last executing test programs:

20.456706574s ago: executing program 3 (id=23):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x15, 0x5, 0x0)
connect$netrom(r4, &(0x7f00000000c0)={{0xa, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)

16.119357774s ago: executing program 1 (id=32):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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")
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1850010, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

16.114984547s ago: executing program 3 (id=33):
syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x55b1, &(0x7f0000005680)="$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")
syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./bus\x00', 0x4800, 0x0, 0x25, 0x0, &(0x7f0000000100))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8040, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x13, 0x6ad, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2d4801, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
readahead(r2, 0x5, 0x7fffffffffffffff)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000001400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x48040}}], 0x1, 0x4004080)
connect$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
io_uring_enter(r0, 0x33a6, 0x8ff, 0x68, &(0x7f0000000300)={[0xde8]}, 0x8)
openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x5, 0x5, 0x79bb})

13.651048129s ago: executing program 1 (id=36):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES32, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51a2f195aca4ce79a3b534f3fa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec19", @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$eJzs3UuMHEcZAODu3Z21nTh4HGxinJDYBJIIyG68a8zDgjiKL1gx4hYp4mI5TrBwDMKRIFEkbJ+4kcgyN8RDnHKJACGRC7Jy4hKJWOKSU+DAActIkThAgj1oZ6tmZ37PpGe9j97Z+T6ppqa7arqqZ3t6+1VVBTC2Jtqvjfbr5TcvHf3nQ//YtvD+8U6OZvt1qmtqIXeZpqfC8t6bXIxvvP/KyX5xWcy1X/P0ZNdn7yyK4nyxr7hSNIu9l6++9vbcU8cvHLu4/53XD19bg1UHAICx860rhw/u/ttf7t35wRv3Hym2dObn4/Nmmt6ejvuPpAP/hWiqzOcPS+cDZVfoNh3yTaUwEfJN9slXdOVr5Hxbez8Xy58Oy20MyLelovzJcI5ShvrAKMvbcbMoJ2Z6picmZmYWz8mL9nn9dDlz9vSZ587VVFFg1f37gaIo9gnCuIXWjs6PoPa61Be6vgWAWsX7hbc4H68srExnaVPDlX/9iYn+n+/VWM06Mj7We/tXflx+bz3Wu/yq9f/NhTVef8bK8FvT1jWtx2rL65V/R9vTdLyPEJ9fWu7+Jy9vMixv2AOAQfcRRuX+wqB6Tq5zPW7XoPrH7WKz+lqK8/fw9ZDe/fuJf9NR+RsD/f1nw13/37ZUudrrIgibO7Tq3PkA9ao4rY/PzbWSnB6f64vpWyrSt1akb6tIv6Mi/c6KdBhnv3/xp8WrZdG3PV6xeP7f/rEMez0sX2e7K8UfW2Z94vXI5V6Pi8/9LtdKy4/PE8NG9scTT5/68rPPXF18/r/sbP830/a+L00302/rSsqQrxfG6+qdZ/+bveVMDMh3d6jPXX3yt9/v6s1X7lpaTtG1n7mlHnt6P7djUL77evM1Q75tKcTDpXh8ckf4XD7+yPvV/H1NhfVthPWYDvXI+5WdKR6tuzFsVHl7HPT8f94+9xSN8rnTZ049lqbzdvrnycaWhfkH1rnewMoN2/5nT9Hb/md7Z35jonu/sGNpftm9X2iG+XMD5s+n6fx/7juT29rzZ05+78yzq73yMObOvfTyd0+cOXPqB9544403nTd175mAtTb74gvfnz330suPnn7hxPOnnj91dv7Qofm5uUNfmT842z6un+0+ugc2k6V/+nXXBAAAAAAAAAAAABjWD48dvfrXt7707mL7/6X2f7n9f37yN7f//0lo/x/byed28Lkd4M4+6e08oYPV6ZCvkcLHQ313hXJ2h899IsWdcfxS+/9cXOzXNdfnnjA/9t+b84XuBG7pL2U69EESxwv8dIovpvjXBdSo/Hn/2Smu6t86b+u5fwr9Uoym/HfL/Znkfkxy++9B/Trl/f/O/ov98WrXk9W1Hs0J615HoL9/bbj+v9ckLHX4WXtdus4Yaq+LsNHCjVartZ7ltVofNYqHsaaA9VP3+J/5umeOz/7pG1sXQs52/Yne/WXsvxRWou7xL2srP19YHNf1H7L81R7/szP+3dD7vzBiXvP2yv3vL66921VssXdg+VuKnvLj+ud+oHctr/wPUvl5bR4uBpXfu/6tX4Xy4w2hIX0Yyr9jyPLj+l9absGpwP+l8vPX9siDw5a/uIByorce8bpxvv8XrxtnN8L65749l7v+tztQ481UPoyzURlndrl6xv+90Fr/8X9XOMJQfA7ji2k67wjzcw5xvJPl1j8/X5H/D+wOyy8r/r8Z/3e0fTXFVb+HPP5v3h6bfaYnuqYbfb7bzbqvgVH13qrd/+t6Ym4D3EcRxieUtrnbDq1Wq9abfO4w1qvu77/u84S6y6/7+68Sx/+Nx/Bx/N+YHsf/jelx/N+Y3r6u+OHSoL3x+4rj/8b0OP5vTL8nlBvHB95Tkf7JivS9Fen3VqTfV5H+qYr0/RXp91ekP1CRfndF+oMV6Z8Jf/GY/tmKzz9Ukf7IR6fP/6ji85tdbo8yrusP4yy2z/P7h/GR7/8M+v3vqkgHRtfP3jjw5DO/+3Zzsf3/dOd6SL6PdyRNN9K5czxfitdPJlPaW2n67yF9o1/vgHES+8+I/98frkgHRld+zsvvG8ZQ2b/HnmH7rRp0nM9o+VyKP5/iL6T40RTPpHg2xQdSPLdO9WNtPPnbPxx+tVw6398R0od9njy2B4r9RM0PWZ94fWC5z7PHfvyWa6Xl32ZzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNpMtF8PHtxTFsXlNy8dffr46dmFOY93cjTbr1NdU43O54risRRPpviX6c2N91852R3fTHFZzBVlUXbmF9+83inpzqIozhf7iitFs9h7+eprb889dfzCsYv733n98LW1+wYAAABg8/t/AAAA//9N2hwq")
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1850010, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

12.705031972s ago: executing program 0 (id=38):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
inotify_init1(0x800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r5, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xces\x04\x1e*p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\xd6H\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8b'}]}, 0xb8)
close(r5)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
listen(r6, 0x80)
accept$netrom(r6, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

12.561665679s ago: executing program 3 (id=39):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r3, 0x1})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x5a, 0x0, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x27800000500, 0x0, 0x1, r3, 0x5})
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unshare(0x22020600)
ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000040))
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0)

12.535273017s ago: executing program 4 (id=40):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400", 0xf)
recvmmsg$unix(r1, &(0x7f0000005cc0)=[{{&(0x7f0000005e40), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000740)=""/195, 0xc3}], 0x6}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000001980)=""/238, 0xee}, {&(0x7f0000001a80)=""/94, 0x5e}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/1, 0x1}, {&(0x7f0000002b40)=""/207, 0xcf}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000002cc0)=""/39, 0x27}, {&(0x7f0000002d00)=""/178, 0xb2}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000003f00)=""/4, 0x4}, {&(0x7f0000003f40)=""/193, 0xc1}, {&(0x7f0000004040)=""/111, 0x6f}], 0x3}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004100)=""/161, 0xa1}, {&(0x7f00000041c0)=""/214, 0xd6}, {&(0x7f00000042c0)=""/37, 0x25}, {&(0x7f0000004300)=""/104, 0x68}], 0x4, &(0x7f00000043c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f0000005700)=[{&(0x7f0000004580)=""/21, 0x15}, {&(0x7f00000045c0)=""/103, 0x67}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/79, 0x4f}, {&(0x7f00000056c0)=""/29, 0x1d}], 0x5}}, {{&(0x7f0000005780), 0x6e, &(0x7f0000005b40)=[{&(0x7f0000005800)=""/33, 0x21}, {&(0x7f0000005840)=""/38, 0x26}, {&(0x7f0000005880)=""/157, 0x9d}, {&(0x7f0000005940)=""/115, 0x73}, {&(0x7f00000059c0)=""/88, 0x58}, {&(0x7f0000005a40)=""/206, 0xce}], 0x6, &(0x7f0000005bc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x6, 0x60, 0x0)

10.772360985s ago: executing program 0 (id=41):
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
pipe(&(0x7f0000000180))
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d})
socket$kcm(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000015c0)={0x9, 0x0, [{0x2, 0x0, 0x401}, {0x3, 0x0, 0xae}, {0x4}, {0x8, 0x0, 0x6}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0x400000000000b0}, {0x80, 0x0, 0x6}, {0xc, 0x0, 0x3d}, {0x40, 0x0, 0x6}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffffb, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x7}, {0x40, 0x0, 0x10f4}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00080000d6090000000000007baaf0ff00000000bf2720000000800007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe4c, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000)
fcntl$dupfd(r7, 0x0, r7)

10.381274023s ago: executing program 4 (id=42):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x15, 0x5, 0x0)
connect$netrom(r4, &(0x7f00000000c0)={{0xa, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
getsockname$packet(r4, 0x0, &(0x7f0000000180))

9.851667387s ago: executing program 2 (id=43):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = socket(0x15, 0x5, 0x0)
connect$netrom(r3, &(0x7f00000000c0)={{0xa, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)

9.82618463s ago: executing program 1 (id=44):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0xc840, &(0x7f00000001c0)={0x11, 0x9, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

9.366152464s ago: executing program 3 (id=45):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$l2tp6(0xa, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000d000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000780), &(0x7f0000000740)=r2}, 0x22)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xe, 0x11, r5, 0x0)
read(r5, &(0x7f0000001400)=""/4096, 0x1000)
fstat(0xffffffffffffffff, &(0x7f0000000780))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000480)={0x2020, 0x0, <r8=>0x0, <r9=>0x0, <r10=>0x0}, 0x2020)
fchown(r6, r9, r10)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r11)
ptrace$setregs(0xd, r11, 0xfffffffffffffffc, &(0x7f00000003c0))
ptrace$getregset(0x4205, r11, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r11, 0x2, &(0x7f0000000740)={0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000900)=0xe8)
getresgid(&(0x7f0000000940), &(0x7f0000000980)=<r13=>0x0, &(0x7f00000009c0)=<r14=>0x0)
r15 = syz_clone(0x40000, &(0x7f0000000a00)="9f975348a4368b932c18ed1e7adb7013fe81b6cc63ad290f0841b2f622998d0c1599782d8ce3d37dfbd27a242ce2bc0c2945c876ba98a88aa9cf5841e8cba0a3ba7c08881c10b32b8146d7bcfd452b7d3fab5a54e3084d649045a0dc3c56a22a410991e6c9ce3c175660daaa15d4e67bb11caf93a4a88961a5cec7c8587d7f41dfb852adaad0a8f2fcc26eb0d74c6d2f2516f740ed7a49863d5e6b58fbe49266f72e3a038d5d712cf403932ea594fe2864ed457708ac3486a8adf119cb561f08a3978aa3fbef33fdf9f78d549b4aaae22ae8fe1a6c8e3431e0869042ffc421b1a433280aadc22ef55a4e84", 0xeb, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="ddb70e7ecc2e1ace1caccf1256ca1c79360f565ae0c922c338668dacb2a564a5b67b4e9111094af6e59b8da80919454711132ead791582b813982f3b9256")
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000bc0)=<r16=>0x0)
sendmmsg$unix(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="719139fbff3ece48ceb6260a4b1008708e38111fde68c0aaeed56129188bf4e8543a5cc5a396cc7718f1e5383e4b1489bab439768538bae20569e737c4b1c9d709b8ebd33d15d9f1dfac1b34a1652ecd61d210f6068708467d5d23b5469bb56c930ee080aced95db63f987086c43bbad08f67745b2cbedcd502dd21e3f5629aa6d21359f83389298047415fe15a667247adc645507286f47ff6f324c0724e3edb142a9acc4927302c8c775b1c9e85db1413028becc2dcf7f197ebc20dd829fd40862c232779a2f42c4ed2c8607ff96f7fd7e7cef9991e963db94fff6f40205ce15", 0xe1}, {&(0x7f00000000c0)="402b83fce874a68903acda3ad9d0", 0xe}], 0x2, &(0x7f0000002980)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRESDEC=r13, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r8, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES64=r0, @ANYRES32=r10, @ANYBLOB="00000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4044881}}, {{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000380)="c8e2742caa3732adb123460b186d39e1e6a7ad279ad2e8c9080b10495e0d12d82e69b23366d7102a7533fb2c8ab538971327266391c1d665e17a99602975eaf824a790c1f642dab487765998ec3a386f915cf062de2948b44601b581c87a1598406f3aedf1270df3f2955ef7d6e7c47b712c3b3c527abd2c34213c6ad8e8", 0x7e}, {&(0x7f0000000400)="aff0f8946860cadfb3c64fa2375b7d63c9059d43f615e85a6c771c6192b0b310989c3e8b27dee8081523ec612949e730f017ad916717a66d5035a6e45cf22271b2106d60b4b057077e118ba5498b0287c3c52b4d0f9b4d2ffaf7d84810ffd43cdbcab068cc646311504d618d703958ace0db1489793247e0f4a7", 0x7a}, {&(0x7f0000000280)="026f590e4be87bdff9d2851c9f2fd997801d30e59108d052c1945380ea0e6495ec7a", 0x22}, {&(0x7f0000002600)="5bd26b7adac6ca7ac120aa7a42fe4560f220e1209668d49f54276f479f8e41612af1ef33035ae50dc705be73125c11ed07caa277605d356773634259401329e7935ecd5d45ad3d8f0a1c1325f7c2286e5459805c3fd47826a1f69b08761fa55546ea14a8b28782a6e9a8b69f65ab46de0ac6b1142fdc357de2c8d946b2d8449328617c5ca2950c12dbc1170dfe4521a1e73471c36c91122f6933733d7894a9059966a40047e2ffa716362a3755069886428eacd648f40e2cdfa9a6240e2c3daf69f9085bd781df04d1441080001d32c2bb03bda86199de389b3a61a2a7b98d0e950220dd41ca8fb66a4b417e1b0799e11bc554eba669ec9505", 0xf9}, {&(0x7f0000002700)="fe1ae67708fc93d8ec33eae02f6d94174b3de8ebb50c0afa85516b5aa5cffb17afc3bdead1d70331cf9d72c26bb36c874d5890f373e7ab1eefc8dfa9d060a73d3bf4d13d973ffc502883a34080e09d2340e8c151826546976551bd87ed172eeb5460745cd52c69aad273cfa4b1562e321c9d4608e608c1798a2d20e3cf5e93afc40c3b08d54ca1659ba536ce691d0048d80ec8a77151a930a3a44b8dda56d7af4d6e7f0e920e4264b502f0090650f8eeaea5d0e6571323d034691e6980fe8c58b104f6911aabef76b6fbba5dce16042488d832dbf2600ef1b644f9fb6564f4c49198b9704ee3e2a6b177bdcb9ac58449d298d03b", 0xf4}], 0x5, &(0x7f0000002880)=[@cred={{0x1c, 0x1, 0x2, {r15, r12, r10}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r3, r7, 0xffffffffffffffff]}}], 0x48, 0x8800}}], 0x2, 0x20004006)
r17 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r17, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r17, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x49}, 0x7}], 0x1, 0x20, 0x0)

9.348091053s ago: executing program 1 (id=46):
syz_open_dev$vbi(0x0, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x1, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8)
syz_open_dev$vim2m(&(0x7f0000000580), 0x3, 0x2)
sendto$inet(r3, 0x0, 0x0, 0x20000010, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004882)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

7.66174993s ago: executing program 1 (id=47):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000001640)="be757b136be0357656f10d0ff26044d2a5d19fa95b7cc5c33806f61eb10f6a04fcdb35f9e184cbe3496a81af630460a9eeac05bd0992cd1fd060fe5f3492e030bedfcd99d99220b87dcf89dda8883ec3cf1e77b73f9632bfa41026325604d31a75d4ef378ab3fda434f4c78a9db9c0a10ecb2301641dca5a337000f911541262da236ae1ffffffff00e27ea584dffac25a189404257025", 0x97, 0xfffffffffffffffd)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

6.549645433s ago: executing program 2 (id=48):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x80)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
connect$unix(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r1)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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")

6.53066002s ago: executing program 0 (id=49):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtclass={0x2c, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x7, 0x4}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x67}}]}, 0x2c}}, 0x20040000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x52, 0x1, 0x2, "f83bebf45608e255d91c5debf11c7fffffffffffffff000400080000e9feff00", 0x31324d59})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000140)={0x0, 0x4e, 0x8009, 0x1, 0x80000001})
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}}, 0x0)
sendto$inet(r6, &(0x7f0000000180)="4d3b499b275e2c4177edf37c071b1619b39030ccf7fab4b188eab3705cf6a00c254f3ec884f9b87d0b2f7ef64a", 0x2d, 0x20000004, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x50, &(0x7f0000000100), 0x48)

5.339792282s ago: executing program 3 (id=50):
syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1c802, &(0x7f0000000300)=ANY=[], 0x52, 0x5ff5, &(0x7f0000000c80)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000005580)='./file0\x00', 0x0, &(0x7f0000000880)={[{@quota}, {@acl}]}, 0x1, 0x3d4, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0x5412, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0xa, 0xc741, 0x80, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
mprotect(&(0x7f000028c000/0x2000)=nil, 0x2000, 0x100000d)
io_setup(0x1, &(0x7f0000000b80)=<r3=>0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001800dd8d00000000fedbdf2502141000fd04fe020000002008001e00010000000c0009"], 0x30}, 0x1, 0x0, 0x0, 0x4a015}, 0x24008040)
io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
sendfile(r1, r2, 0x0, 0x20fffe82)

5.096036599s ago: executing program 2 (id=51):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, 0x0)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

4.829380408s ago: executing program 4 (id=52):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x80)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
connect$unix(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r1)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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")

4.520822589s ago: executing program 0 (id=53):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
recvmmsg$unix(r1, 0x0, 0x0, 0x60, 0x0)

3.765633117s ago: executing program 0 (id=54):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x2, 0xa4, 0x7fff0003}]})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

3.652249075s ago: executing program 4 (id=55):
socket(0x2, 0x80805, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, 0x0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000001640)="be757b136be0357656f10d0ff26044d2a5d19fa95b7cc5c33806f61eb10f6a04fcdb35f9e184cbe3496a81af630460a9eeac05bd0992cd1fd060fe5f3492e030bedfcd99d99220b87dcf89dda8883ec3cf1e77b73f9632bfa41026325604d31a75d4ef378ab3fda434f4c78a9db9c0a10ecb2301641dca5a337000f911541262da236ae1ffffffff00e27ea584dffac25a189404257025", 0x97, 0xfffffffffffffffd)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

3.622826356s ago: executing program 2 (id=56):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x12, 0xc840, &(0x7f00000001c0)={0x11, 0x9, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.813201246s ago: executing program 2 (id=57):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
listen(r1, 0x80)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x2, 0x5, 0x84)
connect$unix(r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r1)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7g0Dw8GozxMZGJcz7mdiYJgZtnMPsr/KG6CRwcDMwMCgwsDAwMTAwpCWmZNq4MHAyMAM5RiyQFXBVDMxcIAl9JLzc1LaGRjBSQCsbTkDC9wMw8cMrHCOETLH2KIBahJDO5RWgdIeUHo5lH4MpeXRkg0L2IR+KE+jgYGBjaEisaSkyJCNgQHKgosZwcWMBOA2M0FtncuE6rnjTAyjYBSMglEwCkbBKBgFo2AUjIJRMJIBIAAA///ZbLn7")

2.690490152s ago: executing program 0 (id=58):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = socket(0x15, 0x5, 0x0)
connect$netrom(r3, &(0x7f00000000c0)={{0xa, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)

2.249033367s ago: executing program 4 (id=59):
fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
pipe(&(0x7f0000000180))
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d})
socket$kcm(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f00000015c0)={0x9, 0x0, [{0x2, 0x0, 0x401}, {0x3, 0x0, 0xae}, {0x4}, {0x8, 0x0, 0x6}, {0x1, 0x0, 0x2c}, {0x4b2e, 0x0, 0x2}, {0xfffffffb, 0x0, 0x400000000000b0}, {0x80, 0x0, 0x6}, {0xc, 0x0, 0x3d}, {0x40, 0x0, 0x6}, {0x0, 0x0, 0x2}, {0x3, 0x0, 0x5}, {0x7, 0x0, 0x1}, {0xfffffffb, 0x0, 0xfffffffffffff801}, {0x4, 0x0, 0x7}, {0x40, 0x0, 0x10f4}]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00080000d6090000000000007baaf0ff00000000bf2720000000800007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe4c, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x3c}}, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
getdents64(0xffffffffffffffff, &(0x7f0000002440)=""/181, 0xb5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000001f00)=""/4096, &(0x7f0000000000)=0x1000)
fcntl$dupfd(r7, 0x0, r7)

1.321370722s ago: executing program 1 (id=60):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000400)=""/216, 0xd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='].\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f0000000100)='./control\x00', 0x184)

1.06483864s ago: executing program 2 (id=61):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x1, 0x561, &(0x7f0000000f80)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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")
r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000a40)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000700)={@desc={0x1, 0x0, @desc4}, 0x0, r2})
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="31925dedc80a39eca536345b43df5f"], 0xfe37, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="ae4f2b40da66af7800000000000000000a008000", @ANYRES32=0x0, @ANYRES16], 0x38}}, 0x0)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d5, &(0x7f0000000bc0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000041ffffff000000000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
getpid()

1.429841ms ago: executing program 4 (id=62):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000280)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
r4 = socket(0x15, 0x5, 0x0)
connect$netrom(r4, &(0x7f00000000c0)={{0xa, @bcast}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
getsockname$packet(r4, 0x0, &(0x7f0000000180))

0s ago: executing program 3 (id=63):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtclass={0x2c, 0x28, 0x4, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x7, 0x4}, {0xd, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x67}}]}, 0x2c}}, 0x20040000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x52, 0x1, 0x2, "f83bebf45608e255d91c5debf11c7fffffffffffffff000400080000e9feff00", 0x31324d59})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0305710, &(0x7f0000000140)={0x0, 0x4e, 0x8009, 0x1, 0x80000001})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts.
[   76.637951][ T5805] cgroup: Unknown subsys name 'net'
[   76.765542][ T5805] cgroup: Unknown subsys name 'cpuset'
[   76.774607][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.432040][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.691952][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.702468][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.709896][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.718809][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.726595][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   80.726661][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.742696][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.750028][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   80.750246][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.764257][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   80.772554][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.775776][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.783298][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.791288][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   80.795726][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.803574][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   80.809559][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.827915][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.835257][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.836415][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.850836][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.853303][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.866951][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.879688][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.888208][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.460770][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   81.717444][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   81.757171][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.764737][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.772334][ T5819] bridge_slave_0: entered allmulticast mode
[   81.780275][ T5819] bridge_slave_0: entered promiscuous mode
[   81.796569][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   81.823404][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   81.844352][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.852448][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.859769][ T5819] bridge_slave_1: entered allmulticast mode
[   81.867974][ T5819] bridge_slave_1: entered promiscuous mode
[   82.041293][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.057953][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   82.088731][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.205356][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.212838][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.220106][ T5833] bridge_slave_0: entered allmulticast mode
[   82.228202][ T5833] bridge_slave_0: entered promiscuous mode
[   82.280980][ T5819] team0: Port device team_slave_0 added
[   82.287335][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.294698][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.302396][ T5833] bridge_slave_1: entered allmulticast mode
[   82.310580][ T5833] bridge_slave_1: entered promiscuous mode
[   82.325514][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.332877][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.340164][ T5818] bridge_slave_0: entered allmulticast mode
[   82.348244][ T5818] bridge_slave_0: entered promiscuous mode
[   82.372924][ T5819] team0: Port device team_slave_1 added
[   82.412918][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.420227][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.427586][ T5818] bridge_slave_1: entered allmulticast mode
[   82.435510][ T5818] bridge_slave_1: entered promiscuous mode
[   82.443701][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.451014][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.458450][ T5820] bridge_slave_0: entered allmulticast mode
[   82.466319][ T5820] bridge_slave_0: entered promiscuous mode
[   82.526423][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.534028][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.541303][ T5820] bridge_slave_1: entered allmulticast mode
[   82.549285][ T5820] bridge_slave_1: entered promiscuous mode
[   82.559483][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.566651][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.592778][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.609062][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.665348][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.672494][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.698534][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.713478][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.741051][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.755827][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.801400][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.808808][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.816587][ T5817] bridge_slave_0: entered allmulticast mode
[   82.824761][ T5817] bridge_slave_0: entered promiscuous mode
[   82.853034][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.867942][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.877811][ T5837] Bluetooth: hci4: command tx timeout
[   82.898902][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.906405][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.914140][ T5817] bridge_slave_1: entered allmulticast mode
[   82.922462][ T5817] bridge_slave_1: entered promiscuous mode
[   82.951780][ T5837] Bluetooth: hci2: command tx timeout
[   82.952272][ T5838] Bluetooth: hci3: command tx timeout
[   82.957633][ T5821] Bluetooth: hci1: command tx timeout
[   82.964007][ T5825] Bluetooth: hci0: command tx timeout
[   82.997423][ T5833] team0: Port device team_slave_0 added
[   83.020428][ T5818] team0: Port device team_slave_0 added
[   83.058030][ T5833] team0: Port device team_slave_1 added
[   83.080820][ T5818] team0: Port device team_slave_1 added
[   83.105098][ T5820] team0: Port device team_slave_0 added
[   83.118919][ T5819] hsr_slave_0: entered promiscuous mode
[   83.126121][ T5819] hsr_slave_1: entered promiscuous mode
[   83.152602][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.179295][ T5820] team0: Port device team_slave_1 added
[   83.219014][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.243680][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.250685][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.276913][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.304925][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.312210][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.338336][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.365423][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.372818][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.398843][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.424589][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.431693][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.457699][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.470621][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.477698][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.503711][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.517994][ T5817] team0: Port device team_slave_0 added
[   83.544555][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.551701][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.577976][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.607635][ T5817] team0: Port device team_slave_1 added
[   83.705894][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.713166][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.739360][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.803341][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.810346][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.836513][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.869164][ T5818] hsr_slave_0: entered promiscuous mode
[   83.876637][ T5818] hsr_slave_1: entered promiscuous mode
[   83.883513][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   83.889345][ T5818] Cannot create hsr debugfs directory
[   83.951001][ T5833] hsr_slave_0: entered promiscuous mode
[   83.958096][ T5833] hsr_slave_1: entered promiscuous mode
[   83.965216][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   83.971012][ T5833] Cannot create hsr debugfs directory
[   83.992863][ T5820] hsr_slave_0: entered promiscuous mode
[   84.000477][ T5820] hsr_slave_1: entered promiscuous mode
[   84.007436][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   84.013306][ T5820] Cannot create hsr debugfs directory
[   84.168170][ T5817] hsr_slave_0: entered promiscuous mode
[   84.175301][ T5817] hsr_slave_1: entered promiscuous mode
[   84.182956][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[   84.188760][ T5817] Cannot create hsr debugfs directory
[   84.718406][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.755533][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.788084][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.818004][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.879338][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.893385][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.913089][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.926615][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.961667][ T5825] Bluetooth: hci4: command tx timeout
[   85.027115][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.033985][ T5825] Bluetooth: hci0: command tx timeout
[   85.039433][ T5825] Bluetooth: hci3: command tx timeout
[   85.045992][ T5838] Bluetooth: hci2: command tx timeout
[   85.046573][ T5837] Bluetooth: hci1: command tx timeout
[   85.062603][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.085941][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.123638][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.232485][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.246479][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.261392][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.295793][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.387907][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.400817][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.437888][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.471289][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.530608][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.567233][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.619181][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   85.665404][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.672750][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.686922][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   85.715571][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.722808][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.733163][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.740345][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.811364][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.818630][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.841373][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.010166][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.037390][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   86.078173][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.085471][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.140161][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   86.187383][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.194649][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.206364][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.213626][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.237905][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.276680][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.283956][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.424693][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   86.489991][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.497270][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.526698][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.533918][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.548070][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.766138][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.907706][ T5819] veth0_vlan: entered promiscuous mode
[   86.977575][ T5819] veth1_vlan: entered promiscuous mode
[   87.041954][ T5837] Bluetooth: hci4: command tx timeout
[   87.087851][ T5818] veth0_vlan: entered promiscuous mode
[   87.114243][ T5837] Bluetooth: hci3: command tx timeout
[   87.114260][ T5825] Bluetooth: hci2: command tx timeout
[   87.119732][ T5837] Bluetooth: hci1: command tx timeout
[   87.126727][ T5838] Bluetooth: hci0: command tx timeout
[   87.170133][ T5818] veth1_vlan: entered promiscuous mode
[   87.268701][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.327848][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.384560][ T5819] veth0_macvtap: entered promiscuous mode
[   87.447266][ T5819] veth1_macvtap: entered promiscuous mode
[   87.498550][ T5818] veth0_macvtap: entered promiscuous mode
[   87.526976][ T5818] veth1_macvtap: entered promiscuous mode
[   87.601715][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.640461][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.653758][ T5820] veth0_vlan: entered promiscuous mode
[   87.706801][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.716533][ T1089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.735569][ T5820] veth1_vlan: entered promiscuous mode
[   87.750824][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.771382][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.784487][ T1089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.795172][ T1089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.835363][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.888152][   T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.898311][   T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.925109][   T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.934312][   T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.048103][ T5820] veth0_macvtap: entered promiscuous mode
[   88.073998][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.088116][ T5833] veth0_vlan: entered promiscuous mode
[   88.095248][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.116640][ T5820] veth1_macvtap: entered promiscuous mode
[   88.184788][ T5833] veth1_vlan: entered promiscuous mode
[   88.203688][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.211998][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.238556][ T5817] veth0_vlan: entered promiscuous mode
[   88.268119][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.279269][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.323147][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.335522][ T5817] veth1_vlan: entered promiscuous mode
[   88.374030][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.384512][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.396248][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.412792][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   88.453161][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.462451][   T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.471265][   T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.531122][   T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.589572][ T5833] veth0_macvtap: entered promiscuous mode
[   89.325959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   89.773840][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   89.782545][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   90.456228][ T5825] Bluetooth: hci4: command tx timeout
[   90.461727][ T5825] Bluetooth: hci2: command tx timeout
[   90.461938][ T5837] Bluetooth: hci0: command tx timeout
[   90.467148][ T5825] Bluetooth: hci1: command tx timeout
[   90.473426][ T5821] Bluetooth: hci3: command tx timeout
[   90.551692][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   90.559938][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   90.568757][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   90.612437][ T5817] veth0_macvtap: entered promiscuous mode
[   90.644712][ T5942] loop3: detected capacity change from 0 to 4096
[   90.687566][ T5833] veth1_macvtap: entered promiscuous mode
[   90.706076][ T5942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.727208][ T5817] veth1_macvtap: entered promiscuous mode
[   90.827907][ T5942] overlayfs: missing 'lowerdir'
[   90.965333][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.001154][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.020600][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.051298][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.117715][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.493811][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.521672][   T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.550029][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.574930][   T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.601435][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.626292][   T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.690452][   T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.725072][   T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.750542][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.765534][   T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.781041][   T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.803620][   T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.929908][   T24] cfg80211: failed to load regulatory.db
[   92.129582][ T5955] loop3: detected capacity change from 0 to 4096
[   92.191408][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.311370][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.367446][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.386760][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.435100][ T5885] IPVS: starting estimator thread 0...
[   92.483360][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.633457][ T5961] IPVS: using max 28 ests per chain, 67200 per kthread
[   92.889812][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.911146][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.934961][ T5955] overlayfs: missing 'lowerdir'
[   94.435959][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.502894][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.536949][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.729438][ T5953] loop2: detected capacity change from 0 to 32768
[   94.756099][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.000462][ T5953] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR
[   95.444046][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'.
[   95.876751][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   95.912163][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   95.998083][ T5972] team0: entered promiscuous mode
[   96.004434][ T5972] team_slave_0: entered promiscuous mode
[   96.010411][ T5972] team_slave_1: entered promiscuous mode
[   96.152093][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   96.249312][ T5972] team0: entered allmulticast mode
[   96.272153][ T5972] team_slave_0: entered allmulticast mode
[   96.520121][ T5989] loop2: detected capacity change from 0 to 512
[   96.717583][ T5972] team_slave_1: entered allmulticast mode
[   96.934854][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   96.947621][ T5989] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.105663][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   97.207988][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.310384][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.312845][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   97.898142][ T5820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   98.308103][ T6002] loop1: detected capacity change from 0 to 128
[   98.318869][ T6002] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   98.516652][ T6003] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure
[   98.570797][ T6002] overlay: filesystem on ./bus not supported
[   99.391778][   T48] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[   99.487232][ T6010] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.522498][ T6011] loop4: detected capacity change from 0 to 512
[   99.556093][ T6007] loop2: detected capacity change from 0 to 2048
[   99.610372][ T6010] loop3: detected capacity change from 0 to 512
[   99.619358][ T6007] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   99.680313][ T6011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.742941][ T6020] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.806462][ T6011] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.200841][ T6010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.241350][ T6010] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.911093][   T30] audit: type=1800 audit(1772415222.473:2): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16" name="file1" dev="loop3" ino=15 res=0 errno=0
[  100.933166][ T6025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  101.141774][ T6024] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  102.155708][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.743326][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.347518][  T796] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.781125][ T6034] loop2: detected capacity change from 0 to 32768
[  104.804419][  T796] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  104.823508][  T796] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  104.874808][  T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  104.884851][ T6057] loop0: detected capacity change from 0 to 512
[  104.911876][  T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  104.925404][  T796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  104.940641][  T796] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  104.950332][  T796] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  104.959542][  T796] usb 4-1: Product: syz
[  104.971701][ T6034] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.973926][ T6057] EXT4-fs (loop0): orphan cleanup on readonly fs
[  104.987299][  T796] usb 4-1: Manufacturer: syz
[  105.020268][ T6057] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  105.077793][ T6057] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  105.105301][  T796] cdc_wdm 4-1:1.0: skipping garbage
[  105.110631][  T796] cdc_wdm 4-1:1.0: skipping garbage
[  105.121768][ T6057] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.28: Failed to acquire dquot type 1
[  105.148934][  T796] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  105.165753][  T796] cdc_wdm 4-1:1.0: Unknown control protocol
[  105.225112][ T6057] loop0: lost filesystem error report for type 5 error -5
[  105.231580][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  105.245523][    C1] EXT4-fs (loop0): last error at time 1772415226: ext4_acquire_dquot:7001
[  105.770985][ T6057] EXT4-fs (loop0): 1 truncate cleaned up
[  105.797921][ T6034] XFS (loop2): Ending clean mount
[  105.815693][ T6057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.842525][ T6034] XFS (loop2): Quotacheck needed: Please wait.
[  105.923170][ T6034] XFS (loop2): Quotacheck: Done.
[  106.124427][ T5820] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.261864][ T6073] comedi comedi1: comedi_config --init_data is deprecated
[  106.964338][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.074178][ T5822] usb 4-1: USB disconnect, device number 2
[  107.169450][ T6075] loop1: detected capacity change from 0 to 2048
[  107.211641][ T6075] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  107.842251][ T6081] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.499972][ T6090] loop2: detected capacity change from 0 to 512
[  109.605384][ T6090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.764300][ T6090] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.202164][ T6090] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  110.244594][ T6090] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28
[  110.273262][ T6090] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.273262][ T6090] 
[  110.358482][ T6090] EXT4-fs (loop2): Total free blocks count 0
[  110.367368][ T6100] loop1: detected capacity change from 0 to 2048
[  110.379143][ T6090] EXT4-fs (loop2): Free/Dirty block details
[  110.418429][ T6090] EXT4-fs (loop2): free_blocks=65280
[  110.424181][ T6090] EXT4-fs (loop2): dirty_blocks=31
[  110.444246][ T6100] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.532088][ T6090] EXT4-fs (loop2): Block reservation details
[  110.591854][ T6090] EXT4-fs (loop2): i_reserved_data_blocks=31
[  110.637038][ T6106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.655905][ T6090] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28
[  111.036177][ T6111] process 'syz.0.38' launched './file0' with NULL argv: empty string added
[  113.518283][ T6126] syzkaller0: entered promiscuous mode
[  113.532248][ T6126] syzkaller0: entered allmulticast mode
[  113.752672][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.918435][ T5949] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  113.931622][ T5949] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  113.951570][ T5949] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  114.514111][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[  114.522978][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[  115.534626][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  115.546257][   T30] audit: type=1800 audit(1772415237.123:3): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.45" name="file1" dev="tmpfs" ino=61 res=0 errno=0
[  115.561838][ T5878] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  115.641812][ T5949] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  115.684103][ T5949] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  115.702080][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  115.710146][ T5949] usb 5-1: Product: syz
[  115.731657][ T5949] usb 5-1: Manufacturer: syz
[  115.761409][ T5878] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  115.808239][ T5878] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  115.877578][ T5878] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  115.883033][ T5949] cdc_wdm 5-1:1.0: skipping garbage
[  115.918877][ T5878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  115.931667][ T5949] cdc_wdm 5-1:1.0: skipping garbage
[  115.984535][ T5878] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  116.021615][ T5949] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  116.064947][ T5949] cdc_wdm 5-1:1.0: Unknown control protocol
[  116.115957][ T5878] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  116.211019][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  116.297921][ T5878] usb 3-1: Product: syz
[  116.373478][ T5878] usb 3-1: Manufacturer: syz
[  116.417619][ T5878] cdc_wdm 3-1:1.0: skipping garbage
[  116.435237][ T5878] cdc_wdm 3-1:1.0: skipping garbage
[  116.461451][ T5878] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  116.469109][ T5878] cdc_wdm 3-1:1.0: Unknown control protocol
[  116.594899][ T5878] usb 3-1: USB disconnect, device number 2
[  117.039790][ T6151] loop2: detected capacity change from 0 to 8
[  118.301406][ T5878] usb 5-1: USB disconnect, device number 2
[  118.760968][ T6167] loop4: detected capacity change from 0 to 8
[  119.612278][ T6174] syzkaller0: entered promiscuous mode
[  119.617933][ T6174] syzkaller0: entered allmulticast mode
[  119.970454][ T5949] IPVS: starting estimator thread 0...
[  120.093027][ T6180] IPVS: using max 23 ests per chain, 55200 per kthread
[  121.300665][ T6191] loop2: detected capacity change from 0 to 8
[  122.044161][ T5878] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  122.224936][ T5878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  122.274452][ T5878] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  122.352673][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  122.427376][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  122.514780][ T5878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  122.570856][ T6195] loop1: detected capacity change from 0 to 4096
[  122.597640][ T5878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  122.609010][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  122.644610][ T5878] usb 1-1: Product: syz
[  122.648861][ T5878] usb 1-1: Manufacturer: syz
[  122.669932][ T5878] cdc_wdm 1-1:1.0: skipping garbage
[  122.670889][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.676598][ T5878] cdc_wdm 1-1:1.0: skipping garbage
[  122.744151][ T5878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  122.751088][ T6200] loop2: detected capacity change from 0 to 1024
[  122.753731][ T5878] cdc_wdm 1-1:1.0: Unknown control protocol
[  122.810409][ T6200] =======================================================
[  122.810409][ T6200] WARNING: The mand mount option has been deprecated and
[  122.810409][ T6200]          and is ignored by this kernel. Remove the mand
[  122.810409][ T6200]          option from the mount to silence this warning.
[  122.810409][ T6200] =======================================================
[  122.871318][ T6195] overlayfs: missing 'lowerdir'
[  122.950792][ T6200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.640178][ T6200] ==================================================================
[  123.648336][ T6200] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20
[  123.656111][ T6200] Read of size 18446744073709551588 at addr ffff88804ffb6840 by task syz.2.61/6200
[  123.665422][ T6200] 
[  123.667811][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) 
[  123.667838][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  123.667861][ T6200] Call Trace:
[  123.667878][ T6200]  <TASK>
[  123.667888][ T6200]  dump_stack_lvl+0xe8/0x150
[  123.667924][ T6200]  print_report+0xba/0x230
[  123.667950][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  123.667979][ T6200]  kasan_report+0x117/0x150
[  123.668007][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  123.668039][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  123.668067][ T6200]  kasan_check_range+0x264/0x2c0
[  123.668093][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  123.668121][ T6200]  __asan_memmove+0x29/0x70
[  123.668140][ T6200]  ext4_xattr_set_entry+0x8e9/0x1e20
[  123.668181][ T6200]  ext4_xattr_block_set+0x878/0x2ad0
[  123.668209][ T6200]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  123.668239][ T6200]  ? __pfx_evict+0x10/0x10
[  123.668263][ T6200]  ? do_raw_spin_unlock+0xf5/0x210
[  123.668286][ T6200]  ? _raw_spin_unlock+0x28/0x50
[  123.668344][ T6200]  ? iput+0xb25/0xe80
[  123.668379][ T6200]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  123.668407][ T6200]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  123.668446][ T6200]  ext4_xattr_set_handle+0x1286/0x14c0
[  123.668486][ T6200]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  123.668523][ T6200]  ext4_xattr_set+0x255/0x340
[  123.668557][ T6200]  ? __pfx_ext4_xattr_set+0x10/0x10
[  123.668586][ T6200]  ? __pfx_evm_protect_xattr+0x10/0x10
[  123.668619][ T6200]  ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[  123.668650][ T6200]  __vfs_setxattr+0x43c/0x480
[  123.668687][ T6200]  __vfs_setxattr_noperm+0x12d/0x660
[  123.668723][ T6200]  vfs_setxattr+0x163/0x360
[  123.668757][ T6200]  ? __pfx_vfs_setxattr+0x10/0x10
[  123.668793][ T6200]  filename_setxattr+0x296/0x630
[  123.668829][ T6200]  ? __pfx_filename_setxattr+0x10/0x10
[  123.668864][ T6200]  ? do_getname+0x151/0x250
[  123.668894][ T6200]  path_setxattrat+0x3eb/0x440
[  123.668923][ T6200]  ? __pfx_path_setxattrat+0x10/0x10
[  123.668947][ T6200]  ? do_futex+0x395/0x420
[  123.668989][ T6200]  ? rcu_is_watching+0x15/0xb0
[  123.669022][ T6200]  __x64_sys_lsetxattr+0xbf/0xe0
[  123.669044][ T6200]  do_syscall_64+0x14d/0xf80
[  123.669066][ T6200]  ? trace_irq_disable+0x3b/0x150
[  123.669089][ T6200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.669112][ T6200]  ? clear_bhb_loop+0x40/0x90
[  123.669135][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.669157][ T6200] RIP: 0033:0x7ff445b9c799
[  123.669187][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.669205][ T6200] RSP: 002b:00007ff446b3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  123.669233][ T6200] RAX: ffffffffffffffda RBX: 00007ff445e15fa0 RCX: 00007ff445b9c799
[  123.669249][ T6200] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[  123.669265][ T6200] RBP: 00007ff445c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  123.669278][ T6200] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  123.669292][ T6200] R13: 00007ff445e16038 R14: 00007ff445e15fa0 R15: 00007ffd78aab898
[  123.669317][ T6200]  </TASK>
[  123.669325][ T6200] 
[  123.980841][ T6200] Allocated by task 6200:
[  123.985197][ T6200]  kasan_save_track+0x3e/0x80
[  123.989912][ T6200]  __kasan_kmalloc+0x93/0xb0
[  123.994537][ T6200]  __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[  124.000993][ T6200]  kmemdup_noprof+0x2b/0x70
[  124.005538][ T6200]  ext4_xattr_block_set+0x787/0x2ad0
[  124.010861][ T6200]  ext4_xattr_set_handle+0x1286/0x14c0
[  124.016360][ T6200]  ext4_xattr_set+0x255/0x340
[  124.021073][ T6200]  __vfs_setxattr+0x43c/0x480
[  124.025785][ T6200]  __vfs_setxattr_noperm+0x12d/0x660
[  124.031114][ T6200]  vfs_setxattr+0x163/0x360
[  124.035656][ T6200]  filename_setxattr+0x296/0x630
[  124.040634][ T6200]  path_setxattrat+0x3eb/0x440
[  124.045432][ T6200]  __x64_sys_lsetxattr+0xbf/0xe0
[  124.050409][ T6200]  do_syscall_64+0x14d/0xf80
[  124.055036][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.060961][ T6200] 
[  124.063325][ T6200] The buggy address belongs to the object at ffff88804ffb6800
[  124.063325][ T6200]  which belongs to the cache kmalloc-1k of size 1024
[  124.077409][ T6200] The buggy address is located 64 bytes inside of
[  124.077409][ T6200]  1024-byte region [ffff88804ffb6800, ffff88804ffb6c00)
[  124.090725][ T6200] 
[  124.093086][ T6200] The buggy address belongs to the physical page:
[  124.099534][ T6200] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ffb0
[  124.108351][ T6200] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  124.116891][ T6200] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  124.124479][ T6200] page_type: f5(slab)
[  124.128504][ T6200] raw: 00fff00000000040 ffff88801b02edc0 dead000000000100 dead000000000122
[  124.137118][ T6200] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  124.145735][ T6200] head: 00fff00000000040 ffff88801b02edc0 dead000000000100 dead000000000122
[  124.154431][ T6200] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  124.163118][ T6200] head: 00fff00000000003 ffffea00013fec01 00000000ffffffff 00000000ffffffff
[  124.171824][ T6200] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  124.180507][ T6200] page dumped because: kasan: bad access detected
[  124.186946][ T6200] page_owner tracks the page as allocated
[  124.192684][ T6200] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6053, tgid 6053 (kworker/u8:10), ts 123542803819, free_ts 122894958223
[  124.212244][ T6200]  post_alloc_hook+0x231/0x280
[  124.217041][ T6200]  get_page_from_freelist+0x23a1/0x2440
[  124.222606][ T6200]  __alloc_frozen_pages_noprof+0x18d/0x380
[  124.228432][ T6200]  alloc_pages_mpol+0x232/0x4a0
[  124.233303][ T6200]  allocate_slab+0x83/0x660
[  124.237852][ T6200]  ___slab_alloc+0x150/0x6b0
[  124.242487][ T6200]  __kmalloc_noprof+0x18a/0x760
[  124.247367][ T6200]  ieee802_11_parse_elems_full+0x159/0x2ab0
[  124.253324][ T6200]  ieee80211_inform_bss+0x161/0x1160
[  124.258637][ T6200]  cfg80211_inform_single_bss_data+0xd08/0x1b70
[  124.264902][ T6200]  cfg80211_inform_bss_data+0x266/0x3c40
[  124.270559][ T6200]  cfg80211_inform_bss_frame_data+0x3c7/0x760
[  124.276647][ T6200]  ieee80211_bss_info_update+0x794/0xa40
[  124.282297][ T6200]  ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cd0
[  124.288481][ T6200]  ieee80211_iface_work+0x84e/0x1340
[  124.293792][ T6200]  cfg80211_wiphy_work+0x2ab/0x4a0
[  124.298944][ T6200] page last free pid 5188 tgid 5188 stack trace:
[  124.305284][ T6200]  __free_frozen_pages+0xbe2/0xd60
[  124.310422][ T6200]  __slab_free+0x263/0x2b0
[  124.314863][ T6200]  qlist_free_all+0x97/0x100
[  124.319473][ T6200]  kasan_quarantine_reduce+0x148/0x160
[  124.324949][ T6200]  __kasan_slab_alloc+0x22/0x80
[  124.329819][ T6200]  __kmalloc_cache_noprof+0x2ba/0x660
[  124.335209][ T6200]  kernfs_fop_open+0x397/0xca0
[  124.339992][ T6200]  do_dentry_open+0x785/0x14e0
[  124.344785][ T6200]  vfs_open+0x3b/0x340
[  124.348918][ T6200]  path_openat+0x2e08/0x3860
[  124.353532][ T6200]  do_file_open+0x23e/0x4a0
[  124.358066][ T6200]  do_sys_openat2+0x113/0x200
[  124.362799][ T6200]  __x64_sys_openat+0x138/0x170
[  124.367733][ T6200]  do_syscall_64+0x14d/0xf80
[  124.372351][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.378268][ T6200] 
[  124.380615][ T6200] Memory state around the buggy address:
[  124.386262][ T6200]  ffff88804ffb6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  124.394349][ T6200]  ffff88804ffb6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  124.402429][ T6200] >ffff88804ffb6800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  124.410505][ T6200]                                            ^
[  124.416675][ T6200]  ffff88804ffb6880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  124.424750][ T6200]  ffff88804ffb6900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  124.432823][ T6200] ==================================================================
[  124.475486][ T6200] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  124.482758][ T6200] CPU: 1 UID: 0 PID: 6200 Comm: syz.2.61 Not tainted syzkaller #0 PREEMPT(full) 
[  124.491909][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  124.502001][ T6200] Call Trace:
[  124.505319][ T6200]  <TASK>
[  124.508277][ T6200]  vpanic+0x56c/0xa60
[  124.512322][ T6200]  ? __pfx_vpanic+0x10/0x10
[  124.516874][ T6200]  panic+0xc5/0xd0
[  124.520639][ T6200]  ? __pfx_panic+0x10/0x10
[  124.525098][ T6200]  ? preempt_schedule_thunk+0x16/0x30
[  124.530506][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.536006][ T6200]  ? preempt_schedule_thunk+0x16/0x30
[  124.541444][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.546974][ T6200]  check_panic_on_warn+0x89/0xb0
[  124.551956][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.557451][ T6200]  end_report+0x73/0x180
[  124.561730][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.567260][ T6200]  kasan_report+0x128/0x150
[  124.571807][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.577306][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.582798][ T6200]  kasan_check_range+0x264/0x2c0
[  124.587817][ T6200]  ? ext4_xattr_set_entry+0x8e9/0x1e20
[  124.593321][ T6200]  __asan_memmove+0x29/0x70
[  124.597867][ T6200]  ext4_xattr_set_entry+0x8e9/0x1e20
[  124.603215][ T6200]  ext4_xattr_block_set+0x878/0x2ad0
[  124.608555][ T6200]  ? __pfx_ext4_free_in_core_inode+0x10/0x10
[  124.614591][ T6200]  ? __pfx_evict+0x10/0x10
[  124.619082][ T6200]  ? do_raw_spin_unlock+0xf5/0x210
[  124.624231][ T6200]  ? _raw_spin_unlock+0x28/0x50
[  124.629128][ T6200]  ? iput+0xb25/0xe80
[  124.633158][ T6200]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  124.638919][ T6200]  ? ext4_xattr_ibody_set+0x510/0x6a0
[  124.644345][ T6200]  ext4_xattr_set_handle+0x1286/0x14c0
[  124.649850][ T6200]  ? __pfx_ext4_xattr_set_handle+0x10/0x10
[  124.655700][ T6200]  ext4_xattr_set+0x255/0x340
[  124.660438][ T6200]  ? __pfx_ext4_xattr_set+0x10/0x10
[  124.665685][ T6200]  ? __pfx_evm_protect_xattr+0x10/0x10
[  124.671191][ T6200]  ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[  124.677157][ T6200]  __vfs_setxattr+0x43c/0x480
[  124.681916][ T6200]  __vfs_setxattr_noperm+0x12d/0x660
[  124.687251][ T6200]  vfs_setxattr+0x163/0x360
[  124.691803][ T6200]  ? __pfx_vfs_setxattr+0x10/0x10
[  124.696889][ T6200]  filename_setxattr+0x296/0x630
[  124.701875][ T6200]  ? __pfx_filename_setxattr+0x10/0x10
[  124.707456][ T6200]  ? do_getname+0x151/0x250
[  124.711991][ T6200]  path_setxattrat+0x3eb/0x440
[  124.716789][ T6200]  ? __pfx_path_setxattrat+0x10/0x10
[  124.722110][ T6200]  ? do_futex+0x395/0x420
[  124.726478][ T6200]  ? rcu_is_watching+0x15/0xb0
[  124.731302][ T6200]  __x64_sys_lsetxattr+0xbf/0xe0
[  124.736261][ T6200]  do_syscall_64+0x14d/0xf80
[  124.740877][ T6200]  ? trace_irq_disable+0x3b/0x150
[  124.745916][ T6200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.751997][ T6200]  ? clear_bhb_loop+0x40/0x90
[  124.756701][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.762619][ T6200] RIP: 0033:0x7ff445b9c799
[  124.767052][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.786673][ T6200] RSP: 002b:00007ff446b3e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  124.795109][ T6200] RAX: ffffffffffffffda RBX: 00007ff445e15fa0 RCX: 00007ff445b9c799
[  124.803101][ T6200] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[  124.811093][ T6200] RBP: 00007ff445c32bd9 R08: 0000000000000000 R09: 0000000000000000
[  124.819093][ T6200] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  124.827079][ T6200] R13: 00007ff445e16038 R14: 00007ff445e15fa0 R15: 00007ffd78aab898
[  124.835090][ T6200]  </TASK>
[  124.838728][ T6200] Kernel Offset: disabled
[  124.843070][ T6200] Rebooting in 86400 seconds..