96/file0" dev="tmpfs" ino=542 res=1 errno=0
[ 1703.935239][T18389] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1703.972394][T18389] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1704.082486][   T30] audit: type=1804 audit(1751574207.571:308): pid=18535 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3210" name="file0" dev="tmpfs" ino=4253 res=1 errno=0
[ 1704.102015][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1707.664878][T18389] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1708.272210][T18389] 8021q: adding VLAN 0 to HW filter on device team0
[ 1708.338715][T14182] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1708.346113][T14182] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1708.402283][T14182] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1708.409574][T14182] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1710.201696][T18576] input: syz0 as /devices/virtual/input/input13
[ 1710.387223][T18571] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3220'.
[ 1713.375532][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3222'.
[ 1713.518104][T18389] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1714.221967][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3223'.
[ 1714.239023][T18608] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3223'.
[ 1714.254006][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3223'.
[ 1714.267437][T18608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3223'.
[ 1714.659460][T18615] : entered promiscuous mode
[ 1718.409724][T18389] veth0_vlan: entered promiscuous mode
[ 1718.623908][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3232'.
[ 1720.699608][T18389] veth1_vlan: entered promiscuous mode
[ 1720.992507][T18648] Cannot find add_set index 0 as target
[ 1722.166006][T18643] bond0: (slave bond_slave_1): Releasing backup interface
[ 1722.807593][T18389] veth0_macvtap: entered promiscuous mode
[ 1722.896088][T18389] veth1_macvtap: entered promiscuous mode
[ 1723.076433][T18389] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1723.088125][T18389] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1723.100174][T18389] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.110411][T18389] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.119833][T18389] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1723.129275][T18389] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1724.032671][ T1776] libceph: connect (1)[c::]:6789 error -101
[ 1724.054799][ T1776] libceph: mon0 (1)[c::]:6789 connect error
[ 1724.061376][T18669] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13)
[ 1724.068001][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1724.242174][T18669] vhci_hcd vhci_hcd.0: Device attached
[ 1724.349401][   T45] libceph: connect (1)[c::]:6789 error -101
[ 1724.480087][T18680] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(19)
[ 1724.486759][T18680] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1724.509909][   T45] libceph: mon0 (1)[c::]:6789 connect error
[ 1724.647902][T18678] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16)
[ 1724.654610][T18678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1724.703550][T18684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1724.723657][T18680] vhci_hcd vhci_hcd.0: Device attached
[ 1724.735779][T18678] vhci_hcd vhci_hcd.0: Device attached
[ 1724.754482][T18669] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(23)
[ 1724.761162][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1724.815289][T18669] vhci_hcd vhci_hcd.0: Device attached
[ 1724.821099][T18678] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(18)
[ 1724.827749][T18678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1724.882540][T14178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1724.896814][T18678] vhci_hcd vhci_hcd.0: Device attached
[ 1724.908435][T18669] vhci_hcd vhci_hcd.0: pdev(6) rhport(6) sockfd(25)
[ 1724.915101][T18669] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1724.942375][T14178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1724.955528][T16551] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[ 1724.973284][T18669] vhci_hcd vhci_hcd.0: Device attached
[ 1724.991860][T18680] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(29)
[ 1724.998523][T18680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1725.300650][   T24] libceph: connect (1)[c::]:6789 error -101
[ 1725.333339][   T24] libceph: mon0 (1)[c::]:6789 connect error
[ 1725.374163][T18680] vhci_hcd vhci_hcd.0: Device attached
[ 1725.393194][T18685] vhci_hcd: connection closed
[ 1725.393738][T18679] vhci_hcd: connection closed
[ 1725.394977][T18682] vhci_hcd: connection closed
[ 1725.409102][T13934] vhci_hcd: stop threads
[ 1725.423065][T18674] vhci_hcd: connection reset by peer
[ 1725.441622][T18691] vhci_hcd: connection closed
[ 1725.451303][T13934] vhci_hcd: release socket
[ 1725.463808][T14182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1725.471691][T14182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1725.664985][T18687] vhci_hcd: connection closed
[ 1725.693834][T13934] vhci_hcd: disconnect device
[ 1725.721776][T13934] vhci_hcd: stop threads
[ 1725.730008][T13934] vhci_hcd: release socket
[ 1725.747177][T13934] vhci_hcd: disconnect device
[ 1725.760187][T18694] vhci_hcd: connection closed
[ 1725.769390][T13934] vhci_hcd: stop threads
[ 1725.790472][T18667] ceph: No mds server is up or the cluster is laggy
[ 1725.796227][T13934] vhci_hcd: release socket
[ 1725.801676][T13934] vhci_hcd: disconnect device
[ 1725.812150][T13934] vhci_hcd: stop threads
[ 1725.819990][T13934] vhci_hcd: release socket
[ 1725.825574][T13934] vhci_hcd: disconnect device
[ 1726.008939][T13934] vhci_hcd: stop threads
[ 1726.018817][T13934] vhci_hcd: release socket
[ 1726.034816][T13934] vhci_hcd: disconnect device
[ 1726.083347][T13934] vhci_hcd: stop threads
[ 1726.087788][T13934] vhci_hcd: release socket
[ 1726.763710][T13934] vhci_hcd: disconnect device
[ 1726.803316][T13934] vhci_hcd: stop threads
[ 1726.807654][T13934] vhci_hcd: release socket
[ 1726.960872][T13934] vhci_hcd: disconnect device
[ 1727.143711][T18709] openvswitch: netlink: Tunnel attr 6 has unexpected len 1 expected 0
[ 1727.527210][T18716] Cannot find add_set index 0 as target
[ 1728.378021][   T30] audit: type=1804 audit(1751574231.031:309): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.3246" name="/newroot/1/file0" dev="tmpfs" ino=23 res=1 errno=0
[ 1729.984759][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3250'.
[ 1730.213169][T16551] vhci_hcd: vhci_device speed not set
[ 1730.236989][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.243728][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1732.627017][T18723] syz.7.3249 (18723): /proc/18722/oom_adj is deprecated, please use /proc/18722/oom_score_adj instead.
[ 1735.192472][   T30] audit: type=1804 audit(1751574237.871:310): pid=18771 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3262" name="/newroot/661/file0" dev="tmpfs" ino=3543 res=1 errno=0
[ 1744.853644][T18822] overlayfs: missing 'lowerdir'
[ 1748.333461][T13656] Bluetooth: hci4: command tx timeout
[ 1753.418667][T18871] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1754.472829][T18883] lo speed is unknown, defaulting to 1000
[ 1754.479013][T18883] lo speed is unknown, defaulting to 1000
[ 1754.487270][T18883] lo speed is unknown, defaulting to 1000
[ 1754.521467][T18883] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98
[ 1754.604353][T18883] lo speed is unknown, defaulting to 1000
[ 1754.616308][T18883] lo speed is unknown, defaulting to 1000
[ 1754.626343][T18883] lo speed is unknown, defaulting to 1000
[ 1754.637714][T18883] lo speed is unknown, defaulting to 1000
[ 1754.649309][T18883] lo speed is unknown, defaulting to 1000
[ 1754.659972][T18883] lo speed is unknown, defaulting to 1000
[ 1758.008392][T17177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1758.019925][T17177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1758.034520][T17177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1758.042864][T17177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1758.050906][T17177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1758.278916][T18907] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3296'.
[ 1758.317947][T18908] random: crng reseeded on system resumption
[ 1758.878603][T18908] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1758.885561][T18908] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1758.911147][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1758.917765][T18908] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[ 1758.934141][T18911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1758.942882][T18911] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1759.353122][T18911] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1759.375866][T18911] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1759.388998][T18911] batman_adv: batadv0: Removing interface: ip6gretap1
[ 1760.074301][T17177] Bluetooth: hci5: command tx timeout
[ 1760.350396][T14171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1760.374444][T14171] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1761.430984][T18900] lo speed is unknown, defaulting to 1000
[ 1761.792698][T14171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1761.825275][T14171] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1761.916025][T18900] lo speed is unknown, defaulting to 1000
[ 1762.161034][T14171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1762.166221][T17177] Bluetooth: hci5: command tx timeout
[ 1762.172057][T14171] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1762.251740][T17177] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1
[ 1762.260532][T17177] Bluetooth: hci1: unexpected event for opcode 0x2039
[ 1764.132416][T14171] bridge0: port 1(netdevsim0) entered disabled state
[ 1764.340452][T17177] Bluetooth: hci5: command tx timeout
[ 1764.394506][T14171] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1764.416800][T14171] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[ 1764.439569][T14171] bridge0: port 1(netdevsim0) entered disabled state
[ 1764.665086][T14171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1765.098822][T13731] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1765.109913][T14171] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1765.519075][T13731] usb 7-1: Using ep0 maxpacket: 32
[ 1765.570650][T18900] chnl_net:caif_netlink_parms(): no params data found
[ 1765.667735][T13731] usb 7-1: config 0 has an invalid interface number: 183 but max is 0
[ 1765.681265][T13731] usb 7-1: config 0 has no interface number 0
[ 1765.702323][T13731] usb 7-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528
[ 1765.716428][T18969] batadv_slave_0: entered promiscuous mode
[ 1765.722324][T18969] batadv_slave_0: entered allmulticast mode
[ 1765.742349][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3312'.
[ 1766.201226][T13731] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[ 1766.223101][T13731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1766.231929][T13731] usb 7-1: Product: syz
[ 1766.240458][T13731] usb 7-1: Manufacturer: syz
[ 1766.247616][T13731] usb 7-1: SerialNumber: syz
[ 1766.256694][T13731] usb 7-1: config 0 descriptor??
[ 1766.262604][T18954] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1766.328307][T17177] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1766.338092][T17177] Bluetooth: hci1: Injecting HCI hardware error event
[ 1766.351341][T13656] Bluetooth: hci1: hardware error 0x00
[ 1766.393366][T17177] Bluetooth: hci5: command tx timeout
[ 1766.455515][ T5820] libceph: connect (1)[c::]:6789 error -101
[ 1766.475991][ T5820] libceph: mon0 (1)[c::]:6789 connect error
[ 1767.814076][T16551] libceph: connect (1)[c::]:6789 error -101
[ 1767.820194][T16551] libceph: mon0 (1)[c::]:6789 connect error
[ 1767.866237][T18971] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3312'.
[ 1767.885157][T18975] ceph: No mds server is up or the cluster is laggy
[ 1768.403416][T13656] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1768.413527][T13731] net1080 7-1:0.183: probe with driver net1080 failed with error -71
[ 1768.457723][T18900] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1768.476858][T13731] usb 7-1: USB disconnect, device number 6
[ 1768.488423][T18900] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1768.507180][T18900] bridge_slave_0: entered allmulticast mode
[ 1768.518295][T18900] bridge_slave_0: entered promiscuous mode
[ 1768.551978][T18900] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1768.565535][T18900] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1768.578651][T18900] bridge_slave_1: entered allmulticast mode
[ 1768.588562][T18900] bridge_slave_1: entered promiscuous mode
[ 1769.886662][T14171] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1770.707455][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3322'.
[ 1771.798606][T19017] Device name cannot be null; rc = [-22]
[ 1771.805362][T19017] overlayfs: failed to clone lowerpath
[ 1773.603047][T13731] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1773.930155][T13731] usb 7-1: Using ep0 maxpacket: 16
[ 1773.943591][T13731] usb 7-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[ 1773.963145][T13731] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1774.085817][T13731] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1774.100440][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'.
[ 1774.111727][T13731] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1774.123955][T13731] usb 7-1: Manufacturer: syz
[ 1774.132684][T13731] usb 7-1: config 0 descriptor??
[ 1774.356980][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3326'.
[ 1774.412825][T14171] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1774.422752][T14171] bond0 (unregistering): Released all slaves
[ 1775.212088][T13731] usb 7-1: USB disconnect, device number 7
[ 1776.135787][T14171] bond1 (unregistering): Released all slaves
[ 1776.708263][T18900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1776.722294][T18900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1779.936105][T18900] team0: Port device team_slave_0 added
[ 1779.990747][T18900] team0: Port device team_slave_1 added
[ 1780.192047][T18900] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1780.205252][T18900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1780.299844][T18900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1780.342967][T18900] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1780.373393][T18900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1780.409185][T18900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1781.060009][T19083] xt_hashlimit: overflow, rate too high: 0
[ 1781.916405][T19091] netlink: 'syz.2.3339': attribute type 6 has an invalid length.
[ 1781.986951][T19093] syz.2.3339 (19093): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1782.062205][T18900] hsr_slave_0: entered promiscuous mode
[ 1782.092040][T18900] hsr_slave_1: entered promiscuous mode
[ 1782.112888][T18900] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1782.144656][T18900] Cannot create hsr debugfs directory
[ 1782.179379][T14171] hsr_slave_0: left promiscuous mode
[ 1782.194361][T14171] hsr_slave_1: left promiscuous mode
[ 1783.106075][   T30] audit: type=1804 audit(1751574285.821:311): pid=19098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3340" name="/newroot/119/file0" dev="tmpfs" ino=651 res=1 errno=0
[ 1786.639928][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'.
[ 1786.659763][   T30] audit: type=1804 audit(1751574290.181:312): pid=19135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3349" name="file0" dev="tmpfs" ino=4489 res=1 errno=0
[ 1787.836533][T19142] netlink: 'syz.2.3350': attribute type 1 has an invalid length.
[ 1787.844920][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3350'.
[ 1791.714173][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.720797][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1795.009043][   T45] IPVS: starting estimator thread 0...
[ 1795.255348][T19183] IPVS: using max 38 ests per chain, 91200 per kthread
[ 1796.881215][T18900] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1797.110570][T18900] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1797.960117][T18900] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1799.102134][T18900] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1799.718057][T14171] IPVS: stop unused estimator thread 0...
[ 1799.724573][T19241] netlink: 232 bytes leftover after parsing attributes in process `syz.7.3370'.
[ 1799.987054][T18900] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1800.061623][T18900] 8021q: adding VLAN 0 to HW filter on device team0
[ 1800.243301][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1800.250517][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1800.310768][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1800.318020][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1801.811016][T18900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1804.264725][T19282] overlay: Unknown parameter '/'
[ 1808.755856][T18900] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1809.059056][T19308] trusted_key: encrypted_key: insufficient parameters specified
[ 1809.773484][T13656] Bluetooth: hci4: command 0x0406 tx timeout
[ 1810.381220][T19313] orangefs_mount: mount request failed with -4
[ 1811.254034][T17177] Bluetooth: hci4: unexpected event for opcode 0x2031
[ 1823.925620][ T5139] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1823.935352][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1824.198598][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1824.206567][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1825.519132][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1826.716046][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3408'.
[ 1827.389014][T19398] batadv1: entered promiscuous mode
[ 1827.480992][T19415] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1827.490142][T19415] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1827.498964][T19415] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1827.507800][T19415] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1827.563213][T19415] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1827.572952][T19415] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1827.581903][T19415] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1827.590928][T19415] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1827.649528][T19393] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.3405'.
[ 1827.660851][T17177] Bluetooth: hci4: unexpected event for opcode 0x6572
[ 1827.680852][T17177] Bluetooth: hci2: command tx timeout
[ 1828.434460][T19392] lo speed is unknown, defaulting to 1000
[ 1828.475245][T19392] lo speed is unknown, defaulting to 1000
[ 1829.787533][T17177] Bluetooth: hci2: command 0x041b tx timeout
[ 1830.772264][T19422] : entered promiscuous mode
[ 1832.266210][ T5139] Bluetooth: hci2: command 0x041b tx timeout
[ 1832.533802][   T12] bridge_slave_1: left allmulticast mode
[ 1832.539538][   T12] bridge_slave_1: left promiscuous mode
[ 1832.624216][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1832.684009][   T12] bridge_slave_0: left allmulticast mode
[ 1832.702079][   T12] bridge_slave_0: left promiscuous mode
[ 1832.733598][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1833.502751][T19466] netlink: 'syz.8.3419': attribute type 27 has an invalid length.
[ 1834.180648][T19459] Device name cannot be null; rc = [-22]
[ 1834.326474][ T5139] Bluetooth: hci2: command 0x041b tx timeout
[ 1834.504184][   T30] audit: type=1326 audit(1751574338.011:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1834.712121][   T30] audit: type=1326 audit(1751574338.011:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1834.957401][   T30] audit: type=1326 audit(1751574338.021:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.021162][   T30] audit: type=1326 audit(1751574338.021:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.050614][   T30] audit: type=1326 audit(1751574338.021:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.113064][   T30] audit: type=1326 audit(1751574338.031:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.201371][   T30] audit: type=1326 audit(1751574338.031:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.296856][   T30] audit: type=1326 audit(1751574338.031:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1835.336314][   T30] audit: type=1326 audit(1751574338.031:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19467 comm="syz.7.3420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7eae58e929 code=0x7ffc0000
[ 1836.400281][ T5139] Bluetooth: hci2: command 0x041b tx timeout
[ 1836.446459][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1836.488664][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1836.606032][   T12] bond0 (unregistering): Released all slaves
[ 1836.758175][T19469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3420'.
[ 1836.881280][T19486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'.
[ 1837.282666][T19470] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3420'.
[ 1838.675626][   T12] hsr_slave_0: left promiscuous mode
[ 1839.463884][   T12] hsr_slave_1: left promiscuous mode
[ 1839.488398][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1839.740176][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1842.305827][   T30] audit: type=1326 audit(1751574345.811:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19517 comm="syz.2.3430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x0
[ 1845.672592][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1846.038973][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1846.881382][T19392] chnl_net:caif_netlink_parms(): no params data found
[ 1849.956060][T19392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1849.988053][T19392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1850.013949][T19392] bridge_slave_0: entered allmulticast mode
[ 1850.044818][T19392] bridge_slave_0: entered promiscuous mode
[ 1850.069346][T19392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1850.228181][T19392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1850.235737][T19392] bridge_slave_1: entered allmulticast mode
[ 1850.248267][T19392] bridge_slave_1: entered promiscuous mode
[ 1850.408903][T19580] atomic_op ffff8880509f9998 conn xmit_atomic 0000000000000000
[ 1853.455525][T19392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1853.489584][T19392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1853.576043][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.584088][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1855.083832][T19392] team0: Port device team_slave_0 added
[ 1855.274469][T19595] ptrace attach of "./syz-executor exec"[19596] was attempted by "./syz-executor exec"[19595]
[ 1855.299135][T19392] team0: Port device team_slave_1 added
[ 1855.674723][T19599] random: crng reseeded on system resumption
[ 1856.622701][T19392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1856.675297][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.425967][T19392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1857.439035][T19392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1857.446099][T19392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1857.474113][T19392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1857.680045][T19392] hsr_slave_0: entered promiscuous mode
[ 1857.695044][T19392] hsr_slave_1: entered promiscuous mode
[ 1858.672493][T19617] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[ 1858.679054][T19617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1858.703476][T19617] vhci_hcd vhci_hcd.0: Device attached
[ 1858.710540][T19620] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11)
[ 1858.717187][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1858.747810][T19620] vhci_hcd vhci_hcd.0: Device attached
[ 1858.786245][T19617] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(10)
[ 1858.792901][T19617] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1858.824302][T19617] vhci_hcd vhci_hcd.0: Device attached
[ 1858.847359][T19620] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15)
[ 1858.854005][T19620] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1858.875298][T19620] vhci_hcd vhci_hcd.0: Device attached
[ 1858.927522][T19617] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14)
[ 1858.934174][T19617] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1858.944653][   T45] vhci_hcd: vhci_device speed not set
[ 1858.950137][T19617] vhci_hcd vhci_hcd.0: Device attached
[ 1858.978797][T19620] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1859.043007][   T45] usb 45-1: new full-speed USB device number 3 using vhci_hcd
[ 1859.166339][T19634] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1860.988511][T19617] vhci_hcd vhci_hcd.0: pdev(6) rhport(7) sockfd(24)
[ 1860.995186][T19617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1861.017361][T19617] vhci_hcd vhci_hcd.0: Device attached
[ 1862.150535][T19641] vhci_hcd: connection closed
[ 1862.152720][T14161] vhci_hcd: stop threads
[ 1862.170233][T14161] vhci_hcd: release socket
[ 1862.181485][T19621] vhci_hcd: connection closed
[ 1862.181699][T19618] vhci_hcd: connection reset by peer
[ 1862.203276][T19627] vhci_hcd: connection closed
[ 1862.213998][T19625] vhci_hcd: connection closed
[ 1862.223141][T19629] vhci_hcd: connection closed
[ 1862.276070][T14161] vhci_hcd: disconnect device
[ 1862.427419][T14161] vhci_hcd: stop threads
[ 1862.431902][T14161] vhci_hcd: release socket
[ 1862.440450][T14161] vhci_hcd: disconnect device
[ 1862.471173][T14161] vhci_hcd: stop threads
[ 1862.480003][T14161] vhci_hcd: release socket
[ 1862.513046][T14161] vhci_hcd: disconnect device
[ 1862.715564][T14161] vhci_hcd: stop threads
[ 1862.720085][T14161] vhci_hcd: release socket
[ 1862.726602][T14161] vhci_hcd: disconnect device
[ 1862.731875][T14161] vhci_hcd: stop threads
[ 1862.741691][T14161] vhci_hcd: release socket
[ 1862.756605][T14161] vhci_hcd: disconnect device
[ 1862.761695][T14161] vhci_hcd: stop threads
[ 1862.766806][T14161] vhci_hcd: release socket
[ 1862.846374][T19392] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1862.856516][T19392] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1862.866877][T19392] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1862.881857][T19392] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1862.918153][T14161] vhci_hcd: disconnect device
[ 1863.380559][T19659] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1863.387917][T19659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1863.433612][T19659] bridge0: entered allmulticast mode
[ 1864.254534][   T45] vhci_hcd: vhci_device speed not set
[ 1864.676999][T19392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1864.805039][T19392] 8021q: adding VLAN 0 to HW filter on device team0
[ 1864.855476][T14178] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1864.862691][T14178] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1865.163742][T14178] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1865.170948][T14178] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1872.282731][T19392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1875.100829][T19766] sp0: Synchronizing with TNC
[ 1875.721372][T19770] netlink: 'syz.2.3488': attribute type 1 has an invalid length.
[ 1876.703369][T19781] lo speed is unknown, defaulting to 1000
[ 1876.709785][T19781] lo speed is unknown, defaulting to 1000
[ 1876.721047][T19781] lo speed is unknown, defaulting to 1000
[ 1876.815000][T19781] infiniband syþ: RDMA CMA: cma_listen_on_dev, error -98
[ 1876.953597][T19781] lo speed is unknown, defaulting to 1000
[ 1876.971480][T19781] lo speed is unknown, defaulting to 1000
[ 1876.992352][T19781] lo speed is unknown, defaulting to 1000
[ 1877.010733][T19781] lo speed is unknown, defaulting to 1000
[ 1877.029328][T19781] lo speed is unknown, defaulting to 1000
[ 1877.049667][T19781] lo speed is unknown, defaulting to 1000
[ 1877.571066][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1877.614022][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1877.665583][   T30] audit: type=1326 audit(1751574381.181:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19772 comm="syz.8.3487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe7f718e929 code=0x0
[ 1877.809930][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1877.867870][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1878.256269][ T5139] Bluetooth: hci4: command 0x0406 tx timeout
[ 1878.295462][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1878.460375][T19782] lo speed is unknown, defaulting to 1000
[ 1878.562319][   T30] audit: type=1326 audit(1751574382.071:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1878.941407][   T30] audit: type=1326 audit(1751574382.071:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.082072][T19792] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3492'.
[ 1879.097153][   T30] audit: type=1326 audit(1751574382.071:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.268708][   T30] audit: type=1326 audit(1751574382.071:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.291111][   T30] audit: type=1326 audit(1751574382.071:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.312759][   T30] audit: type=1326 audit(1751574382.071:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.336002][   T30] audit: type=1326 audit(1751574382.071:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.358225][   T30] audit: type=1326 audit(1751574382.071:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1879.820647][   T30] audit: type=1326 audit(1751574382.861:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19789 comm="syz.8.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x7ffc0000
[ 1880.104768][T19782] lo speed is unknown, defaulting to 1000
[ 1880.249274][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3492'.
[ 1880.282111][T19782] lo speed is unknown, defaulting to 1000
[ 1880.393210][T13656] Bluetooth: hci5: command tx timeout
[ 1880.525101][T19804] netlink: 'syz.6.3495': attribute type 1 has an invalid length.
[ 1880.620337][T19805] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3495'.
[ 1880.913674][T19804] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1882.069934][T19814] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1882.495732][T13656] Bluetooth: hci5: command tx timeout
[ 1882.895738][T19824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14
[ 1883.044413][T19826] netlink: 'syz.7.3500': attribute type 2 has an invalid length.
[ 1883.176344][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3498'.
[ 1884.623066][T13656] Bluetooth: hci5: command tx timeout
[ 1885.285135][T19846] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1885.988550][T19782] chnl_net:caif_netlink_parms(): no params data found
[ 1886.683178][T17177] Bluetooth: hci5: command tx timeout
[ 1887.246198][   T12] bridge_slave_1: left allmulticast mode
[ 1887.253605][   T12] bridge_slave_1: left promiscuous mode
[ 1887.263813][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1887.290350][   T12] bridge_slave_0: left allmulticast mode
[ 1887.312688][   T12] bridge_slave_0: left promiscuous mode
[ 1887.333533][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1888.138665][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1888.151284][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1888.164257][   T12] bond0 (unregistering): Released all slaves
[ 1888.793184][T17177] Bluetooth: hci5: command 0x0405 tx timeout
[ 1889.382389][T19782] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1889.426068][T19782] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1889.473980][T19879] siw: device registration error -23
[ 1889.580435][T19782] bridge_slave_0: entered allmulticast mode
[ 1890.197358][T19782] bridge_slave_0: entered promiscuous mode
[ 1890.250460][   T12] hsr_slave_0: left promiscuous mode
[ 1890.409747][   T12] hsr_slave_1: left promiscuous mode
[ 1890.414312][T19886] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1890.416678][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1890.701395][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1891.070966][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3510'.
[ 1891.635758][T19893] __vm_enough_memory: pid: 19893, comm: syz.6.3511, bytes: 21200586252288 not enough memory for the allocation
[ 1896.612226][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1896.998107][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1900.501296][T19782] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1900.508799][T19782] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1900.516553][T19782] bridge_slave_1: entered allmulticast mode
[ 1900.524822][T19782] bridge_slave_1: entered promiscuous mode
[ 1902.681483][T19782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1903.029516][T19782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1905.160454][T19782] team0: Port device team_slave_0 added
[ 1905.172204][T19782] team0: Port device team_slave_1 added
[ 1906.399446][T19782] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1906.421530][T19782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1906.717392][T19974] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 1907.388094][T19782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1908.434717][T19782] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1909.180031][T19782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1909.231080][T19782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1909.576773][T13731] libceph: connect (1)[c::]:6789 error -101
[ 1909.595125][T13731] libceph: mon0 (1)[c::]:6789 connect error
[ 1909.926243][T20002] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0)
[ 1909.964135][T19993] ceph: No mds server is up or the cluster is laggy
[ 1910.797951][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1910.797973][   T30] audit: type=1326 audit(1751574413.471:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19998 comm="syz.6.3535" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f745df8e929 code=0x0
[ 1911.887479][T19782] hsr_slave_0: entered promiscuous mode
[ 1911.917621][T19782] hsr_slave_1: entered promiscuous mode
[ 1912.567792][T20015] netlink: 252 bytes leftover after parsing attributes in process `syz.6.3536'.
[ 1914.558101][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.564686][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.887668][T20023] bridge0: left allmulticast mode
[ 1915.301955][T16551] lo speed is unknown, defaulting to 1000
[ 1919.840211][T20056] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1922.216661][T20079] xt_nat: multiple ranges no longer supported
[ 1923.141926][T19782] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1923.225325][T20084] overlayfs: failed to clone lowerpath
[ 1924.073308][T19782] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1924.101972][T19782] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1924.676178][T19782] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1926.086494][T20114] FAT-fs (nullb0): bogus number of reserved sectors
[ 1926.094882][T20114] FAT-fs (nullb0): Can't find a valid FAT filesystem
[ 1926.783082][ T5820] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1926.892245][T19782] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1926.985306][T20123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15
[ 1927.215292][T13731] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1927.450812][T19782] 8021q: adding VLAN 0 to HW filter on device team0
[ 1927.472280][T14157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1927.479611][T14157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1927.515125][T14157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1927.522506][T14157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1927.573018][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1927.595317][ T5820] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[ 1927.623685][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1927.636095][ T5820] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[ 1928.166571][T13731] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1928.181055][T20128] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3563'.
[ 1928.190783][T13731] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1928.201331][ T5820] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3
[ 1928.212242][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1928.234425][T13731] usb 9-1: config 0 descriptor??
[ 1928.239338][ T5820] usb 7-1: Product: syz
[ 1928.256874][T13731] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1928.261975][ T5820] usb 7-1: Manufacturer: syz
[ 1928.275469][ T5820] usb 7-1: SerialNumber: syz
[ 1928.288715][ T5820] usb 7-1: config 0 descriptor??
[ 1928.307100][ T5820] kvaser_usb 7-1:0.0: error -EMSGSIZE: Cannot get software info
[ 1928.328150][ T5820] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90
[ 1928.781520][ T5820] usb 7-1: USB disconnect, device number 8
[ 1929.080679][T13731] cpia1 9-1:0.0: unexpected state after lo power cmd: 00
[ 1929.543673][T13731] gspca_cpia1: usb_control_msg 02, error -71
[ 1929.553176][T13731] gspca_cpia1: usb_control_msg 05, error -71
[ 1929.559228][T13731] cpia1 9-1:0.0: unexpected systemstate: 00
[ 1929.820354][T13731] usb 9-1: USB disconnect, device number 2
[ 1929.858662][T20146] netlink: 'syz.6.3566': attribute type 2 has an invalid length.
[ 1929.879759][T19782] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1930.160599][T20155] xt_SECMARK: invalid mode: 2
[ 1932.203149][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'.
[ 1932.266064][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'.
[ 1934.496810][T20188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16
[ 1937.163817][T13656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1937.177379][T13656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1937.186215][T13656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1937.199307][T13656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1937.209773][T13656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1937.622349][T20211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1938.124286][T20207] lo speed is unknown, defaulting to 1000
[ 1938.138288][T20207] lo speed is unknown, defaulting to 1000
[ 1938.174300][T20207] lo speed is unknown, defaulting to 1000
[ 1939.283713][T17177] Bluetooth: hci2: command tx timeout
[ 1939.596380][T20220] openvswitch: netlink: Message has 4 unknown bytes.
[ 1941.436651][T17177] Bluetooth: hci2: command tx timeout
[ 1943.516238][T17177] Bluetooth: hci2: command tx timeout
[ 1945.596608][T17177] Bluetooth: hci2: command tx timeout
[ 1945.629242][   T30] audit: type=1326 audit(1751574704.424:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20255 comm="syz.2.3592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc75098e929 code=0x0
[ 1946.454767][T20207] chnl_net:caif_netlink_parms(): no params data found
[ 1946.642428][T13934] bridge_slave_1: left allmulticast mode
[ 1946.658498][T13934] bridge_slave_1: left promiscuous mode
[ 1946.687392][T20275] overlayfs: failed to clone upperpath
[ 1946.695944][T13934] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1946.886784][T13934] bridge_slave_0: left allmulticast mode
[ 1946.892525][T13934] bridge_slave_0: left promiscuous mode
[ 1946.903165][T13934] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1950.794748][   T30] audit: type=1326 audit(1751574710.324:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20305 comm="syz.2.3601" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc75098e929 code=0x0
[ 1951.832361][T20319] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input17
[ 1952.587866][T20321] overlayfs: failed to clone upperpath
[ 1955.659768][T13934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1955.686426][T13934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1955.700563][T13934] bond0 (unregistering): Released all slaves
[ 1956.015350][T13934] hsr_slave_0: left promiscuous mode
[ 1956.032480][T13934] hsr_slave_1: left promiscuous mode
[ 1956.042306][T13934] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1956.683957][T13934] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1959.492454][T17177] Bluetooth: hci4: SCO packet for unknown connection handle 200
[ 1961.136694][T13934] team0 (unregistering): Port device team_slave_1 removed
[ 1961.967135][T13934] team0 (unregistering): Port device team_slave_0 removed
[ 1962.992668][T20207] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1963.005648][T20207] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1963.014105][T20207] bridge_slave_0: entered allmulticast mode
[ 1963.021618][T20207] bridge_slave_0: entered promiscuous mode
[ 1963.036390][T20207] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1963.053313][T20207] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1963.060693][T20207] bridge_slave_1: entered allmulticast mode
[ 1963.156116][T20207] bridge_slave_1: entered promiscuous mode
[ 1963.334433][T20376] 9pnet_fd: Insufficient options for proto=fd
[ 1963.369729][T20207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1963.537603][T20378] 9pnet_virtio: no channels available for device syz
[ 1963.555135][T20207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1963.725151][T20207] team0: Port device team_slave_0 added
[ 1963.748392][T20207] team0: Port device team_slave_1 added
[ 1964.965285][T20207] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1965.591682][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1965.622166][T20207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1965.635172][T20207] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1965.642207][T20207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1965.764599][T20207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1965.858979][T20394] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3621'.
[ 1966.228452][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3622'.
[ 1966.237564][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3622'.
[ 1967.179160][T17177] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1
[ 1967.193665][T17177] Bluetooth: hci4: unexpected event for opcode 0x2039
[ 1967.514141][   T30] audit: type=1800 audit(1751574726.684:337): pid=20409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.3623" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1968.094674][T20207] hsr_slave_0: entered promiscuous mode
[ 1968.101436][T20207] hsr_slave_1: entered promiscuous mode
[ 1970.651841][T20436] fuse: Bad value for 'fd'
[ 1970.675949][T20436] Invalid source name
[ 1970.676030][T20436] UBIFS error (pid: 20436): cannot open "./file0", error -22
[ 1970.771918][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3631'.
[ 1971.206847][T17177] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1971.206927][T17177] Bluetooth: hci4: Injecting HCI hardware error event
[ 1971.210625][T17177] Bluetooth: hci4: hardware error 0x00
[ 1971.387554][T20436] team0: Port device team_slave_1 removed
[ 1972.450576][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'.
[ 1972.450671][T20450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'.
[ 1973.415217][   T30] audit: type=1326 audit(1751574732.944:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.415259][   T30] audit: type=1326 audit(1751574732.944:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.415911][   T30] audit: type=1326 audit(1751574732.944:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.415947][   T30] audit: type=1326 audit(1751574732.944:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.415979][   T30] audit: type=1326 audit(1751574732.944:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.416951][   T30] audit: type=1326 audit(1751574732.944:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.416987][   T30] audit: type=1326 audit(1751574732.944:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.417021][   T30] audit: type=1326 audit(1751574732.944:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.418079][   T30] audit: type=1326 audit(1751574732.944:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.418121][   T30] audit: type=1326 audit(1751574732.944:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20440 comm="syz.6.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 1973.454861][T17177] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1976.010407][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.010497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.123513][T20207] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1976.186960][T20207] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1976.206215][T20207] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1976.226947][T20207] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1976.557748][T20486] xt_nat: multiple ranges no longer supported
[ 1977.547878][T20488] netlink: 'syz.8.3642': attribute type 10 has an invalid length.
[ 1979.187304][T20488] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1980.289225][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'.
[ 1980.298229][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3645'.
[ 1982.764767][T20505] lo speed is unknown, defaulting to 1000
[ 1982.772434][T20505] lo speed is unknown, defaulting to 1000
[ 1982.780453][T20505] lo speed is unknown, defaulting to 1000
[ 1983.432405][T20207] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1984.187089][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1984.187109][   T30] audit: type=1326 audit(1751574743.714:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20499 comm="syz.6.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7fc00000
[ 1984.367450][T20207] 8021q: adding VLAN 0 to HW filter on device team0
[ 1984.416855][T16630] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1984.424140][T16630] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1984.549732][T16630] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1984.557042][T16630] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1985.363097][T13656] Bluetooth: hci2: command 0x0405 tx timeout
[ 1986.300196][T20534] could not allocate digest TFM handle poly1305-generic
[ 1987.681050][T20207] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1988.255870][T20563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input18
[ 1988.302855][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3657'.
[ 1988.311798][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3657'.
[ 1990.717694][T20582] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1992.384256][T20207] veth0_vlan: entered promiscuous mode
[ 1992.428692][T20207] veth1_vlan: entered promiscuous mode
[ 1993.500336][T20207] veth0_macvtap: entered promiscuous mode
[ 1995.240185][T20620] Bluetooth: (null): Invalid header checksum
[ 1998.612941][T20634] xt_SECMARK: invalid mode: 2
[ 1998.699824][T13656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1998.711173][T13656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1998.720601][T13656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1998.733235][T13656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1998.742615][T13656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1998.792416][T20639] lo speed is unknown, defaulting to 1000
[ 1998.800472][T20639] lo speed is unknown, defaulting to 1000
[ 1998.808641][T20639] lo speed is unknown, defaulting to 1000
[ 1999.973913][T20647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'.
[ 2000.777228][T20653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19
[ 2000.941322][T13656] Bluetooth: hci5: command tx timeout
[ 2001.386060][   T30] audit: type=1326 audit(1751574760.914:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2001.639461][   T30] audit: type=1326 audit(1751574760.934:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2001.663484][   T30] audit: type=1326 audit(1751574760.934:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2001.686954][   T30] audit: type=1326 audit(1751574760.934:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2001.709309][   T30] audit: type=1326 audit(1751574760.934:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2002.726053][   T30] audit: type=1326 audit(1751574760.934:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2002.917940][   T30] audit: type=1326 audit(1751574760.934:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2002.968608][T13656] Bluetooth: hci5: command tx timeout
[ 2002.982925][   T30] audit: type=1326 audit(1751574760.934:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2003.013580][   T30] audit: type=1326 audit(1751574760.934:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2003.519358][   T30] audit: type=1326 audit(1751574760.934:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20656 comm="syz.2.3680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75098e929 code=0x7ffc0000
[ 2003.581772][T20675] netlink: 'syz.2.3684': attribute type 11 has an invalid length.
[ 2004.776069][T20664] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2004.785245][T20664] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2004.797487][T20664] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2004.807179][T20664] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2005.043128][T13656] Bluetooth: hci5: command tx timeout
[ 2005.110533][T20639] chnl_net:caif_netlink_parms(): no params data found
[ 2007.112923][T13656] Bluetooth: hci5: command tx timeout
[ 2008.516148][T20715] loop9: detected capacity change from 0 to 8
[ 2008.932269][T20715]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[ 2008.937701][T20715] loop9: partition table partially beyond EOD, truncated
[ 2008.945240][T20715] loop9: p1 size 81768186 extends beyond EOD, truncated
[ 2009.178700][T20639] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2009.186985][T20639] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2009.195971][T20639] bridge_slave_0: entered allmulticast mode
[ 2010.191444][T20639] bridge_slave_0: entered promiscuous mode
[ 2010.824973][T20731] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input20
[ 2011.004674][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3693'.
[ 2011.330215][T20639] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2011.341204][T20639] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2011.349686][T20639] bridge_slave_1: entered allmulticast mode
[ 2011.975180][T20736] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2012.093710][T20639] bridge_slave_1: entered promiscuous mode
[ 2012.412342][T20740] SET target dimension over the limit!
[ 2012.498775][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 2012.498794][   T30] audit: type=1326 audit(1751574772.024:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2012.833598][T20639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2012.863207][   T30] audit: type=1326 audit(1751574772.024:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2012.901097][   T30] audit: type=1326 audit(1751574772.114:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2012.928187][   T30] audit: type=1326 audit(1751574772.114:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2013.146703][T20639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2014.627597][   T30] audit: type=1326 audit(1751574772.114:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2014.808430][T20639] team0: Port device team_slave_0 added
[ 2014.823393][   T30] audit: type=1326 audit(1751574772.114:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2015.450597][T20755] xt_connbytes: Forcing CT accounting to be enabled
[ 2015.457742][T20755] Cannot find set identified by id 0 to match
[ 2015.637412][T20639] team0: Port device team_slave_1 added
[ 2015.664376][   T30] audit: type=1326 audit(1751574772.114:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2015.909627][   T30] audit: type=1326 audit(1751574772.124:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2015.932824][   T30] audit: type=1326 audit(1751574772.124:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2015.956600][T16630] bridge_slave_1: left allmulticast mode
[ 2015.962392][T16630] bridge_slave_1: left promiscuous mode
[ 2016.034575][T16630] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2016.076932][   T30] audit: type=1326 audit(1751574772.124:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20738 comm="syz.6.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2016.101494][T16630] bridge_slave_0: left allmulticast mode
[ 2017.011893][T16630] bridge_slave_0: left promiscuous mode
[ 2017.018083][T16630] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2021.832090][T20802] PKCS7: Unknown OID: [5] (bad)
[ 2021.837357][T20802] PKCS7: Only support pkcs7_signedData type
[ 2023.855039][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3718'.
[ 2023.942127][T20829] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed
[ 2023.960108][T16630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2023.973335][T16630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2023.986026][T16630] bond0 (unregistering): Released all slaves
[ 2024.178221][T20639] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2024.204241][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2024.240916][T20639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2024.267984][T20639] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2024.276330][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2024.303611][T20639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2024.401936][T16630] hsr_slave_0: left promiscuous mode
[ 2024.421449][T16630] hsr_slave_1: left promiscuous mode
[ 2024.430778][T16630] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2024.693018][T16630] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2025.314134][T16630] veth0_macvtap: left promiscuous mode
[ 2025.324900][T16630] veth1_vlan: left promiscuous mode
[ 2025.333183][T16630] veth0_vlan: left promiscuous mode
[ 2029.988589][T16630] team0 (unregistering): Port device team_slave_1 removed
[ 2030.105137][T16630] team0 (unregistering): Port device team_slave_0 removed
[ 2030.327451][T20862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21
[ 2030.494439][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3727'.
[ 2032.074137][T20639] hsr_slave_0: entered promiscuous mode
[ 2032.081300][T20639] hsr_slave_1: entered promiscuous mode
[ 2032.408854][T20871] 9pnet_virtio: no channels available for device syz
[ 2032.929878][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'.
[ 2033.862739][T20886] batadv_slave_0: left allmulticast mode
[ 2033.870469][T20233] lo speed is unknown, defaulting to 1000
[ 2033.872323][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3736'.
[ 2034.716688][T20901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22
[ 2034.866830][T20902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3737'.
[ 2036.956618][T20639] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2037.046806][T20639] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2037.145613][T20916] delete_channel: no stack
[ 2037.151201][T20639] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2037.252247][T20639] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2037.441134][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.447945][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.048875][T20639] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2038.110039][T20639] 8021q: adding VLAN 0 to HW filter on device team0
[ 2038.334807][T16630] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2038.342045][T16630] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2038.350360][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3745'.
[ 2038.353775][T16630] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2038.366483][T16630] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2038.441558][T20939] netlink: 'syz.8.3746': attribute type 23 has an invalid length.
[ 2038.654679][T20639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2039.152321][T20948] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2039.156228][T20639] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2039.175159][T20948] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2039.726763][T20959] xt_hashlimit: size too large, truncated to 1048576
[ 2039.845848][T20962] netlink: 'syz.2.3750': attribute type 33 has an invalid length.
[ 2039.885466][T20962] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3750'.
[ 2041.535579][T20986] No such timeout policy "syz1"
[ 2042.616812][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3754'.
[ 2044.015702][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3758'.
[ 2044.885821][T20639] veth0_vlan: entered promiscuous mode
[ 2044.983865][T20639] veth1_vlan: entered promiscuous mode
[ 2045.173758][T20307] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 2045.972995][   T30] kauditd_printk_skb: 30 callbacks suppressed
[ 2045.973016][   T30] audit: type=1326 audit(1751574804.904:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21013 comm="syz.8.3761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f718e929 code=0x0
[ 2046.367178][T20639] veth0_macvtap: entered promiscuous mode
[ 2046.432914][T20307] usb 7-1: Using ep0 maxpacket: 8
[ 2046.449046][T20639] veth1_macvtap: entered promiscuous mode
[ 2046.465576][T20307] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[ 2046.503970][T20307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2046.518511][T20639] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2046.530270][T20307] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 2046.550523][T20639] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2046.562027][T20307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2046.571290][T20307] usb 7-1: Product: syz
[ 2046.579067][T20307] usb 7-1: Manufacturer: syz
[ 2046.591000][T20639] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2046.600595][T20307] usb 7-1: SerialNumber: syz
[ 2046.607658][T20639] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2046.618021][T20307] usb 7-1: config 0 descriptor??
[ 2046.624163][T20639] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2046.641079][T20307] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[ 2046.646943][T20639] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2046.779611][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2046.797274][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2046.833708][T14168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2046.841793][T14168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2047.450268][T21012] 9pnet_virtio: no channels available for device syz
[ 2047.778090][ T1776] usb 7-1: USB disconnect, device number 9
[ 2049.193261][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3772'.
[ 2050.040701][T21059] i2c i2c-0: Invalid block write size 34
[ 2054.670232][T21098] 9pnet_virtio: no channels available for device syz
[ 2054.837680][T21102] IPVS: set_ctl: invalid protocol: 216 172.20.20.170:20003
[ 2057.646085][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3787'.
[ 2059.284472][T21131] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2060.350120][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3792'.
[ 2060.971214][T21141] netlink: 'syz.2.3795': attribute type 29 has an invalid length.
[ 2061.043137][ T1776] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 2061.215142][ T1776] usb 7-1: Using ep0 maxpacket: 8
[ 2061.226006][ T1776] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[ 2061.277576][ T1776] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2061.983348][ T1776] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 2061.992479][ T1776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2062.012823][ T1776] usb 7-1: Product: syz
[ 2062.017059][ T1776] usb 7-1: Manufacturer: syz
[ 2062.021696][ T1776] usb 7-1: SerialNumber: syz
[ 2062.046822][ T1776] usb 7-1: config 0 descriptor??
[ 2062.061637][ T1776] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[ 2063.207217][T21138] 9pnet_virtio: no channels available for device syz
[ 2063.216916][T19162] usb 7-1: USB disconnect, device number 10
[ 2063.541645][T21174] virtio-fs: tag </dev/md0> not found
[ 2067.720005][T21214] syz.6.3811: attempt to access beyond end of device
[ 2067.720005][T21214] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0
[ 2067.733544][T21214] qnx6: unable to read the first superblock
[ 2067.739682][T21214] syz.6.3811: attempt to access beyond end of device
[ 2067.739682][T21214] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[ 2067.752822][T21214] qnx6: unable to read the first superblock
[ 2067.758789][T21214] qnx6: unable to read the first superblock
[ 2068.383481][T21223] 9pnet_virtio: no channels available for device syz
[ 2070.476124][T13096] IPVS: starting estimator thread 0...
[ 2072.244576][T21233] IPVS: using max 25 ests per chain, 60000 per kthread
[ 2073.036747][T21241] blkio.reset_stats is deprecated
[ 2073.316403][T21240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3817'.
[ 2074.263909][T21254] netlink: 'syz.9.3820': attribute type 10 has an invalid length.
[ 2074.830016][T21254] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2074.840362][T21254] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 2076.180844][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3825'.
[ 2076.190142][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3825'.
[ 2078.773121][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3828'.
[ 2078.782233][T21285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3828'.
[ 2079.040173][T21288] [U] „
[ 2082.887269][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'.
[ 2082.887304][T21308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'.
[ 2087.175764][T21345] ip6tnl1: entered promiscuous mode
[ 2087.181208][T21345] ip6tnl1: entered allmulticast mode
[ 2087.277911][T21351] syz.8.3840: attempt to access beyond end of device
[ 2087.277911][T21351] nbd8: rw=0, sector=64, nr_sectors = 1 limit=0
[ 2087.313371][T21351] syz.8.3840: attempt to access beyond end of device
[ 2087.313371][T21351] nbd8: rw=0, sector=256, nr_sectors = 1 limit=0
[ 2087.949441][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 2088.114267][T21351] syz.8.3840: attempt to access beyond end of device
[ 2088.114267][T21351] nbd8: rw=0, sector=512, nr_sectors = 1 limit=0
[ 2088.383869][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 2088.395700][T21351] syz.8.3840: attempt to access beyond end of device
[ 2088.395700][T21351] nbd8: rw=0, sector=64, nr_sectors = 2 limit=0
[ 2088.412834][T21351] syz.8.3840: attempt to access beyond end of device
[ 2088.412834][T21351] nbd8: rw=0, sector=512, nr_sectors = 2 limit=0
[ 2088.433942][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 2088.495888][T21351] syz.8.3840: attempt to access beyond end of device
[ 2088.495888][T21351] nbd8: rw=0, sector=1024, nr_sectors = 2 limit=0
[ 2089.456700][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 2089.467425][T21351] syz.8.3840: attempt to access beyond end of device
[ 2089.467425][T21351] nbd8: rw=0, sector=64, nr_sectors = 4 limit=0
[ 2089.506346][T21351] syz.8.3840: attempt to access beyond end of device
[ 2089.506346][T21351] nbd8: rw=0, sector=1024, nr_sectors = 4 limit=0
[ 2090.528873][T21362] syz.6.3847 (21362): drop_caches: 2
[ 2090.547372][T21362] syz.6.3847 (21362): drop_caches: 2
[ 2091.104995][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 2091.116077][T21351] syz.8.3840: attempt to access beyond end of device
[ 2091.116077][T21351] nbd8: rw=0, sector=2048, nr_sectors = 4 limit=0
[ 2091.152973][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 2091.194316][T21351] syz.8.3840: attempt to access beyond end of device
[ 2091.194316][T21351] nbd8: rw=0, sector=64, nr_sectors = 8 limit=0
[ 2091.283904][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256
[ 2092.028401][T21351] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512
[ 2092.140156][T21351] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1)
[ 2097.177547][T21382] ceph: No mds server is up or the cluster is laggy
[ 2097.280276][T20307] libceph: connect (1)[c::]:6789 error -101
[ 2097.426689][T20307] libceph: mon0 (1)[c::]:6789 connect error
[ 2097.638991][T21392] hsr0: entered promiscuous mode
[ 2097.646344][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'.
[ 2097.935843][T21394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3853'.
[ 2098.237700][T21392] hsr_slave_0: left promiscuous mode
[ 2098.440932][T21392] hsr_slave_1: left promiscuous mode
[ 2098.476133][T21392] hsr0 (unregistering): left promiscuous mode
[ 2099.263715][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.273845][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2103.202939][T21451] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3863'.
[ 2104.921383][T21451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2104.947645][T21451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2106.193654][T21451] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 2106.488478][T21451] bond0 (unregistering): Released all slaves
[ 2107.057791][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3870'.
[ 2108.804993][T21483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3873'.
[ 2110.396065][T21495] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3875'.
[ 2113.596647][T21506] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[ 2113.707829][T16630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2114.118947][T16630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2114.957902][   T30] audit: type=1400 audit(1751574874.484:432): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21518 comm="syz.2.3881" dest=2
[ 2116.541583][T21530] vivid-007: =================  START STATUS  =================
[ 2116.549675][T21530] vivid-007: Enable Output Cropping: true
[ 2116.556405][T21530] vivid-007: Enable Output Composing: true
[ 2116.562244][T21530] vivid-007: Enable Output Scaler: true
[ 2116.567909][T21530] vivid-007: Tx RGB Quantization Range: Automatic
[ 2116.574424][T21530] vivid-007: Transmit Mode: HDMI
[ 2116.579381][T21530] vivid-007: Hotplug Present: 0x00000000
[ 2116.585092][T21530] vivid-007: RxSense Present: 0x00000000
[ 2116.590800][T21530] vivid-007: EDID Present: 0x00000000
[ 2116.596337][T21530] vivid-007: ==================  END STATUS  ==================
[ 2120.467438][T21557] netlink: 'syz.9.3891': attribute type 13 has an invalid length.
[ 2120.473167][   T30] audit: type=1400 audit(1751574879.884:433): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21532 comm="syz.8.3885" dest=2
[ 2120.727815][T21563] netlink: 'syz.2.3890': attribute type 10 has an invalid length.
[ 2121.619945][T21557] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2121.627648][T21557] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2122.468750][   T30] audit: type=1326 audit(1751574881.994:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2122.648262][   T30] audit: type=1326 audit(1751574881.994:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2122.764356][T21579] netlink: 'syz.6.3895': attribute type 10 has an invalid length.
[ 2122.772702][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3895'.
[ 2123.331745][   T30] audit: type=1326 audit(1751574882.024:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.362345][   T30] audit: type=1326 audit(1751574882.024:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.391807][   T30] audit: type=1326 audit(1751574882.024:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.443728][   T30] audit: type=1326 audit(1751574882.024:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.471404][   T30] audit: type=1326 audit(1751574882.164:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.512292][   T30] audit: type=1326 audit(1751574882.164:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.515300][T21557] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2123.537221][   T30] audit: type=1326 audit(1751574882.174:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21575 comm="syz.6.3895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f745df8e929 code=0x7ffc0000
[ 2123.584446][T21557] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2123.740716][T21557] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2123.751094][T21557] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2123.761017][T21557] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2123.771882][T21557] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2123.848217][T21560] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 2123.941715][T21563] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2124.002579][T21563] .: (slave batadv0): Enslaving as an active interface with an up link
[ 2124.986777][T21591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2125.253431][T21579] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 2126.830581][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 2126.830600][   T30] audit: type=1400 audit(1751574886.354:450): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21599 comm="syz.7.3900" dest=2
[ 2129.926654][   T30] audit: type=1400 audit(1751574889.064:451): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21609 comm="syz.7.3902" daddr=ff02::1
[ 2130.476899][T21625] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2132.223180][T18906] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 2132.452991][T18906] usb 9-1: Using ep0 maxpacket: 8
[ 2132.469396][   T30] audit: type=1400 audit(1751574891.984:452): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21641 comm="syz.6.3912" dest=2
[ 2132.534515][T18906] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[ 2132.566199][T18906] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2132.602475][T18906] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 2133.055800][T18906] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2133.207037][T21650] ceph: No mds server is up or the cluster is laggy
[ 2133.243014][T21653] vxfs: WRONG superblock magic 00000000 at 1
[ 2133.251252][T21653] vxfs: WRONG superblock magic 00000000 at 8
[ 2133.257400][T21653] vxfs: can't find superblock.
[ 2133.272380][T19162] libceph: connect (1)[c::]:6789 error -101
[ 2133.287565][T19162] libceph: mon0 (1)[c::]:6789 connect error
[ 2133.696171][T19162] libceph: connect (1)[c::]:6789 error -101
[ 2133.702335][T19162] libceph: mon0 (1)[c::]:6789 connect error
[ 2133.849568][T18906] usb 9-1: Product: syz
[ 2133.884345][T18906] usb 9-1: Manufacturer: syz
[ 2133.910322][T18906] usb 9-1: SerialNumber: syz
[ 2133.944456][T18906] usb 9-1: config 0 descriptor??
[ 2134.141205][T18906] usb 9-1: can't set config #0, error -71
[ 2134.149684][T18906] usb 9-1: USB disconnect, device number 3
[ 2137.147076][T21682] netlink: 'syz.8.3918': attribute type 10 has an invalid length.
[ 2137.653723][T21684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3921'.
[ 2139.426660][T21700] : entered promiscuous mode
[ 2140.397233][T21709] 9pnet_fd: Insufficient options for proto=fd
[ 2141.295873][T13096] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 2141.363291][T21716] overlayfs: failed to resolve './file1': -2
[ 2141.371864][T21716] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3927'.
[ 2141.394794][T21718] overlayfs: failed to clone upperpath
[ 2141.513080][T13096] usb 7-1: Using ep0 maxpacket: 8
[ 2141.560560][T13096] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[ 2141.602819][T13096] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 2141.630215][T13096] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 2141.649837][T13096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2141.668313][T13096] usb 7-1: Product: syz
[ 2141.678417][T13096] usb 7-1: Manufacturer: syz
[ 2141.688524][T13096] usb 7-1: SerialNumber: syz
[ 2141.704754][T13096] usb 7-1: config 0 descriptor??
[ 2141.716950][T13096] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[ 2142.896933][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3930'.
[ 2143.740129][T21715] 9pnet_virtio: no channels available for device syz
[ 2143.750386][   T24] usb 7-1: USB disconnect, device number 11
[ 2148.107892][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'.
[ 2150.453399][   T30] audit: type=1400 audit(1751574909.724:453): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21765 comm="syz.8.3940" daddr=ff02::1
[ 2150.587445][   T45] kernel write not supported for file /vcsu (pid: 45 comm: kworker/1:1)
[ 2152.250293][   T30] audit: type=1400 audit(1751574911.774:454): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21773 comm="syz.8.3943" dest=2
[ 2152.280899][T21790] tty tty1: ldisc open failed (-12), clearing slot 0
[ 2153.778646][   T30] audit: type=1400 audit(1751574913.304:455): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=21804 comm="syz.2.3947" dest=2
[ 2283.195632][    C0] ------------[ cut here ]------------
[ 2283.202707][    C0] WARNING: CPU: 0 PID: 21821 at kernel/rcu/tree_stall.h:1015 rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.213360][    C0] Modules linked in:
[ 2283.218338][    C0] CPU: 0 UID: 0 PID: 21821 Comm: syz.8.3952 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[ 2283.230448][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2283.240538][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.246913][    C0] Code: ff ff 48 c7 c7 40 34 a9 99 be 04 00 00 00 e8 43 02 7a 00 4c 89 f7 b8 01 00 00 00 87 05 35 8e 01 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff c0 41 14 8e 74 47 48 c7 c0 30 12 a0 8f 48 c1 e8
[ 2283.266546][    C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046
[ 2283.272643][    C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7a5fd
[ 2283.280730][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e1441c0
[ 2283.288835][    C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004
[ 2283.296847][    C0] R10: dffffc0000000000 R11: fffffbfff3352688 R12: 0000000000002904
[ 2283.305035][    C0] R13: 1ffff110170c75c2 R14: ffffffff8e1441c0 R15: dffffc0000000000
[ 2283.313042][    C0] FS:  00007fe7f4fd56c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000
[ 2283.322001][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2283.328612][    C0] CR2: 0000001b2e907ff8 CR3: 0000000066268000 CR4: 00000000003526f0
[ 2283.336629][    C0] Call Trace:
[ 2283.339946][    C0]  <IRQ>
[ 2283.342823][    C0]  rcu_core+0x5f7/0x1710
[ 2283.347119][    C0]  ? __lock_acquire+0xab9/0xd20
[ 2283.352016][    C0]  ? ktime_get+0x3e/0x1f0
[ 2283.356383][    C0]  ? __pfx_rcu_core+0x10/0x10
[ 2283.361105][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 2283.366340][    C0]  ? sched_clock+0x3f/0x60
[ 2283.370789][    C0]  ? sched_clock_cpu+0x74/0x430
[ 2283.375677][    C0]  ? ktime_get+0x3e/0x1f0
[ 2283.380053][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[ 2283.386324][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 2283.391658][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 2283.397524][    C0]  handle_softirqs+0x283/0x870
[ 2283.402337][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 2283.407147][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2283.412477][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 2283.417712][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 2283.422344][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 2283.427590][    C0]  irq_exit_rcu+0x9/0x30
[ 2283.431870][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2283.437534][    C0]  </IRQ>
[ 2283.440484][    C0]  <TASK>
[ 2283.443443][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2283.449458][    C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0
[ 2283.456173][    C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b
[ 2283.475916][    C0] RSP: 0018:ffffc9000e2df600 EFLAGS: 00000246
[ 2283.482018][    C0] RAX: ffffffff81b4d850 RBX: ffff8880b863b040 RCX: 0000000000080000
[ 2283.490031][    C0] RDX: ffffc9001b337000 RSI: 000000000007ffff RDI: 0000000000080000
[ 2283.498028][    C0] RBP: ffffc9000e2df760 R08: ffffffff8f9fe0f7 R09: 1ffffffff1f3fc1e
[ 2283.506032][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fc1f R12: 1ffff110170e7f2d
[ 2283.514206][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968
[ 2283.522223][    C0]  ? smp_call_function_many_cond+0xf80/0x12d0
[ 2283.528368][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 2283.534748][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 2283.540149][    C0]  ? avic_vcpu_unblocking+0x1d/0x100
[ 2283.545462][    C0]  ? __pfx___text_poke+0x10/0x10
[ 2283.550428][    C0]  ? rcu_is_watching+0x15/0xb0
[ 2283.555237][    C0]  ? trace_contention_end+0x39/0x120
[ 2283.560560][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 2283.565608][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[ 2283.570765][    C0]  smp_text_poke_batch_finish+0x5e0/0x1100
[ 2283.576605][    C0]  ? __pfx___mutex_lock+0x10/0x10
[ 2283.581670][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 2283.587945][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[ 2283.594220][    C0]  ? __jump_label_update+0x37e/0x3a0
[ 2283.599551][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 2283.605583][    C0]  static_key_slow_inc_cpuslocked+0x80/0xf0
[ 2283.611525][    C0]  static_key_slow_inc+0x1a/0x30
[ 2283.616700][    C0]  kvm_create_lapic+0x110/0x400
[ 2283.621587][    C0]  kvm_arch_vcpu_create+0x1ec/0x920
[ 2283.626828][    C0]  kvm_vm_ioctl_create_vcpu+0x429/0x930
[ 2283.632428][    C0]  kvm_vm_ioctl+0x7f7/0xc60
[ 2283.636982][    C0]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 2283.642051][    C0]  ? do_vfs_ioctl+0x12ba/0x1990
[ 2283.646955][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2283.652021][    C0]  ? kasan_quarantine_put+0xdd/0x220
[ 2283.657355][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2283.663024][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2283.668697][    C0]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 2283.674363][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2283.680034][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2283.686070][    C0]  ? __lock_acquire+0xab9/0xd20
[ 2283.690960][    C0]  ? __asan_memset+0x22/0x50
[ 2283.695575][    C0]  ? smack_file_ioctl+0x302/0x340
[ 2283.700638][    C0]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 2283.706060][    C0]  ? __fget_files+0x2a/0x420
[ 2283.710694][    C0]  ? __fget_files+0x3a0/0x420
[ 2283.715401][    C0]  ? __fget_files+0x2a/0x420
[ 2283.720033][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 2283.725007][    C0]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 2283.730077][    C0]  __se_sys_ioctl+0xfc/0x170
[ 2283.734704][    C0]  do_syscall_64+0xfa/0x3b0
[ 2283.739256][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2283.744489][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2283.750603][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 2283.755313][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2283.761241][    C0] RIP: 0033:0x7fe7f718e929
[ 2283.765701][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2283.785342][    C0] RSP: 002b:00007fe7f4fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2283.793792][    C0] RAX: ffffffffffffffda RBX: 00007fe7f73b6160 RCX: 00007fe7f718e929
[ 2283.801793][    C0] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009
[ 2283.809804][    C0] RBP: 00007fe7f7210b39 R08: 0000000000000000 R09: 0000000000000000
[ 2283.817822][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2283.825842][    C0] R13: 0000000000000000 R14: 00007fe7f73b6160 R15: 00007ffd6558dbc8
[ 2283.833877][    C0]  </TASK>
[ 2283.836955][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2283.844269][    C0] CPU: 0 UID: 0 PID: 21821 Comm: syz.8.3952 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) 
[ 2283.856386][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2283.866486][    C0] Call Trace:
[ 2283.869802][    C0]  <IRQ>
[ 2283.872686][    C0]  dump_stack_lvl+0x99/0x250
[ 2283.877331][    C0]  ? __asan_memcpy+0x40/0x70
[ 2283.881957][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2283.887208][    C0]  ? __pfx__printk+0x10/0x10
[ 2283.891849][    C0]  panic+0x2db/0x790
[ 2283.895795][    C0]  ? __pfx_panic+0x10/0x10
[ 2283.900276][    C0]  __warn+0x31b/0x4b0
[ 2283.904302][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.910057][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.915814][    C0]  report_bug+0x2be/0x4f0
[ 2283.920191][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.925946][    C0]  ? rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.931697][    C0]  ? rcu_check_gp_start_stall+0x2e6/0x470
[ 2283.937444][    C0]  handle_bug+0x84/0x160
[ 2283.941716][    C0]  exc_invalid_op+0x1a/0x50
[ 2283.946247][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 2283.951128][    C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470
[ 2283.957492][    C0] Code: ff ff 48 c7 c7 40 34 a9 99 be 04 00 00 00 e8 43 02 7a 00 4c 89 f7 b8 01 00 00 00 87 05 35 8e 01 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff c0 41 14 8e 74 47 48 c7 c0 30 12 a0 8f 48 c1 e8
[ 2283.977130][    C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046
[ 2283.983264][    C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7a5fd
[ 2283.991260][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e1441c0
[ 2283.999254][    C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004
[ 2284.007251][    C0] R10: dffffc0000000000 R11: fffffbfff3352688 R12: 0000000000002904
[ 2284.015251][    C0] R13: 1ffff110170c75c2 R14: ffffffff8e1441c0 R15: dffffc0000000000
[ 2284.023278][    C0]  ? rcu_check_gp_start_stall+0x2cd/0x470
[ 2284.029041][    C0]  ? rcu_check_gp_start_stall+0x2cd/0x470
[ 2284.034796][    C0]  rcu_core+0x5f7/0x1710
[ 2284.039078][    C0]  ? __lock_acquire+0xab9/0xd20
[ 2284.043971][    C0]  ? ktime_get+0x3e/0x1f0
[ 2284.048327][    C0]  ? __pfx_rcu_core+0x10/0x10
[ 2284.053050][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 2284.058280][    C0]  ? sched_clock+0x3f/0x60
[ 2284.062730][    C0]  ? sched_clock_cpu+0x74/0x430
[ 2284.067620][    C0]  ? ktime_get+0x3e/0x1f0
[ 2284.071974][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[ 2284.078249][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 2284.083591][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 2284.089452][    C0]  handle_softirqs+0x283/0x870
[ 2284.094263][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 2284.099071][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2284.104400][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 2284.109639][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 2284.114276][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 2284.119542][    C0]  irq_exit_rcu+0x9/0x30
[ 2284.123820][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2284.129490][    C0]  </IRQ>
[ 2284.132447][    C0]  <TASK>
[ 2284.135407][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2284.141421][    C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0
[ 2284.148140][    C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b
[ 2284.167873][    C0] RSP: 0018:ffffc9000e2df600 EFLAGS: 00000246
[ 2284.174001][    C0] RAX: ffffffff81b4d850 RBX: ffff8880b863b040 RCX: 0000000000080000
[ 2284.182080][    C0] RDX: ffffc9001b337000 RSI: 000000000007ffff RDI: 0000000000080000
[ 2284.190284][    C0] RBP: ffffc9000e2df760 R08: ffffffff8f9fe0f7 R09: 1ffffffff1f3fc1e
[ 2284.198303][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fc1f R12: 1ffff110170e7f2d
[ 2284.206318][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968
[ 2284.214340][    C0]  ? smp_call_function_many_cond+0xf80/0x12d0
[ 2284.220493][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 2284.226868][    C0]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 2284.232274][    C0]  ? avic_vcpu_unblocking+0x1d/0x100
[ 2284.237599][    C0]  ? __pfx___text_poke+0x10/0x10
[ 2284.242567][    C0]  ? rcu_is_watching+0x15/0xb0
[ 2284.247374][    C0]  ? trace_contention_end+0x39/0x120
[ 2284.252701][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 2284.257755][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[ 2284.262911][    C0]  smp_text_poke_batch_finish+0x5e0/0x1100
[ 2284.268758][    C0]  ? __pfx___mutex_lock+0x10/0x10
[ 2284.273829][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 2284.280200][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[ 2284.286488][    C0]  ? __jump_label_update+0x37e/0x3a0
[ 2284.291830][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 2284.297846][    C0]  static_key_slow_inc_cpuslocked+0x80/0xf0
[ 2284.303786][    C0]  static_key_slow_inc+0x1a/0x30
[ 2284.308771][    C0]  kvm_create_lapic+0x110/0x400
[ 2284.313696][    C0]  kvm_arch_vcpu_create+0x1ec/0x920
[ 2284.318957][    C0]  kvm_vm_ioctl_create_vcpu+0x429/0x930
[ 2284.324570][    C0]  kvm_vm_ioctl+0x7f7/0xc60
[ 2284.329129][    C0]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 2284.334202][    C0]  ? do_vfs_ioctl+0x12ba/0x1990
[ 2284.339103][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2284.344171][    C0]  ? kasan_quarantine_put+0xdd/0x220
[ 2284.349504][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2284.355199][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2284.360899][    C0]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[ 2284.366578][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2284.372250][    C0]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2284.378288][    C0]  ? __lock_acquire+0xab9/0xd20
[ 2284.383183][    C0]  ? __asan_memset+0x22/0x50
[ 2284.387813][    C0]  ? smack_file_ioctl+0x302/0x340
[ 2284.392874][    C0]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 2284.398298][    C0]  ? __fget_files+0x2a/0x420
[ 2284.402926][    C0]  ? __fget_files+0x3a0/0x420
[ 2284.407642][    C0]  ? __fget_files+0x2a/0x420
[ 2284.412273][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 2284.417254][    C0]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 2284.422319][    C0]  __se_sys_ioctl+0xfc/0x170
[ 2284.426948][    C0]  do_syscall_64+0xfa/0x3b0
[ 2284.431490][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2284.436728][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2284.442826][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 2284.447545][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2284.453472][    C0] RIP: 0033:0x7fe7f718e929
[ 2284.457932][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2284.477572][    C0] RSP: 002b:00007fe7f4fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2284.486023][    C0] RAX: ffffffffffffffda RBX: 00007fe7f73b6160 RCX: 00007fe7f718e929
[ 2284.494025][    C0] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000009
[ 2284.502059][    C0] RBP: 00007fe7f7210b39 R08: 0000000000000000 R09: 0000000000000000
[ 2284.510089][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2284.518102][    C0] R13: 0000000000000000 R14: 00007fe7f73b6160 R15: 00007ffd6558dbc8
[ 2284.526191][    C0]  </TASK>
[ 2285.689466][    C0] Shutting down cpus with NMI
[ 2285.694497][    C0] Kernel Offset: disabled
[ 2285.698854][    C0] Rebooting in 86400 seconds..