last executing test programs:

2m46.577120756s ago: executing program 3 (id=11146):
ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}})

2m44.96859534s ago: executing program 3 (id=11156):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
io_setup(0x13, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0)
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}}, 0x0)

2m43.968378781s ago: executing program 3 (id=11162):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
keyctl$assume_authority(0x10, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000004c0)={'comedi_parport\x00', [0x8001, 0xfbb3, 0x1, 0x3, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x1002, 0x1, 0x8, 0x4, 0xe05, 0xffffffff, 0x1, 0x401, 0x3, 0x7d10d6d3, 0x40000089, 0x2, 0x4, 0xffffffff, 0x8, 0x1, 0x5, 0x8, 0x2, 0x10000, 0xfffffff8]}) (fail_nth: 5)

2m43.460426913s ago: executing program 3 (id=11164):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x1, 'lc\x00', 0x12, 0x6}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'lblc\x00', 0x20, 0x6, 0x1}, 0x2c)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500264382c10e91789b85cec0102030109021b00019f05c0050904c30501ff000003090501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000240)='./file1\x00', 0x18)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x400017e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0xab)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1ffffff5, &(0x7f00000010c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xa, 0x6, 0x2, 0x4, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffc0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)

2m38.311129987s ago: executing program 3 (id=11180):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
poll(0x0, 0x0, 0x10)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d410000000000000002900000043000000", 0x30)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x5, 0x5}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)

2m36.909733842s ago: executing program 4 (id=11185):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffd000)
userfaultfd(0x80001) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x5c})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
close(r0) (async)
close(r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) (async)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0)
socket(0x15, 0x80000, 0x81)
sched_setscheduler(0x0, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)

2m34.340272222s ago: executing program 3 (id=11190):
socket$kcm(0xa, 0x922000000003, 0x11)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x9d, 0x1d}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613235362d61726d363400000000000000000000000000001000"/79], &(0x7f0000000140)="71cf216571648d22a22e7005145bba9b490b678ac3c84c4a6a1773f808ea9ea56679e460785e2f76fb9751a4446719d5bdb198d1710098801ee129165f7e351926d026adaca732ddaa0cc50959721b78bd4a3a1d9f5ccd5572d7461cf84bb6b995777222633ad259adc7dde512a9d4c4b5766892ae526308faffbf233cefe4106d798114f1e6feb7d2f2010d68a70a44eaa8fc537545ca98956e75aea9", &(0x7f0000000200)="65c74c77d44978d2f6af92847c0eaa23952c2f291d590081fb0411bd05")
socket$kcm(0x10, 0x2, 0x4)

2m33.287247247s ago: executing program 4 (id=11193):
pipe2(0x0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x4000)
sendmsg$inet(r0, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
write$tun(r8, &(0x7f0000000800)={@void, @void, @ipv6=@icmpv6={0x7, 0x6, "c3bec1", 0x43a, 0x3a, 0x0, @mcast2, @mcast1, {[@fragment={0x8, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x68}, @dstopts={0x87}, @routing={0x16, 0x8, 0x2, 0xf7, 0x0, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, @loopback]}, @srh={0x0, 0x4, 0x4, 0x2, 0x81, 0x50, 0x800, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x1d, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe16}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x10, {0x3, 0x2, 0x10, 0x9, [0x9]}}]}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x67}, @fragment={0x2c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x64}, @srh={0x1, 0xa, 0x4, 0x5, 0x2, 0x20, 0x101, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x4, 0x6, ')\f\t', 0xe, 0x89, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, [@dstopts={0x1, 0x6, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x16, "54780c3472b8d8e835e70a6cd0d2218ca3ede66a8984"}, @enc_lim={0x4, 0x1, 0x3a}, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x3c, 0x0, 0x0, 0x1, 0x0, 0xe, 0x67}, @dstopts={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xc42988e8db6c7196, 0x15, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x7fff}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x8}}, @ra={0x5, 0x2, 0x800}, @generic={0x0, 0x8e, "cde26295f8b394766be534fb25257875caa8419f8d6741df1c849e0ba1fe318de8da72cdf6eb7c7ef43ff0a3aed556ac5a3c593f31c6903fabaa5e793110eb5de8fc5ca2413a6312514a86286a82bd4e81ec72665f7ccb27b0492b03865cb86a7edbb0190fcec082f943c7a76a4698e6dbaa958faa0e2bd06f7ec50a96c8d7f55e43db4b9ff91844fb6de669ac3f"}]}, @dstopts={0x5c, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xc64f}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x21, 0x8, 0x2, 0xef, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @private1, @private2, @mcast2]}, @routing={0xff, 0x0, 0x1, 0x3}, @srh={0x4, 0x12, 0x4, 0x9, 0x7d, 0x40, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @dev={0xfe, 0x80, '\x00', 0x19}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim]}, @hopopts={0x5c, 0xa, '\x00', [@calipso={0x7, 0x28, {0xab1c8c247eb91a24, 0x8, 0xf9, 0x57, [0x4, 0x1, 0x161, 0xa71e]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x200, [0x6fbc, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xd}, @ra={0x5, 0x2, 0x8}, @pad1]}], "3b06874c64f359cf91b73ffb5695b1df7e0aeb283ee9a90d84e89244c8a840d050728a613bc4a8a5b8305a87d6bf8c277722bc9c13f2a862c349e57c5318fa034cbe12866e3d71541cd9e72ffa3999231fdb"}}}}}, 0x462)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

2m32.227093447s ago: executing program 4 (id=11195):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0xfffffffe)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2640, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x5}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="890704", 0x3)
sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
listen(0xffffffffffffffff, 0x0)
ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m31.979655439s ago: executing program 4 (id=11198):
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
epoll_create1(0x80000)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000151709021200d8840000000904000000ff054900"/36], 0x0)
ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="400612000000fa87618a88380a120f50c3036f6abe48debd"], 0x0, 0x0})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={<r5=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12)

2m28.659744002s ago: executing program 4 (id=11207):
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='hrtimer_init\x00', r1}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESOCT=r0], 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd)
close(r7)
r8 = syz_clone(0x0, 0x0, 0x56, 0x0, 0x0, 0x0)
syz_pidfd_open(r8, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, 0x0)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={<r9=>0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)

2m25.3428538s ago: executing program 4 (id=11212):
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fb, 0x0, 0xb0, 0xb7d4}, 0xfffffffffffffd85)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x3}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa, 0xa, 0x0, 0x4800, r4, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x101, 0x4, 0x5, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r7, r8], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

2m18.262093975s ago: executing program 32 (id=11190):
socket$kcm(0xa, 0x922000000003, 0x11)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}})
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)
fsetxattr$security_selinux(r1, &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r2, 0x9d, 0x1d}, &(0x7f0000000080)=ANY=[@ANYBLOB="656e633d706b63733120686173683d7368613235362d61726d363400000000000000000000000000001000"/79], &(0x7f0000000140)="71cf216571648d22a22e7005145bba9b490b678ac3c84c4a6a1773f808ea9ea56679e460785e2f76fb9751a4446719d5bdb198d1710098801ee129165f7e351926d026adaca732ddaa0cc50959721b78bd4a3a1d9f5ccd5572d7461cf84bb6b995777222633ad259adc7dde512a9d4c4b5766892ae526308faffbf233cefe4106d798114f1e6feb7d2f2010d68a70a44eaa8fc537545ca98956e75aea9", &(0x7f0000000200)="65c74c77d44978d2f6af92847c0eaa23952c2f291d590081fb0411bd05")
socket$kcm(0x10, 0x2, 0x4)

2m9.212360094s ago: executing program 33 (id=11212):
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fb, 0x0, 0xb0, 0xb7d4}, 0xfffffffffffffd85)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x400, 0x18}, 0xc)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x81, 0x3}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002000a"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002)
writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xa, 0xa, 0x0, 0x4800, r4, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x101, 0x4, 0x5, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="fbff0400", @ANYRES32=r3, @ANYBLOB="000000003db30000185900000200"/24], &(0x7f0000000280)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r7, r8], &(0x7f0000000480)=[{0x2, 0x1, 0x7, 0xa}], 0x10, 0x101}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c)

1m50.406834387s ago: executing program 6 (id=11309):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, 0x0, 0x0)
clock_nanosleep(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

1m49.509686535s ago: executing program 6 (id=11313):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

1m49.399168161s ago: executing program 6 (id=11314):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4)
r1 = socket$kcm(0x29, 0x5, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
r3 = eventfd(0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0x0, 0x0)
write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)
read$eventfd(r3, &(0x7f00000012c0), 0x8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
syz_emit_ethernet(0x23, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@arp={0x806, @generic={0x2, 0x10, 0x6, 0x1, 0x1, @empty, 'u', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}}}, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000280)=0xffffffff, &(0x7f0000000380)=0x4)
bind$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}}, 0x24)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'})

1m49.271497683s ago: executing program 6 (id=11315):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b"])

1m45.905786274s ago: executing program 6 (id=11328):
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x6382c1, 0x0)
socket$kcm(0x2, 0xa, 0x2)
timerfd_create(0x8, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local, {[@end]}}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
socket(0xa, 0xa, 0x5)
listen(r5, 0x80)
accept$netrom(r5, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xa91d, @private2, 0x3b}, 0x20)
recvmmsg(r2, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

1m42.543451516s ago: executing program 6 (id=11338):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m29.992988728s ago: executing program 5 (id=11388):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x2, 0x0, 0x0, 0xfffffffc)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x803, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmmsg(r5, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e"], 0x45)

1m29.117043119s ago: executing program 5 (id=11391):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000006c0)="3b000000010001", 0x7)

1m29.057436448s ago: executing program 5 (id=11392):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES16], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x8, 0x0, 0x0}}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x54000, 0x2000, &(0x7f0000546000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffff9, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000)
ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100))
r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000340), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0)
write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x190da)
write$dsp(r0, &(0x7f0000000440)="b5967bacf9543571dc42e8136000", 0xe)
mount(&(0x7f0000000480)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000500)='./cgroup\x00', &(0x7f00000003c0)='ceph\x00', 0x208000, 0x0)

1m27.815591671s ago: executing program 5 (id=11397):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000000001}, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd})
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000400)='1', 0x1)
io_setup(0x1, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x5, &(0x7f00000007c0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xf68, r0, &(0x7f0000000700)="9e905283587b3249394cbfb484784a61cd53cc36a364589cdd587f6ada580739b61d45c1ce555655eccee0d895b0d78c1bb6a53651333fa9452bbf0bc75646c0d88f66d82ce527c6af1eed3a8e5e9083564100f27c7152a843bb9170b7c34b9c40", 0x61, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x7ae1, r0, &(0x7f0000000440)="855b6ed201f42c4767d705e1d34bcbc0f661491add0538dfdc94109c89472b69d6a45c1195a6c890a00581507432abf59ea55a2ecd3abd9a158b30edbb8f4055ce56baec074db00dda4e07efac65d3d03962e6ac28edcbd8b3d83365ae7f7a59e092c76b77b7263ef9a6eff568a74b463f90454e6e62e5fd18ee0d92b7ba892fe920599b2b49f8663eae5a7606249cfe98bb8db470042f6068d5535d551658a76edeb2ae53582f01405b2fb239e95e7b603586bd5455b2502f811188f98ba1ac4f76088eee9be2c5ac11ab3b17d74ab01a86e74406f13353ff27f2070d30b551d16a360620a8", 0xe6, 0x1, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x7cc, 0xffffffffffffffff, &(0x7f0000000580)="9ac7add168be16ea9dc358f7d37fb0b845837024984107bb0104000000000000799b9f9c25ee5e4cbbd74a88f34996979f28cf2187a6569bfa1d246dd5bf131686f7f6d374ff9a50279b5b23e93f7e83c2913c7471f8dbf8b3c5a7704e6ddd71c09d810d0000c1ca9231d10b672fa2392555f0e28f7da6d2f041109e4b7982aea2060f24574936359cd1c75167059219ea0f0446333be4d5c5a5aa91d0b32660ac7d19b6dd56de7027c5ef40717f4e84fdd2a8000000", 0xb6, 0x2, 0x0, 0x2}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="359f7d53e123ed8f8252f2f6689257", 0xf, 0x103, 0x0, 0x2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="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"/380, 0x17c, 0x1, 0x0, 0x2}])
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x48900, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0)
ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
accept4(r7, 0x0, 0x0, 0x0)
shutdown(r7, 0x1)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000800)='./file0\x00', 0x142)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r8}, 0x10)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn'])

1m26.440784677s ago: executing program 34 (id=11338):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m26.270835033s ago: executing program 5 (id=11401):
pipe2(0x0, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x1, 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r4, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x4000)
sendmsg$inet(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
write$tun(r8, &(0x7f0000000800)={@void, @void, @ipv6=@icmpv6={0x7, 0x6, "c3bec1", 0x442, 0x3a, 0x0, @mcast2, @mcast1, {[@dstopts={0x87}, @routing={0x16, 0xa, 0x2, 0xf7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, @loopback]}, @srh={0x0, 0x4, 0x4, 0x2, 0x81, 0x50, 0x800, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x1d, 0x4, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe16}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x10, {0x3, 0x2, 0x10, 0x9, [0x9]}}]}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x67}, @fragment={0x2c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x64}, @srh={0x1, 0xa, 0x4, 0x5, 0x2, 0x20, 0x101, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback]}], @pkt_toobig={0x2, 0x0, 0x0, 0x10001, {0x4, 0x6, ')\f\t', 0xe, 0x89, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, [@dstopts={0x1, 0x6, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x16, "54780c3472b8d8e835e70a6cd0d2218ca3ede66a8984"}, @enc_lim={0x4, 0x1, 0x3a}, @hao={0xc9, 0x10, @loopback}]}, @fragment={0x3c, 0x0, 0x0, 0x1, 0x0, 0xe, 0x67}, @dstopts={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @dstopts={0xc42988e8db6c7196, 0x15, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x7fff}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x8}}, @ra={0x5, 0x2, 0x800}, @generic={0x0, 0x8e, "cde26295f8b394766be534fb25257875caa8419f8d6741df1c849e0ba1fe318de8da72cdf6eb7c7ef43ff0a3aed556ac5a3c593f31c6903fabaa5e793110eb5de8fc5ca2413a6312514a86286a82bd4e81ec72665f7ccb27b0492b03865cb86a7edbb0190fcec082f943c7a76a4698e6dbaa958faa0e2bd06f7ec50a96c8d7f55e43db4b9ff91844fb6de669ac3f"}]}, @dstopts={0x5c, 0x4, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xc64f}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x21, 0x8, 0x2, 0xef, 0x0, [@dev={0xfe, 0x80, '\x00', 0x22}, @private1, @private2, @mcast2]}, @routing={0xff, 0x0, 0x1, 0x3}, @srh={0x4, 0x12, 0x4, 0x9, 0x7d, 0x40, 0x3, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @dev={0xfe, 0x80, '\x00', 0x19}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @enc_lim]}, @hopopts={0x5c, 0xa, '\x00', [@calipso={0x7, 0x28, {0xab1c8c247eb91a24, 0x8, 0xf9, 0x57, [0x4, 0x1, 0x161, 0xa71e]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x1, 0x200, [0x6fbc, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xd}, @ra={0x5, 0x2, 0x8}, @pad1]}], "3b06874c64f359cf91b73ffb5695b1df7e0aeb283ee9a90d84e89244c8a840d050728a613bc4a8a5b8305a87d6bf8c277722bc9c13f2a862c349e57c5318fa034cbe12866e3d71541cd9e72ffa3999231fdb"}}}}}, 0x46a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r7}, 0x18)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

1m25.278678386s ago: executing program 5 (id=11404):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1m9.129991612s ago: executing program 35 (id=11404):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

36.35260545s ago: executing program 0 (id=11548):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000480)={'dt2801\x00', [0x4f23, 0x7f, 0x1, 0x3, 0x1, 0xdea7, 0xc, 0x3, 0xa, 0xfd, 0xfffffffa, 0xffffffff, 0x401, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x4, 0x81, 0x0, 0xc6]})

35.553814349s ago: executing program 0 (id=11550):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
syz_open_dev$radio(0x0, 0x0, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
readv(r3, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
tkill(0x0, 0xb)

34.095024351s ago: executing program 0 (id=11554):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

33.875607865s ago: executing program 0 (id=11556):
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a2468", 0x7d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa", 0x43}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f", 0x79}], 0x5}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

32.758108559s ago: executing program 0 (id=11562):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6(0xa, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="c9c015b325f3a64eee6c5ea5364b940812a08efcb7ef7c7bd563268d30cc9176a30b5ce312fee52c10cd733e0dd2f9ee37ac052db27b64d5eacc1c6bd74ad31b15446176888436ecc5b1f3370965e456c775dac1a2556bb83aed5ed60f6ca7c33bdf00c9e91a7fade432f446e4355140ccfe782dccc1668b09112ce4d4f4185c59f54a9032bd922ecb1567d8700edc4104ecabd771b8de632e793568c23424a2154190558460a6212df8d304efba1aa0070eee098502e19d2342c77689551699d2447f18e34d4447"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='svcrdma_no_rwctx_err\x00', r0, 0x0, 0xfffffffffffffbff}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x208}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x7a) (async)
keyctl$invalidate(0x15, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="0c00000008000000611188000081599303150752d496000000958000000000000000000000000002ed8711e79ec8f0b590de97f41d84894273785879bc6687777ca5622e716a179d209c9c3aadb072a2c1fa1fc3315830bf5c37d7465371911eaed03761c860195f73021634fa0d47e281e37ce6ab5fac13e2f007bebada474cd6459828f6"], &(0x7f0000000000)='GPL\x00'}, 0x80)
r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xa, 0xd0e0000, 0x138, 0x100, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0xffffff00, 0xff, 'wlan1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x1, 0x3, 0x10}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, '\x00', 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x36, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x5}}}}, {{@uncond, 0x3202, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x1, 0x2, 0x4, 0x0, 0x6, 0xc], 0x5, 0x7a19653e03c56032}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) (async)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x10b, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) (async)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2, 0x1}}, 0x9})

32.623065529s ago: executing program 0 (id=11564):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16.23786546s ago: executing program 36 (id=11564):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000))
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
syz_clone(0x10806600, 0x0, 0x0, 0x0, 0x0, 0x0)
shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
socket(0x10, 0x2, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000200)={0x4007, 0x20, 0x14, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1})
syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58)

14.874959965s ago: executing program 8 (id=11616):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getresgid(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={0x0, 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x16, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x88, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x1, 0x22}, 0x2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)

14.508555095s ago: executing program 8 (id=11617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
write$binfmt_register(r4, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
socket(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x480c4)
r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0))
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x64}}, 0x0)

11.63103662s ago: executing program 8 (id=11624):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000894)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010062726964676500000c00028005001900"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)

8.498745728s ago: executing program 2 (id=11631):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$kcm(0x29, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0x64bb, 0x2, 0x3, 0x4}, &(0x7f0000000400), &(0x7f0000000340))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

7.280886953s ago: executing program 1 (id=11635):
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a2468", 0x7d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa", 0x43}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f", 0x79}], 0x5}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.260106013s ago: executing program 8 (id=11636):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setregid(0xffffffffffffffff, 0x0)
pipe2$9p(0x0, 0x80800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
socket(0x10, 0x803, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000380)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})

5.862990629s ago: executing program 8 (id=11638):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000200), 0x1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e23, 0x401, @loopback}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0x10}], 0x38)
sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)
poll(&(0x7f0000000300)=[{r4, 0x25a}, {r0, 0x8000}, {0xffffffffffffffff, 0x200}, {r0, 0x1000}, {r0, 0x20}, {r5, 0x340}, {r0, 0x1000}, {0xffffffffffffffff, 0x2b92}, {r4, 0xc2}], 0x9, 0x28fb436e)
writev(r6, &(0x7f0000000100)=[{&(0x7f0000000180)="c2", 0x1}], 0x1)
write$UHID_SET_REPORT_REPLY(r6, &(0x7f00000007c0)=ANY=[], 0xffe0)

5.837684362s ago: executing program 2 (id=11639):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
socket(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4)
r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(r4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0))
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

5.74751701s ago: executing program 7 (id=11640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002"], 0x78}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

5.716723121s ago: executing program 1 (id=11641):
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socket$netlink(0x10, 0x3, 0x4)
pipe2(&(0x7f0000000080)={0x0, <r1=>0x0}, 0x0)
pipe2(&(0x7f0000000000)={<r2=>0x0, <r3=>0x0}, 0x0)
tee(r2, r1, 0xff, 0x0)
r4 = fanotify_init(0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90)
fanotify_mark(r4, 0x1, 0x48001018, r2, 0x0)
vmsplice(r3, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000280)=0x1)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r5, &(0x7f00000001c0)="b4979f35a50faecccd29a3094ac1f8741763aa", 0x13, 0x41, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0)

5.675579969s ago: executing program 7 (id=11642):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0)

4.806359907s ago: executing program 8 (id=11643):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r1, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff190000700000001400040073797a6b616c4e49865ac2e649fc3d8afca167f25a6c6572"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4)
readv(r5, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54"], 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r7})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r8 = socket$kcm(0x10, 0x3, 0x0)
r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x2eff, 0x4, 0xd19b, 0xfffff044, 0x2, 0x9, 0x3, 0x3, 0xffe, 0xa, 0xc, 0x1001, 0x7f, 0x3, 0xffd, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x9, 0x2, 0x800, 0xe2df, 0x2, 0x80d, 0x5, 0x9, 0x6, 0x5, 0x70f]})
ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, 0x0, 0x0, 0x4})
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

4.611210785s ago: executing program 1 (id=11644):
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={<r5=>0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x149a82, 0x100)
write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12)

3.602767694s ago: executing program 9 (id=11612):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0xfe}, 0x2)
getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
fcntl$setstatus(r4, 0x4, 0x42800)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)

3.475853672s ago: executing program 1 (id=11645):
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x149a82, 0x100)
write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12)

2.54849074s ago: executing program 7 (id=11646):
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a2468", 0x7d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa", 0x43}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f", 0x79}], 0x6}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.479697563s ago: executing program 2 (id=11647):
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a2468", 0x7d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa", 0x43}], 0x5}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.296657292s ago: executing program 7 (id=11648):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x808}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$vcsa(0x0, 0x7b95b611, 0x802)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x8, 0x800)
ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000300)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000004c0)=""/105, 0x69})

2.267998969s ago: executing program 1 (id=11649):
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x40044}}], 0x1, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000)
r3 = memfd_secret(0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000001eff56365ad2ef66b8ad73c7b8354e6400000000000a5c000000060a0104000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080003400000000008000140001b812408000240800000010900010073797a30000000000900020073797a320000000014000000"], 0x84}}, 0x10)
ftruncate(r3, 0x581)
ftruncate(r3, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000544000/0x1000)=nil)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x0, 0x0})
write(r5, &(0x7f0000000280)="4591c28e8b83", 0x6)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000080), 0x4)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)

2.030818s ago: executing program 2 (id=11650):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
getresgid(&(0x7f00000000c0), 0xfffffffffffffffd, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={0x0, 0x0, 0x10}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x16, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x88, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0xd, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unlinkat(0xffffffffffffff9c, 0x0, 0x200)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x1, 0x22}, 0x2)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000680), &(0x7f00000006c0)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000700), &(0x7f0000000740)=0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0)

1.57036767s ago: executing program 2 (id=11651):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba02, 0x91)
write$selinux_load(r2, 0x0, 0x10c)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x6000050)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000480)={'dt2801\x00', [0x4f23, 0x7f, 0x1, 0x3, 0x1, 0xdea7, 0xc, 0x3, 0xa, 0xfd, 0xfffffffa, 0xffffffff, 0x401, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xb, 0xc3, 0x3, 0x4, 0x81, 0x0, 0xc6]})

1.277065689s ago: executing program 7 (id=11652):
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdfa)
socket$can_raw(0x1d, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0)
r1 = gettid()
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x2000c450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioprio_set$pid(0x3, r1, 0x6000)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x35}]}, @NHA_RES_GROUP={0x4}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x3, <r6=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000d, 0x10010, r6, 0x8e4d7000)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)
fcntl$lock(r4, 0x6, 0x0)

766.034648ms ago: executing program 2 (id=11653):
r0 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x24, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0xa7, 0xa, 0xdb, 0x8, 0x17a1, 0x128, 0xbf0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x0, 0x0, 0xea, 0x8e, 0x6c}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', <r1=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bind$packet(r0, &(0x7f0000000280)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
socket(0x9, 0x800, 0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x402)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000300)={0xa30000, 0x9, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x9a0911, 0x1, '\x00', @string=0x0}})
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x8, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000200)={r3})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x34, r7, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x2008040)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x10)
connect$bt_rfcomm(r3, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xa)
accept4$unix(r3, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x100400)

679.880508ms ago: executing program 7 (id=11654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
write$binfmt_register(r4, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237)
socket(0x2, 0x3, 0x2)
sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x480c4)
r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = dup(r5)
ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0))
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8, @broadcast}}]}]}]}, 0x64}}, 0x0)

411.53869ms ago: executing program 1 (id=11655):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55ef68"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x40001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7}, 0x1c)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$kcm(0x29, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0x64bb, 0x2, 0x3, 0x4}, &(0x7f0000000400), &(0x7f0000000340))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040))
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58, 0x200080c0}, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 9 (id=11656):
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x651, 0xfffffffffffffff8, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x1000000000000008, 0xb, 0x0, 0xcc6, 0xfffffffffffffffc, 0x1, 0x80008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x2}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a2468", 0x7d}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b", 0x42}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa", 0x43}, {&(0x7f0000000940)}], 0x6}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3285.657123][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3285.689390][T22638] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 3285.839770][T14564] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 3285.860224][T22638] usb 3-1: Using ep0 maxpacket: 16
[ 3285.886296][T22638] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 3285.906295][T22638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3285.938733][T22638] usb 3-1: Product: syz
[ 3285.949580][T22638] usb 3-1: Manufacturer: syz
[ 3285.960251][T22638] usb 3-1: SerialNumber: syz
[ 3285.981192][T14917] SELinux:  policydb magic number 0x1 does not match expected magic number 0xf97cff8c
[ 3285.992678][T14917] SELinux: failed to load policy
[ 3285.997847][T14564] usb 2-1: device descriptor read/64, error -71
[ 3286.017448][T22638] usb 3-1: config 0 descriptor??
[ 3286.268636][T14564] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 3286.427208][T14564] usb 2-1: device descriptor read/64, error -71
[ 3286.545216][T14564] usb usb2-port1: attempt power cycle
[ 3286.667676][T22638] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[ 3286.720392][T22638] usb 3-1: USB disconnect, device number 63
[ 3286.768957][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3286.785987][ T9385] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 3286.929463][T14564] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 3286.964663][ T9385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 3286.989978][T14564] usb 2-1: device descriptor read/8, error -71
[ 3287.030961][ T9385] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 3287.794746][ T9385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3287.815357][ T9385] usb 5-1: config 0 descriptor??
[ 3287.830878][T14915] ceph: Path missing in source
[ 3287.838452][ T9385] smsusb:smsusb_probe: board id=8, interface number 0
[ 3287.880779][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3287.969350][T14564] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 3287.988072][ T9385] smsusb:smsusb_probe: Device initialized with return code -19
[ 3287.998762][T14564] usb 2-1: device descriptor read/8, error -71
[ 3288.117183][T14936] netlink: 'syz.4.11131': attribute type 10 has an invalid length.
[ 3288.126804][T14564] usb usb2-port1: unable to enumerate USB device
[ 3288.148681][T14936] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 3288.625463][T14941] ceph: Path missing in source
[ 3288.992617][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3289.858619][T30994] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 3289.911032][   T30] audit: type=1326 audit(2000001026.330:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14958 comm="syz.0.11142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f125ef8f749 code=0x0
[ 3289.937467][T14937] SELinux: failed to load policy
[ 3290.104432][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3290.132489][T30994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3290.150930][T30994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3290.168660][T30994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3290.194929][T30994] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3290.231394][T30994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3290.376481][T30994] usb 3-1: config 0 descriptor??
[ 3291.216245][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3292.328072][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3292.925784][T30994] usbhid 3-1:0.0: can't add hid device: -71
[ 3292.938989][T30994] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3292.951598][T30994] usb 3-1: USB disconnect, device number 64
[ 3293.250909][   T30] audit: type=1400 audit(2000001029.463:3935): avc:  denied  { attach_queue } for  pid=14979 comm="syz.1.11148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[ 3293.440222][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3293.600004][T30994] usb 5-1: USB disconnect, device number 65
[ 3294.480341][T14995] ceph: Path missing in source
[ 3294.516712][T15002] Invalid source name
[ 3294.529934][T15002] UBIFS error (pid: 15002): cannot open "/dev/sg0", error -22
[ 3294.551728][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3294.572768][T14994] SELinux: failed to load policy
[ 3294.776186][ T9385] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 3294.831176][   T30] audit: type=1326 audit(2000001030.941:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15010 comm="syz.2.11159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3218f749 code=0x0
[ 3295.236162][ T9385] usb 2-1: Using ep0 maxpacket: 32
[ 3295.249856][ T9385] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 3295.258517][ T9385] usb 2-1: config 0 has no interface number 0
[ 3295.271034][ T9385] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 3295.281245][ T9385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.392067][ T9385] usb 2-1: Product: syz
[ 3295.396554][ T9385] usb 2-1: Manufacturer: syz
[ 3295.404076][ T9385] usb 2-1: SerialNumber: syz
[ 3295.417327][ T9385] usb 2-1: config 0 descriptor??
[ 3295.427959][ T9385] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 3295.663558][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3295.706602][T15031] FAULT_INJECTION: forcing a failure.
[ 3295.706602][T15031] name failslab, interval 1, probability 0, space 0, times 0
[ 3295.719533][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.3.11162 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3295.719557][T15031] Tainted: [L]=SOFTLOCKUP
[ 3295.719563][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3295.719572][T15031] Call Trace:
[ 3295.719579][T15031]  <TASK>
[ 3295.719586][T15031]  dump_stack_lvl+0x16c/0x1f0
[ 3295.719611][T15031]  should_fail_ex+0x512/0x640
[ 3295.719636][T15031]  ? __kmalloc_noprof+0xca/0x910
[ 3295.719668][T15031]  should_failslab+0xc2/0x120
[ 3295.719690][T15031]  __kmalloc_noprof+0xeb/0x910
[ 3295.719715][T15031]  ? comedi_alloc_subdevices+0x4a/0x240
[ 3295.719744][T15031]  ? comedi_alloc_subdevices+0x4a/0x240
[ 3295.719767][T15031]  comedi_alloc_subdevices+0x4a/0x240
[ 3295.719794][T15031]  parport_attach+0x110/0xac0
[ 3295.719819][T15031]  comedi_device_attach+0x3b3/0x900
[ 3295.719851][T15031]  do_devconfig_ioctl+0x1b1/0x710
[ 3295.719870][T15031]  ? comedi_unlocked_ioctl+0x167/0x2eb0
[ 3295.719893][T15031]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 3295.719928][T15031]  ? find_held_lock+0x2b/0x80
[ 3295.719958][T15031]  comedi_unlocked_ioctl+0x1582/0x2eb0
[ 3295.719988][T15031]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 3295.720017][T15031]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3295.720043][T15031]  ? do_vfs_ioctl+0x128/0x14f0
[ 3295.720062][T15031]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 3295.720081][T15031]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 3295.720108][T15031]  ? irqentry_exit+0x1dd/0x8c0
[ 3295.720141][T15031]  ? selinux_file_ioctl+0x180/0x270
[ 3295.720161][T15031]  ? selinux_file_ioctl+0xb4/0x270
[ 3295.720183][T15031]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 3295.720207][T15031]  __x64_sys_ioctl+0x18e/0x210
[ 3295.720228][T15031]  do_syscall_64+0xcd/0xf80
[ 3295.720251][T15031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3295.720268][T15031] RIP: 0033:0x7fea2d98f749
[ 3295.720282][T15031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3295.720298][T15031] RSP: 002b:00007fea2e8e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3295.720314][T15031] RAX: ffffffffffffffda RBX: 00007fea2dbe5fa0 RCX: 00007fea2d98f749
[ 3295.720325][T15031] RDX: 00002000000004c0 RSI: 0000000040946400 RDI: 0000000000000003
[ 3295.720336][T15031] RBP: 00007fea2e8e6090 R08: 0000000000000000 R09: 0000000000000000
[ 3295.720346][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3295.720356][T15031] R13: 00007fea2dbe6038 R14: 00007fea2dbe5fa0 R15: 00007ffec813f558
[ 3295.720381][T15031]  </TASK>
[ 3295.975916][ T9385] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 3295.989366][ T9385] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 3296.229026][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 3296.236786][T14564] usb 2-1: USB disconnect, device number 45
[ 3296.245294][T14564] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 3296.261964][T14564] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 3296.275134][T14564] quatech2 2-1:0.51: device disconnected
[ 3296.775357][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3297.801967][T22638] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 3297.887193][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3298.308163][T15064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11172'.
[ 3298.318067][T15064] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11172'.
[ 3298.411397][T22638] usb 4-1: Using ep0 maxpacket: 16
[ 3298.422164][T22638] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3298.439441][T15055] ceph: Path missing in source
[ 3298.450756][T22638] usb 4-1: config 159 has an invalid interface number: 195 but max is 0
[ 3298.480989][T22638] usb 4-1: config 159 has no interface number 0
[ 3298.583911][T22638] usb 4-1: config 159 interface 195 altsetting 5 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 3298.877909][T22638] usb 4-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 42897, setting to 1024
[ 3298.928302][T22638] usb 4-1: config 159 interface 195 has no altsetting 0
[ 3298.986296][T15072] FAULT_INJECTION: forcing a failure.
[ 3298.986296][T15072] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3298.999017][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3299.031122][T15072] CPU: 1 UID: 0 PID: 15072 Comm: syz.1.11174 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3299.031151][T15072] Tainted: [L]=SOFTLOCKUP
[ 3299.031157][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3299.031167][T15072] Call Trace:
[ 3299.031173][T15072]  <TASK>
[ 3299.031180][T15072]  dump_stack_lvl+0x16c/0x1f0
[ 3299.031205][T15072]  should_fail_ex+0x512/0x640
[ 3299.031227][T15072]  _copy_from_user+0x2e/0xd0
[ 3299.031243][T15072]  userfaultfd_ioctl+0x20d2/0x3930
[ 3299.031262][T15072]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 3299.031276][T15072]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 3299.031294][T15072]  ? hook_file_ioctl_common+0x144/0x410
[ 3299.031314][T15072]  ? selinux_file_ioctl+0x180/0x270
[ 3299.031327][T15072]  ? selinux_file_ioctl+0xb4/0x270
[ 3299.031340][T15072]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[ 3299.031356][T15072]  ? __x64_sys_ioctl+0x18e/0x210
[ 3299.031367][T15072]  __x64_sys_ioctl+0x18e/0x210
[ 3299.031380][T15072]  do_syscall_64+0xcd/0xf80
[ 3299.031394][T15072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3299.031405][T15072] RIP: 0033:0x7f87bdf8f749
[ 3299.031415][T15072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3299.031425][T15072] RSP: 002b:00007f87bede8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3299.031435][T15072] RAX: ffffffffffffffda RBX: 00007f87be1e5fa0 RCX: 00007f87bdf8f749
[ 3299.031442][T15072] RDX: 0000200000000100 RSI: 00000000c028aa03 RDI: 0000000000000003
[ 3299.031448][T15072] RBP: 00007f87bede8090 R08: 0000000000000000 R09: 0000000000000000
[ 3299.031454][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3299.031460][T15072] R13: 00007f87be1e6038 R14: 00007f87be1e5fa0 R15: 00007fff27f9caf8
[ 3299.031474][T15072]  </TASK>
[ 3299.602448][   T30] audit: type=1326 audit(2000001035.403:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15075 comm="syz.2.11176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a3218f749 code=0x0
[ 3299.692541][T15061] SELinux: failed to load policy
[ 3300.110848][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3301.010843][T22638] usb 4-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c
[ 3301.021054][T22638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3301.031134][T15088] Set syz0 is full, maxelem 0 reached
[ 3301.063135][T22638] usb 4-1: Product: syz
[ 3301.098834][T22638] usb 4-1: can't set config #159, error -71
[ 3301.201421][T22638] usb 4-1: USB disconnect, device number 76
[ 3301.222646][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3302.176225][T12997] Bluetooth: hci0: link tx timeout
[ 3302.183104][T12997] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[ 3302.200258][T12997] Bluetooth: hci0: link tx timeout
[ 3302.287617][T12997] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 3302.334470][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3302.765583][T15108] comedi comedi3: comedi_parport: I/O port conflict (0xcff,3)
[ 3303.054600][T15111] SELinux: failed to load policy
[ 3303.355142][T15116] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11180'.
[ 3303.422973][T15094] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11180'.
[ 3303.446304][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3304.477279][T12997] Bluetooth: hci0: command 0x0406 tx timeout
[ 3304.558137][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3305.659528][T15166] tmpfs: Bad value for 'mpol'
[ 3305.669953][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3306.781778][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3307.381159][T12997] Bluetooth: hci0: command 0x0406 tx timeout
[ 3307.434479][T15185] Set syz0 is full, maxelem 0 reached
[ 3307.893809][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3307.979302][T14036] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 3308.180952][T15193] bridge0: entered promiscuous mode
[ 3308.188605][T15193] macvlan2: entered promiscuous mode
[ 3308.193093][T14036] usb 5-1: device descriptor read/64, error -71
[ 3308.272499][T15197] ceph: Path missing in source
[ 3309.005464][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3309.699674][T15196] SELinux: failed to load policy
[ 3309.775189][T14036] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 3309.914324][T14036] usb 5-1: device descriptor read/64, error -71
[ 3310.117241][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3310.172494][T14036] usb usb5-port1: attempt power cycle
[ 3310.588579][T14036] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 3310.615645][T15219] netlink: 'syz.2.11203': attribute type 4 has an invalid length.
[ 3310.635355][T14036] usb 5-1: device descriptor read/8, error -71
[ 3310.638796][T15219] netlink: 'syz.2.11203': attribute type 4 has an invalid length.
[ 3310.737940][T12997] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 3310.760394][T12997] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 3310.768368][T12997] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 3310.776645][T12997] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 3310.784155][T12997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 3310.900939][T14113] bridge0: port 3(syz_tun) entered disabled state
[ 3310.999343][T22638] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 3311.012656][T14113] syz_tun (unregistering): left allmulticast mode
[ 3311.019896][T14113] syz_tun (unregistering): left promiscuous mode
[ 3311.026715][T14113] bridge0: port 3(syz_tun) entered disabled state
[ 3311.098417][T15220] chnl_net:caif_netlink_parms(): no params data found
[ 3311.148266][T15220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3311.155633][T15220] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3311.163839][T15220] bridge_slave_0: entered allmulticast mode
[ 3311.170931][T15220] bridge_slave_0: entered promiscuous mode
[ 3311.177308][T22638] usb 3-1: Using ep0 maxpacket: 32
[ 3311.184156][T22638] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[ 3311.187458][T15220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3311.199418][T22638] usb 3-1: config 8 has no interface number 0
[ 3311.199806][T15220] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3311.205626][T22638] usb 3-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[ 3311.215327][T15220] bridge_slave_1: entered allmulticast mode
[ 3311.224262][T22638] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[ 3311.231077][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3311.232350][T15220] bridge_slave_1: entered promiscuous mode
[ 3311.244930][T22638] usb 3-1: config 8 interface 203 altsetting 1 endpoint 0xB has invalid wMaxPacketSize 0
[ 3311.265263][T22638] usb 3-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 0
[ 3311.276574][T22638] usb 3-1: config 8 interface 203 has no altsetting 0
[ 3311.285730][T22638] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[ 3311.294802][T22638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3311.302782][T22638] usb 3-1: Product: syz
[ 3311.307015][T22638] usb 3-1: Manufacturer: syz
[ 3311.308261][T15220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3311.311594][T22638] usb 3-1: SerialNumber: syz
[ 3311.328541][T15219] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 3311.328711][T15220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3311.364869][T15220] team0: Port device team_slave_0 added
[ 3311.372879][T15220] team0: Port device team_slave_1 added
[ 3311.397915][T15220] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3311.405181][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3311.431606][T15220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3311.442396][T14036] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 3311.452059][T15220] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3311.459131][T15220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3311.485312][T15220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3311.496763][T14036] usb 5-1: device descriptor read/8, error -71
[ 3311.529628][T15220] hsr_slave_0: entered promiscuous mode
[ 3311.535852][T15220] hsr_slave_1: entered promiscuous mode
[ 3311.555248][T22638] port100 3-1:8.203: NFC: Could not get supported command types
[ 3311.567867][T22638] usb 3-1: USB disconnect, device number 65
[ 3311.626229][T14036] usb usb5-port1: unable to enumerate USB device
[ 3311.647223][T15220] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3311.729359][T15220] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3311.772995][T15220] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3311.832837][T15220] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3311.930423][T15220] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 3311.939586][T15220] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 3311.948386][T15220] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 3311.958421][T15220] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 3311.979496][T15220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3311.986684][T15220] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3311.994170][T15220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3312.001237][T15220] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3312.039089][T15220] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3312.054287][T17668] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3312.061984][T17668] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3312.075906][T15220] 8021q: adding VLAN 0 to HW filter on device team0
[ 3312.088507][T17668] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3312.095610][T17668] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3312.109033][T17375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3312.116149][T17375] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3312.340918][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3312.561068][T15220] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3312.635180][T15220] veth0_vlan: entered promiscuous mode
[ 3312.658613][T15220] veth1_vlan: entered promiscuous mode
[ 3312.720600][T15220] veth0_macvtap: entered promiscuous mode
[ 3312.732103][T15220] veth1_macvtap: entered promiscuous mode
[ 3312.766753][T15220] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3312.786174][T15220] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3312.815198][T17668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3312.826312][T17668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3312.837193][T17668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3312.849970][T17668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3312.947639][T29717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3312.955887][T29717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3313.029635][T12997] Bluetooth: hci5: command tx timeout
[ 3313.064276][T17668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3313.080525][T17668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3313.452824][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3313.977059][T14036] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 3314.179695][T14036] usb 2-1: Using ep0 maxpacket: 8
[ 3314.192005][T14036] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3314.222909][T14036] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 3314.241860][T14036] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[ 3314.343803][T14036] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3314.386793][T14036] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[ 3314.407488][T14036] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3314.449108][T14036] usb 2-1: Product: syz
[ 3314.539921][T15265] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11212'.
[ 3314.564543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3314.586890][T14036] usb 2-1: Manufacturer: syz
[ 3314.610801][T14036] usb 2-1: SerialNumber: syz
[ 3314.644193][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3314.755603][T14036] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected
[ 3314.819808][T15257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3314.836730][T14036] usb 2-1: Direct firmware load for moxa/moxa-1110.fw failed with error -2
[ 3314.858781][T14036] usb 2-1: Falling back to sysfs fallback for: moxa/moxa-1110.fw
[ 3315.085838][T17375] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3315.105192][T17375] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3315.289377][   T30] audit: type=1400 audit(2000001050.023:3938): avc:  denied  { setopt } for  pid=15266 comm="syz.0.11213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 3315.309826][T12997] Bluetooth: hci5: command tx timeout
[ 3315.328575][ T2128] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3315.363843][ T2128] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3315.378615][ T2128] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3315.387658][ T2128] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3315.396941][ T2128] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 3315.406954][ T2128] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3315.676363][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3315.776552][T30994] libceph: connect (1)[c::]:6789 error -101
[ 3315.782632][T30994] libceph: mon0 (1)[c::]:6789 connect error
[ 3315.917678][T15275] ceph: No mds server is up or the cluster is laggy
[ 3315.939357][T15282] Set syz0 is full, maxelem 0 reached
[ 3316.720253][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11220'.
[ 3316.741861][T15296] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 3316.756431][ T4234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3316.764427][ T4234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3316.788185][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3317.472577][T12997] Bluetooth: hci5: command tx timeout
[ 3317.900242][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3317.921953][T15303] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11222'.
[ 3318.136466][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11223'.
[ 3319.011864][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3319.696031][T12997] Bluetooth: hci5: command tx timeout
[ 3320.123648][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3321.235634][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3321.361761][T15345] FAULT_INJECTION: forcing a failure.
[ 3321.361761][T15345] name failslab, interval 1, probability 0, space 0, times 0
[ 3321.367903][T27940] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 3321.384003][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.1.11234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3321.384026][T15345] Tainted: [L]=SOFTLOCKUP
[ 3321.384032][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3321.384040][T15345] Call Trace:
[ 3321.384045][T15345]  <TASK>
[ 3321.384051][T15345]  dump_stack_lvl+0x16c/0x1f0
[ 3321.384073][T15345]  should_fail_ex+0x512/0x640
[ 3321.384093][T15345]  ? fs_reclaim_acquire+0xae/0x150
[ 3321.384113][T15345]  should_failslab+0xc2/0x120
[ 3321.384131][T15345]  __kmalloc_noprof+0xeb/0x910
[ 3321.384152][T15345]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3321.384175][T15345]  ? tomoyo_realpath_from_path+0xc2/0x6e0
[ 3321.384192][T15345]  tomoyo_realpath_from_path+0xc2/0x6e0
[ 3321.384213][T15345]  ? tomoyo_profile+0x47/0x60
[ 3321.384235][T15345]  tomoyo_path_number_perm+0x245/0x580
[ 3321.384249][T15345]  ? tomoyo_path_number_perm+0x237/0x580
[ 3321.384265][T15345]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3321.384282][T15345]  ? find_held_lock+0x2b/0x80
[ 3321.384321][T15345]  ? find_held_lock+0x2b/0x80
[ 3321.384343][T15345]  ? hook_file_ioctl_common+0x144/0x410
[ 3321.384368][T15345]  ? __fget_files+0x20e/0x3c0
[ 3321.384391][T15345]  security_file_ioctl+0x9b/0x240
[ 3321.384410][T15345]  __x64_sys_ioctl+0xb7/0x210
[ 3321.384429][T15345]  do_syscall_64+0xcd/0xf80
[ 3321.384448][T15345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3321.384462][T15345] RIP: 0033:0x7f1f8f18f749
[ 3321.384474][T15345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3321.384487][T15345] RSP: 002b:00007f1f900c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3321.384500][T15345] RAX: ffffffffffffffda RBX: 00007f1f8f3e5fa0 RCX: 00007f1f8f18f749
[ 3321.384509][T15345] RDX: 0000200000000200 RSI: 000000008050640a RDI: 0000000000000003
[ 3321.384517][T15345] RBP: 00007f1f900c5090 R08: 0000000000000000 R09: 0000000000000000
[ 3321.384525][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3321.384533][T15345] R13: 00007f1f8f3e6038 R14: 00007f1f8f3e5fa0 R15: 00007ffc35672d78
[ 3321.384553][T15345]  </TASK>
[ 3321.384568][T15345] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3321.617129][T15345] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2
[ 3321.628240][T27940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 3321.637349][T27940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 3321.646716][T27940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 3321.654373][T27940] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 3321.957716][T15343] chnl_net:caif_netlink_parms(): no params data found
[ 3322.075941][T15343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3322.086243][T15343] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3322.094038][T15343] bridge_slave_0: entered allmulticast mode
[ 3322.103311][T15343] bridge_slave_0: entered promiscuous mode
[ 3322.114200][T15343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3322.133169][T15343] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3322.140532][T15343] bridge_slave_1: entered allmulticast mode
[ 3322.148747][T15343] bridge_slave_1: entered promiscuous mode
[ 3322.195739][T15343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3322.212888][T15343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3322.258590][T15343] team0: Port device team_slave_0 added
[ 3322.267115][T15343] team0: Port device team_slave_1 added
[ 3322.308359][T15343] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3322.316161][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3322.346324][T15343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3322.356990][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3322.371691][T15343] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3322.378730][T15343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3322.405625][T15343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3322.469560][T15343] hsr_slave_0: entered promiscuous mode
[ 3322.477511][T15343] hsr_slave_1: entered promiscuous mode
[ 3322.484096][T15343] debugfs: 'hsr0' already exists in 'hsr'
[ 3322.490302][T15343] Cannot create hsr debugfs directory
[ 3322.751642][T15343] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 3322.768098][T15343] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 3322.782882][T15343] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 3322.794513][T15343] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 3322.840343][T15343] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3322.847471][T15343] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3322.854898][T15343] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3322.862016][T15343] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3322.945692][T15343] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3322.962939][T17375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3322.974678][T17375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3322.998368][T15343] 8021q: adding VLAN 0 to HW filter on device team0
[ 3323.012330][T17375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3323.019458][T17375] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3323.032722][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3323.039834][ T6729] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3323.435829][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11242'.
[ 3323.445688][T15380] syz_tun: refused to change device tx_queue_len
[ 3323.458174][T15380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15380 comm=syz.1.11242
[ 3323.459141][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3323.516114][T15380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11242'.
[ 3323.635869][T15343] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3323.847905][T15393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11243'.
[ 3323.887483][T27940] Bluetooth: hci2: command tx timeout
[ 3323.994941][T15397] 9p: Bad value for 'rfdno'
[ 3324.007787][T15397] Set syz0 is full, maxelem 0 reached
[ 3324.023159][T15343] veth0_vlan: entered promiscuous mode
[ 3324.052976][T15343] veth1_vlan: entered promiscuous mode
[ 3324.124976][T15343] veth0_macvtap: entered promiscuous mode
[ 3324.149839][T15343] veth1_macvtap: entered promiscuous mode
[ 3324.438138][T15343] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3324.487653][T15343] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3324.520966][  T689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.571001][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3324.631448][T21339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.659432][T21339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.681442][T21339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3324.949936][T21339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3324.959316][T21339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3325.005514][T28832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3325.013819][T28832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3325.100631][T15407] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2
[ 3325.191125][T30994] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 3325.301635][T15411] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11247'.
[ 3325.310905][T15411] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11247'.
[ 3325.340722][T30994] usb 3-1: device descriptor read/64, error -71
[ 3325.598934][T30994] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 3325.693509][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3325.779167][T30994] usb 3-1: device descriptor read/64, error -71
[ 3325.910222][T30994] usb usb3-port1: attempt power cycle
[ 3326.110416][T27940] Bluetooth: hci2: command tx timeout
[ 3326.286204][T30994] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 3326.318246][T15422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11250'.
[ 3326.325890][T30994] usb 3-1: device descriptor read/8, error -71
[ 3326.333770][T15422] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11250'.
[ 3326.580820][T30994] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 3326.805303][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3326.836899][T30994] usb 3-1: device descriptor read/8, error -71
[ 3326.974946][T30994] usb usb3-port1: unable to enumerate USB device
[ 3327.322213][T15433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11253'.
[ 3327.331444][T15433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11253'.
[ 3327.906435][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3328.403282][T30994] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 3328.410973][T27940] Bluetooth: hci2: command tx timeout
[ 3328.635075][T30994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3328.722721][T30994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3328.760883][T30994] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 3328.832716][T30994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3328.889543][T30994] usb 3-1: config 0 descriptor??
[ 3329.020752][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3330.130076][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3330.643194][T27940] Bluetooth: hci2: command tx timeout
[ 3330.942869][T30994] usbhid 3-1:0.0: can't add hid device: -71
[ 3330.948876][T30994] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3330.997174][T30994] usb 3-1: USB disconnect, device number 70
[ 3331.151008][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11260'.
[ 3331.241900][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3331.258484][T15472] Bluetooth: MGMT ver 1.23
[ 3331.604978][T15471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11260'.
[ 3331.757623][T12997] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 3331.767952][T12997] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 3331.777336][T12997] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 3331.785042][T12997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 3331.792553][T12997] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 3331.902264][T15481] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 3332.353733][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3332.485153][T15475] chnl_net:caif_netlink_parms(): no params data found
[ 3333.476215][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3333.978814][T12997] Bluetooth: hci6: command tx timeout
[ 3334.110532][T15475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3334.124748][T15475] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3334.180998][T15475] bridge_slave_0: entered allmulticast mode
[ 3334.194409][T15475] bridge_slave_0: entered promiscuous mode
[ 3334.577350][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3335.197814][T15475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3335.204979][T15475] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3335.225061][T15475] bridge_slave_1: entered allmulticast mode
[ 3335.277904][T15475] bridge_slave_1: entered promiscuous mode
[ 3335.665560][T15512] SELinux: failed to load policy
[ 3335.674777][T15512] ceph: Path missing in source
[ 3335.689174][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3335.699083][T15475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3335.734105][T15475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3335.826403][T15475] team0: Port device team_slave_0 added
[ 3335.852191][T15475] team0: Port device team_slave_1 added
[ 3336.167071][T15523] bridge0: entered promiscuous mode
[ 3336.180156][T15523] macvlan2: entered promiscuous mode
[ 3336.199263][T15475] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3336.206250][T12997] Bluetooth: hci6: command tx timeout
[ 3336.226383][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3336.265841][T15475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3336.285376][T15475] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3336.307202][T15475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3336.337417][T15475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3336.402832][T15475] hsr_slave_0: entered promiscuous mode
[ 3336.417981][T15475] hsr_slave_1: entered promiscuous mode
[ 3336.440504][T15475] debugfs: 'hsr0' already exists in 'hsr'
[ 3336.461919][T15475] Cannot create hsr debugfs directory
[ 3336.800989][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3337.576735][T15475] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 3337.604937][T15475] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 3337.913459][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3338.016817][T15475] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 3338.142137][T15475] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 3338.462291][T12997] Bluetooth: hci6: command tx timeout
[ 3338.484607][T15475] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3338.507272][T15475] 8021q: adding VLAN 0 to HW filter on device team0
[ 3338.545530][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3338.552670][ T6729] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3338.572766][T16152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3338.579926][T16152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3338.732520][T15571] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3339.024775][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3339.329801][T15575] netlink: 'syz.1.11286': attribute type 10 has an invalid length.
[ 3339.987090][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 3339.993521][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 3340.079364][T15575] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 3340.136504][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3340.324242][T15475] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3340.651321][T12997] Bluetooth: hci6: command tx timeout
[ 3340.888530][T15475] veth0_vlan: entered promiscuous mode
[ 3340.926439][T15475] veth1_vlan: entered promiscuous mode
[ 3341.248370][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3341.846263][T15475] veth0_macvtap: entered promiscuous mode
[ 3341.855457][T15475] veth1_macvtap: entered promiscuous mode
[ 3341.883411][T15475] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3341.897744][T15475] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3341.910526][T17375] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3341.975725][T17375] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3342.023010][T17375] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3342.072383][T17375] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3342.182692][T15603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11291'.
[ 3342.203728][T15603] bridge0: port 3(syz_tun) entered disabled state
[ 3342.210398][T15603] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3342.217478][T15603] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3342.266467][T15606] misc userio: Invalid payload size
[ 3342.307523][T15606] misc userio: No port type given on /dev/userio
[ 3342.360122][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3342.905459][T15608] misc userio: The device must be registered before sending interrupts
[ 3343.044059][T29292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3343.081341][T29292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3343.471945][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3343.916089][T17375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3343.962673][T17375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3344.583769][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3345.204380][T27940] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 3345.216494][T27940] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 3345.224351][T27940] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 3345.234530][T27940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 3345.241989][T27940] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 3345.695627][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3345.743055][T15633] chnl_net:caif_netlink_parms(): no params data found
[ 3346.317315][T15587] syz_tun (unregistering): left allmulticast mode
[ 3346.325743][T15587] syz_tun (unregistering): left promiscuous mode
[ 3346.390269][T15587] bridge0: port 3(syz_tun) entered disabled state
[ 3346.403509][T15646] FAULT_INJECTION: forcing a failure.
[ 3346.403509][T15646] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3346.422307][T15646] CPU: 0 UID: 0 PID: 15646 Comm: syz.1.11301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3346.422333][T15646] Tainted: [L]=SOFTLOCKUP
[ 3346.422339][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3346.422348][T15646] Call Trace:
[ 3346.422354][T15646]  <TASK>
[ 3346.422360][T15646]  dump_stack_lvl+0x16c/0x1f0
[ 3346.422386][T15646]  should_fail_ex+0x512/0x640
[ 3346.422417][T15646]  _copy_to_user+0x32/0xd0
[ 3346.422441][T15646]  simple_read_from_buffer+0xcb/0x170
[ 3346.422465][T15646]  proc_fail_nth_read+0x197/0x240
[ 3346.422483][T15646]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3346.422501][T15646]  ? rw_verify_area+0xcf/0x6c0
[ 3346.422519][T15646]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3346.422535][T15646]  vfs_read+0x1e4/0xcf0
[ 3346.422556][T15646]  ? __pfx___mutex_lock+0x10/0x10
[ 3346.422579][T15646]  ? __pfx_vfs_read+0x10/0x10
[ 3346.422604][T15646]  ? __fget_files+0x20e/0x3c0
[ 3346.422633][T15646]  ksys_read+0x12a/0x250
[ 3346.422652][T15646]  ? __pfx_ksys_read+0x10/0x10
[ 3346.422679][T15646]  do_syscall_64+0xcd/0xf80
[ 3346.422700][T15646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3346.422715][T15646] RIP: 0033:0x7f1f8f18e15c
[ 3346.422728][T15646] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3346.422742][T15646] RSP: 002b:00007f1f900a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3346.422756][T15646] RAX: ffffffffffffffda RBX: 00007f1f8f3e6090 RCX: 00007f1f8f18e15c
[ 3346.422766][T15646] RDX: 000000000000000f RSI: 00007f1f900a40a0 RDI: 000000000000000a
[ 3346.422775][T15646] RBP: 00007f1f900a4090 R08: 0000000000000000 R09: 0000000000000000
[ 3346.422784][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3346.422793][T15646] R13: 00007f1f8f3e6128 R14: 00007f1f8f3e6090 R15: 00007ffc35672d78
[ 3346.422815][T15646]  </TASK>
[ 3346.807811][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3346.999992][   T30] audit: type=1400 audit(2000001079.732:3939): avc:  denied  { execute } for  pid=15651 comm="syz.5.11298" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=245888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[ 3347.409133][T12997] Bluetooth: hci7: command tx timeout
[ 3347.554680][T15633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3347.584992][T15633] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3347.606647][T15633] bridge_slave_0: entered allmulticast mode
[ 3347.629462][T15633] bridge_slave_0: entered promiscuous mode
[ 3347.653773][T15633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3347.680593][T15633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3347.709574][T15633] bridge_slave_1: entered allmulticast mode
[ 3347.734247][T15633] bridge_slave_1: entered promiscuous mode
[ 3347.919543][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3348.189442][T15633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3348.224106][T15633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3348.725714][T15633] team0: Port device team_slave_0 added
[ 3348.754511][T15633] team0: Port device team_slave_1 added
[ 3348.824661][T15633] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3348.832389][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3348.859828][T15633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3348.889183][T15633] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3348.900009][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3348.933046][T15633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3349.031392][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3349.384987][T15633] hsr_slave_0: entered promiscuous mode
[ 3349.407397][T15633] hsr_slave_1: entered promiscuous mode
[ 3349.423664][T15633] debugfs: 'hsr0' already exists in 'hsr'
[ 3349.437733][T15633] Cannot create hsr debugfs directory
[ 3349.630089][T12997] Bluetooth: hci7: command tx timeout
[ 3349.819635][T15633] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3349.936144][T15633] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3349.962844][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3349.984962][ T6359] IPVS: starting estimator thread 0...
[ 3349.993511][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3350.051058][T15699] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 3350.078704][T15702] IPVS: using max 47 ests per chain, 112800 per kthread
[ 3350.136644][T15633] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3350.153762][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3350.266196][T15633] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3350.578345][T15633] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3350.604916][T15633] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3350.629524][T15633] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3350.670400][T15633] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3350.834835][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11317'.
[ 3350.865095][T15633] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3350.884968][T15633] 8021q: adding VLAN 0 to HW filter on device team0
[ 3351.026279][T29292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3351.033457][T29292] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3351.080377][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3351.087538][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3351.265617][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3351.470565][T15633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3351.762326][T15633] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3351.853465][T12997] Bluetooth: hci7: command tx timeout
[ 3351.878575][T15633] veth0_vlan: entered promiscuous mode
[ 3351.915787][T15633] veth1_vlan: entered promiscuous mode
[ 3352.021257][T15633] veth0_macvtap: entered promiscuous mode
[ 3352.051434][T15633] veth1_macvtap: entered promiscuous mode
[ 3352.101781][T15633] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3352.147143][T15633] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3352.209484][T10859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3352.251133][T10859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3352.289260][T10859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3352.335332][T10859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3352.366611][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3352.509103][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3352.528690][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3352.626407][T26526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3352.668631][T26526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3353.060903][T15765] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3353.478391][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3353.683394][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11327'.
[ 3354.077141][T12997] Bluetooth: hci7: command tx timeout
[ 3354.590217][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3355.310979][T15786] FAT-fs (loop11): unable to read boot sector
[ 3355.550049][   T30] audit: type=1400 audit(2000001087.486:3940): avc:  denied  { create } for  pid=15781 comm="syz.5.11331" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 3355.626608][   T30] audit: type=1400 audit(2000001087.496:3941): avc:  denied  { mounton } for  pid=15781 comm="syz.5.11331" path="/20/file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 3355.702376][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3355.859338][   T30] audit: type=1400 audit(2000001088.019:3942): avc:  denied  { unlink } for  pid=15343 comm="syz-executor" name="file0" dev="tmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 3356.813832][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3356.846323][T27940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 3356.857178][T27940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 3356.890774][T27940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 3356.909184][T27940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 3356.916515][T27940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 3356.992480][   T30] audit: type=1400 audit(2000001089.076:3943): avc:  denied  { accept } for  pid=15806 comm="syz.5.11337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 3357.221240][T15815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11337'.
[ 3357.582697][ T4463] syz_tun (unregistering): left allmulticast mode
[ 3357.608040][ T4463] syz_tun (unregistering): left promiscuous mode
[ 3357.620711][ T4463] bridge0: port 3(syz_tun) entered disabled state
[ 3357.936352][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3358.152521][T15837] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3358.167223][T15837] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3358.368784][T15809] chnl_net:caif_netlink_parms(): no params data found
[ 3358.571852][T15844] FAULT_INJECTION: forcing a failure.
[ 3358.571852][T15844] name failslab, interval 1, probability 0, space 0, times 0
[ 3358.584798][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.5.11345 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3358.584824][T15844] Tainted: [L]=SOFTLOCKUP
[ 3358.584829][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3358.584835][T15844] Call Trace:
[ 3358.584839][T15844]  <TASK>
[ 3358.584844][T15844]  dump_stack_lvl+0x16c/0x1f0
[ 3358.584863][T15844]  should_fail_ex+0x512/0x640
[ 3358.584879][T15844]  ? fs_reclaim_acquire+0xae/0x150
[ 3358.584895][T15844]  should_failslab+0xc2/0x120
[ 3358.584909][T15844]  __kmalloc_noprof+0xeb/0x910
[ 3358.584925][T15844]  ? tomoyo_encode2+0x100/0x3e0
[ 3358.584942][T15844]  ? tomoyo_encode2+0x100/0x3e0
[ 3358.584954][T15844]  tomoyo_encode2+0x100/0x3e0
[ 3358.584967][T15844]  ? rcu_is_watching+0x12/0xc0
[ 3358.584979][T15844]  tomoyo_encode+0x29/0x50
[ 3358.584992][T15844]  tomoyo_mount_acl+0x144/0x850
[ 3358.585009][T15844]  ? __pfx_tomoyo_mount_acl+0x10/0x10
[ 3358.585024][T15844]  ? __pfx___schedule+0x10/0x10
[ 3358.585048][T15844]  ? tomoyo_mount_permission+0x3ce/0x420
[ 3358.585061][T15844]  ? tomoyo_mount_permission+0x10f/0x420
[ 3358.585076][T15844]  tomoyo_mount_permission+0x16d/0x420
[ 3358.585088][T15844]  ? tomoyo_mount_permission+0x14f/0x420
[ 3358.585107][T15844]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 3358.585129][T15844]  security_sb_mount+0x9b/0x260
[ 3358.585142][T15844]  path_mount+0x158/0x23a0
[ 3358.585152][T15844]  ? rcu_is_watching+0x12/0xc0
[ 3358.585164][T15844]  ? __pfx_path_mount+0x10/0x10
[ 3358.585173][T15844]  ? kmem_cache_free+0x2d8/0x770
[ 3358.585185][T15844]  ? putname+0xf5/0x1a0
[ 3358.585202][T15844]  ? putname+0xf5/0x1a0
[ 3358.585216][T15844]  ? putname+0xf5/0x1a0
[ 3358.585232][T15844]  ? __x64_sys_mount+0x293/0x310
[ 3358.585242][T15844]  __x64_sys_mount+0x293/0x310
[ 3358.585252][T15844]  ? __pfx___x64_sys_mount+0x10/0x10
[ 3358.585263][T15844]  ? trace_irq_enable.constprop.0+0x2f/0x110
[ 3358.585279][T15844]  do_syscall_64+0xcd/0xf80
[ 3358.585293][T15844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3358.585304][T15844] RIP: 0033:0x7f5e6858f749
[ 3358.585314][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3358.585324][T15844] RSP: 002b:00007f5e667d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 3358.585335][T15844] RAX: ffffffffffffffda RBX: 00007f5e687e6090 RCX: 00007f5e6858f749
[ 3358.585342][T15844] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000
[ 3358.585348][T15844] RBP: 00007f5e667d5090 R08: 0000200000000140 R09: 0000000000000000
[ 3358.585354][T15844] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[ 3358.585360][T15844] R13: 00007f5e687e6128 R14: 00007f5e687e6090 R15: 00007fff5b91c6c8
[ 3358.585374][T15844]  </TASK>
[ 3359.048177][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3359.124067][T27940] Bluetooth: hci1: command tx timeout
[ 3360.149302][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3360.247070][T15809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3360.288573][T15809] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3360.296794][T15809] bridge_slave_0: entered allmulticast mode
[ 3360.312530][T15809] bridge_slave_0: entered promiscuous mode
[ 3361.176012][T15809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3361.183140][T15809] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3361.204807][T15809] bridge_slave_1: entered allmulticast mode
[ 3361.229126][T15809] bridge_slave_1: entered promiscuous mode
[ 3361.261272][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3361.340431][ T4281] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 3361.344186][T15809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3361.357110][T27940] Bluetooth: hci1: command tx timeout
[ 3361.366129][   T30] audit: type=1400 audit(2000001093.173:3944): avc:  denied  { watch watch_reads } for  pid=15862 comm="syz.0.11350" path="pipe:[246844]" dev="pipefs" ino=246844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[ 3361.367103][T15809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3361.430721][T15863] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 3361.495208][T15809] team0: Port device team_slave_0 added
[ 3361.505272][T15809] team0: Port device team_slave_1 added
[ 3361.537193][T15809] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3361.544384][ T4281] usb 6-1: Using ep0 maxpacket: 16
[ 3361.551999][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3361.583945][ T4281] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 3361.593375][T15809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3361.604368][ T4281] usb 6-1: config 159 has an invalid interface number: 195 but max is 0
[ 3361.612708][ T4281] usb 6-1: config 159 has no interface number 0
[ 3361.625164][ T4281] usb 6-1: config 159 interface 195 altsetting 5 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 3361.641720][T15809] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3361.649026][ T4281] usb 6-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 42897, setting to 1024
[ 3361.660881][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3361.701003][ T4281] usb 6-1: config 159 interface 195 has no altsetting 0
[ 3361.708382][T15809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3361.721096][ T4281] usb 6-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c
[ 3361.731172][ T4281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3361.747711][ T4281] usb 6-1: Product: syz
[ 3361.751899][ T4281] usb 6-1: Manufacturer: syz
[ 3361.760064][ T4281] usb 6-1: SerialNumber: syz
[ 3361.863953][T15809] hsr_slave_0: entered promiscuous mode
[ 3361.880928][T15809] hsr_slave_1: entered promiscuous mode
[ 3361.890209][T15809] debugfs: 'hsr0' already exists in 'hsr'
[ 3361.897825][T15809] Cannot create hsr debugfs directory
[ 3362.061862][ T4281] udl 6-1:159.195: [drm] Unrecognized vendor firmware descriptor
[ 3362.095393][ T4281] [drm:udl_init] *ERROR* Selecting channel failed
[ 3362.127194][ T4281] [drm] Initialized udl 0.0.1 for 6-1:159.195 on minor 2
[ 3362.146721][ T4281] [drm] Initialized udl on minor 2
[ 3362.165983][ T4281] udl 6-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3362.204764][ T4281] udl 6-1:159.195: [drm] Cannot find any crtc or sizes
[ 3362.225993][T14654] udl 6-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3362.239240][ T4281] usb 6-1: USB disconnect, device number 2
[ 3362.266097][T14654] udl 6-1:159.195: [drm] Cannot find any crtc or sizes
[ 3362.373224][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3362.466035][T15880] kvm: pic: single mode not supported
[ 3362.466636][T15880] kvm: pic: single mode not supported
[ 3362.472634][T15880] kvm: pic: level sensitive irq not supported
[ 3362.498986][T15880] kvm: pic: single mode not supported
[ 3362.506332][T15880] kvm: pic: level sensitive irq not supported
[ 3363.338781][T15809] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 3363.355954][T15809] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 3363.370381][T15809] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 3363.484907][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3363.955216][T27940] Bluetooth: hci1: command tx timeout
[ 3364.113868][T15809] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 3364.350271][T15809] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3364.405130][T15809] 8021q: adding VLAN 0 to HW filter on device team0
[ 3364.470462][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3364.477596][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3364.520801][T21499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3364.527960][T21499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3364.607694][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3364.618226][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11364'.
[ 3364.780428][T15809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3365.065404][T15809] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3365.102717][T15809] veth0_vlan: entered promiscuous mode
[ 3365.111824][T15809] veth1_vlan: entered promiscuous mode
[ 3365.141256][T15809] veth0_macvtap: entered promiscuous mode
[ 3365.155250][T15922] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 3365.169083][T15809] veth1_macvtap: entered promiscuous mode
[ 3365.184325][T15809] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3365.194696][T15809] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3365.222249][T17375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3365.243580][T17375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3365.259222][T17375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3365.269537][T17375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3365.358350][T29392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3365.373358][T29392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3365.406933][T21499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3365.423617][T21499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3365.537050][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11365'.
[ 3365.546906][T15926] netlink: 'syz.5.11365': attribute type 30 has an invalid length.
[ 3365.571292][T17375] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 3365.599733][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11365'.
[ 3365.600680][T17375] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 3365.639135][T15926] netlink: 'syz.5.11365': attribute type 30 has an invalid length.
[ 3365.659313][T17375] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 3365.693109][T17375] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 3365.708488][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3366.156981][   T30] audit: type=1400 audit(2000001097.645:3945): avc:  denied  { append } for  pid=15939 comm="syz.0.11370" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 3366.221724][T12997] Bluetooth: hci1: command tx timeout
[ 3366.820233][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3367.031708][ T6680] IPVS: starting estimator thread 0...
[ 3367.144313][T15959] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[ 3367.156165][T15962] IPVS: using max 84 ests per chain, 201600 per kthread
[ 3367.932069][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3369.043891][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3370.155708][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3370.221168][T16008] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11389'.
[ 3370.780166][   T30] audit: type=1400 audit(2000001101.947:3946): avc:  denied  { bind } for  pid=16018 comm="syz.1.11393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 3370.806309][T16020] ceph: Path missing in source
[ 3370.916456][   T30] audit: type=1400 audit(2000001102.050:3947): avc:  denied  { mount } for  pid=16018 comm="syz.1.11393" name="/" dev="hugetlbfs" ino=248564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[ 3371.267536][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3371.621544][T16017] SELinux: failed to load policy
[ 3371.697711][T12997] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[ 3371.710276][T12997] Bluetooth: hci7: Injecting HCI hardware error event
[ 3371.719441][T27940] Bluetooth: hci7: hardware error 0x00
[ 3372.379397][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3372.573662][   T30] audit: type=1400 audit(2000001103.659:3948): avc:  denied  { ioctl } for  pid=16037 comm="syz.0.11399" path="socket:[247715]" dev="sockfs" ino=247715 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[ 3373.044335][T16038] bond_slave_0: entered promiscuous mode
[ 3373.050421][T16038] bond_slave_1: entered promiscuous mode
[ 3373.071667][T16038] macvtap1: entered promiscuous mode
[ 3373.082688][T16038] bond0: entered promiscuous mode
[ 3373.159066][T16038] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 3373.194963][T16038] bond0: left promiscuous mode
[ 3373.203670][T16038] bond_slave_0: left promiscuous mode
[ 3373.209089][T16038] bond_slave_1: left promiscuous mode
[ 3373.491392][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3373.925579][T27940] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[ 3373.966540][ T6594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3373.976453][ T6594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3373.985035][ T6594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3373.992588][ T6594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3374.004013][ T6594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3374.603015][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3374.611682][T27940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 3374.620478][T27940] Bluetooth: hci2: Injecting HCI hardware error event
[ 3374.630000][T27940] Bluetooth: hci2: hardware error 0x00
[ 3374.922701][T16063] 9p: Bad value for 'rfdno'
[ 3375.000243][T16064] Set syz0 is full, maxelem 0 reached
[ 3375.180039][T16045] chnl_net:caif_netlink_parms(): no params data found
[ 3375.253243][T16045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3375.268718][T16045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3375.282882][T16045] bridge_slave_0: entered allmulticast mode
[ 3375.302656][T16045] bridge_slave_0: entered promiscuous mode
[ 3375.363258][T16045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3375.390160][T16045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3375.414060][T16045] bridge_slave_1: entered allmulticast mode
[ 3375.443368][T16045] bridge_slave_1: entered promiscuous mode
[ 3375.571137][T16045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3375.643463][T16045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3375.714917][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3375.778698][T16045] team0: Port device team_slave_0 added
[ 3375.807741][T16045] team0: Port device team_slave_1 added
[ 3375.898058][T16045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3375.905352][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3375.942579][T16045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3375.957463][T16045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3375.979649][T16045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3376.006604][T16045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3376.167739][T16045] hsr_slave_0: entered promiscuous mode
[ 3376.175010][T16045] hsr_slave_1: entered promiscuous mode
[ 3376.185630][T16045] debugfs: 'hsr0' already exists in 'hsr'
[ 3376.216098][T16045] Cannot create hsr debugfs directory
[ 3376.228681][ T6594] Bluetooth: hci3: command tx timeout
[ 3376.591704][T16045] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 3376.600910][T16045] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 3376.644517][T16045] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 3376.716378][T16045] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 3376.837549][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3376.847508][T27940] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 3377.052353][T16045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3377.072298][T16045] 8021q: adding VLAN 0 to HW filter on device team0
[ 3377.082705][T15804] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3377.089842][T15804] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3377.102398][T21499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3377.109493][T21499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3377.397714][T16045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3377.938704][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3378.082056][T16045] veth0_vlan: entered promiscuous mode
[ 3378.091415][T16045] veth1_vlan: entered promiscuous mode
[ 3378.111817][T16045] veth0_macvtap: entered promiscuous mode
[ 3378.124899][T16045] veth1_macvtap: entered promiscuous mode
[ 3378.138757][T16045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3378.152134][T16045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3378.168576][T15804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3378.178959][T15804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3378.201480][T15804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3378.241347][T15804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3378.439969][T21499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3378.455718][T27940] Bluetooth: hci3: command tx timeout
[ 3378.481661][T21499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3378.502910][T15804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3378.511022][T15804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3379.061115][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3380.162310][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3380.675322][T27940] Bluetooth: hci3: command tx timeout
[ 3381.274181][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3382.386065][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3382.943969][T27940] Bluetooth: hci3: command tx timeout
[ 3383.497605][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3383.849614][T14036] usb 2-1: ti_download_firmware - firmware not found
[ 3383.970060][T14036] ti_usb_3410_5052 2-1:1.0: probe with driver ti_usb_3410_5052 failed with error -2
[ 3384.058825][T14036] usb 2-1: USB disconnect, device number 46
[ 3384.449816][T30152] IPVS: starting estimator thread 0...
[ 3384.469491][T16198] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[ 3384.599838][T16200] IPVS: using max 49 ests per chain, 117600 per kthread
[ 3384.609669][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3385.077962][   T30] audit: type=1400 audit(2000001115.352:3949): avc:  denied  { connect } for  pid=16208 comm="syz.1.11436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[ 3385.721242][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3386.728857][   T30] audit: type=1400 audit(2000001116.886:3950): avc:  denied  { audit_control } for  pid=16224 comm="syz.2.11440" capability=30  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 3386.833074][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3387.854476][T16237] ceph: Path missing in source
[ 3387.944899][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3388.672707][T16238] SELinux: failed to load policy
[ 3388.963739][T16248] bridge0: entered promiscuous mode
[ 3388.971407][T16248] macvlan2: entered promiscuous mode
[ 3389.056747][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3390.016400][T30994] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 3390.168548][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3390.179418][T30994] usb 3-1: Using ep0 maxpacket: 32
[ 3390.192367][T30994] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 3390.292734][T30994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3390.308506][T30994] usb 3-1: config 0 descriptor??
[ 3390.590913][T16276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11454'.
[ 3390.601443][T16276] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11454'.
[ 3390.929273][T16281] input: syz1 as /devices/virtual/input/input174
[ 3391.010734][T16283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3391.020072][T16283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3391.209426][T30994] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 3391.228606][T30994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3391.234597][ T6594] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 3391.272331][ T6594] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 3391.281430][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3391.291140][ T6594] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 3391.302499][ T6594] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 3391.310050][ T6594] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 3391.329993][T30994] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 3391.357053][T30994] usb 3-1: media controller created
[ 3391.402997][T30994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3391.831014][T16285] chnl_net:caif_netlink_parms(): no params data found
[ 3391.986376][T16285] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3391.999330][T16285] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3392.014893][T16285] bridge_slave_0: entered allmulticast mode
[ 3392.031202][T16285] bridge_slave_0: entered promiscuous mode
[ 3392.056802][T16285] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3392.076055][T16285] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3392.091013][T16285] bridge_slave_1: entered allmulticast mode
[ 3392.108593][T16285] bridge_slave_1: entered promiscuous mode
[ 3392.177691][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3392.202720][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3392.259815][T16285] team0: Port device team_slave_0 added
[ 3392.268844][T16285] team0: Port device team_slave_1 added
[ 3392.346665][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3392.365455][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3392.393022][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3392.435909][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3392.458532][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3392.465572][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3392.565557][T30994] az6027: usb out operation failed. (-71)
[ 3392.569605][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3392.623959][T30994] az6027: usb out operation failed. (-71)
[ 3392.644532][T16285] hsr_slave_0: entered promiscuous mode
[ 3392.664653][T30994] stb0899_attach: Driver disabled by Kconfig
[ 3392.702269][T30994] az6027: no front-end attached
[ 3392.702269][T30994] 
[ 3392.720043][T16285] hsr_slave_1: entered promiscuous mode
[ 3392.744184][T30994] az6027: usb out operation failed. (-71)
[ 3392.751193][T16285] debugfs: 'hsr0' already exists in 'hsr'
[ 3392.774443][T30994] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 3392.786493][T16285] Cannot create hsr debugfs directory
[ 3392.822504][T30994] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input175
[ 3392.923177][T30994] dvb-usb: schedule remote query interval to 400 msecs.
[ 3392.950249][T30994] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 3393.027835][T30994] usb 3-1: USB disconnect, device number 71
[ 3393.199810][T30994] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 3393.504017][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3393.550301][ T6594] Bluetooth: hci8: command tx timeout
[ 3393.945864][T16312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11460'.
[ 3393.976402][T16312] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11460'.
[ 3394.570897][T16285] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 3394.615851][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3394.845520][T16285] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 3394.884481][T16285] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 3395.727696][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3395.781089][T16335] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3395.953902][T27940] Bluetooth: hci8: command tx timeout
[ 3396.181424][T16285] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 3396.273910][T16350] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 3396.294610][T16350] overlayfs: missing 'lowerdir'
[ 3396.359454][T16285] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3396.375720][T16285] 8021q: adding VLAN 0 to HW filter on device team0
[ 3396.395156][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3396.402265][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3396.429252][T16285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 3396.444121][T16285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3396.458131][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3396.465254][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3396.573946][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3396.727009][T16285] veth0_vlan: entered promiscuous mode
[ 3396.742705][T16285] veth1_vlan: entered promiscuous mode
[ 3396.784165][T16285] veth0_macvtap: entered promiscuous mode
[ 3396.792601][T16285] veth1_macvtap: entered promiscuous mode
[ 3396.806730][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3396.822720][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3396.837796][T26526] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3396.846688][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3396.871367][T26526] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3396.907487][T26526] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3396.939612][T26526] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3396.965544][T26526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3396.983008][T26526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3397.013371][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3397.023563][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3397.271065][ T1206] libceph: connect (1)[c::]:6789 error -101
[ 3397.304182][ T1206] libceph: mon0 (1)[c::]:6789 connect error
[ 3397.364913][T16371] ceph: No mds server is up or the cluster is laggy
[ 3397.951395][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3398.286631][T30152] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 3398.381868][T27940] Bluetooth: hci8: command tx timeout
[ 3398.487376][T30152] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 3398.508043][T30152] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 3398.517246][T30152] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3398.530741][T30152] usb 9-1: config 0 descriptor??
[ 3398.537387][T30152] smsusb:smsusb_probe: board id=8, interface number 0
[ 3398.544881][T30152] smsusb:smsusb_probe: Device initialized with return code -19
[ 3398.882922][T16395] netlink: 'syz.8.11476': attribute type 10 has an invalid length.
[ 3398.919621][T16395] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 3399.063159][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3399.687064][T16403] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3400.178666][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3400.602937][T27940] Bluetooth: hci8: command tx timeout
[ 3401.286868][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3402.398969][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3403.510429][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3404.232726][T30162] IPVS: starting estimator thread 0...
[ 3404.249116][T16443] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 3404.368872][T16449] IPVS: using max 86 ests per chain, 206400 per kthread
[ 3404.378406][T16453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11492'.
[ 3404.397264][T16453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11492'.
[ 3404.622249][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3405.092721][T30162] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 3405.176335][ T6359] usb 9-1: USB disconnect, device number 2
[ 3405.252947][T30162] usb 2-1: Using ep0 maxpacket: 32
[ 3405.259619][T30162] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 3405.268428][T30162] usb 2-1: config 0 has no interface number 0
[ 3405.315927][T30162] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 3405.371640][T30162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3405.450242][T30162] usb 2-1: Product: syz
[ 3405.491278][T30162] usb 2-1: Manufacturer: syz
[ 3405.515961][T30162] usb 2-1: SerialNumber: syz
[ 3405.533846][T30162] usb 2-1: config 0 descriptor??
[ 3405.556336][T30162] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 3405.662749][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[ 3405.734078][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3406.456010][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[ 3406.476347][T30162] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 3406.569017][T30162] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 3406.719896][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 3406.727535][T30162] usb 2-1: USB disconnect, device number 47
[ 3406.742733][T30162] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 3406.846154][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3407.009973][T30162] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 3407.047799][T30162] quatech2 2-1:0.51: device disconnected
[ 3407.957793][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3408.161413][ T4281] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 3408.183174][T16490] bridge0: entered promiscuous mode
[ 3408.189385][T16490] macvlan2: entered promiscuous mode
[ 3408.253137][T16491] FAULT_INJECTION: forcing a failure.
[ 3408.253137][T16491] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3408.272394][T16491] CPU: 0 UID: 0 PID: 16491 Comm: syz.2.11504 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3408.272429][T16491] Tainted: [L]=SOFTLOCKUP
[ 3408.272435][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3408.272444][T16491] Call Trace:
[ 3408.272451][T16491]  <TASK>
[ 3408.272458][T16491]  dump_stack_lvl+0x16c/0x1f0
[ 3408.272484][T16491]  should_fail_ex+0x512/0x640
[ 3408.272513][T16491]  _copy_to_user+0x32/0xd0
[ 3408.272539][T16491]  video_usercopy+0xf43/0x16c0
[ 3408.272561][T16491]  ? __pfx___video_do_ioctl+0x10/0x10
[ 3408.272579][T16491]  ? selinux_kernel_read_file+0x120/0x120
[ 3408.272601][T16491]  ? __pfx_video_usercopy+0x10/0x10
[ 3408.272637][T16491]  v4l2_ioctl+0x1bd/0x250
[ 3408.272654][T16491]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 3408.272673][T16491]  __x64_sys_ioctl+0x18e/0x210
[ 3408.272694][T16491]  do_syscall_64+0xcd/0xf80
[ 3408.272716][T16491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3408.272733][T16491] RIP: 0033:0x7f2d84d8f749
[ 3408.272744][T16491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3408.272761][T16491] RSP: 002b:00007f2d85c6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3408.272778][T16491] RAX: ffffffffffffffda RBX: 00007f2d84fe5fa0 RCX: 00007f2d84d8f749
[ 3408.272790][T16491] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003
[ 3408.272800][T16491] RBP: 00007f2d85c6e090 R08: 0000000000000000 R09: 0000000000000000
[ 3408.272809][T16491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3408.272819][T16491] R13: 00007f2d84fe6038 R14: 00007f2d84fe5fa0 R15: 00007ffdd9599088
[ 3408.272843][T16491]  </TASK>
[ 3408.662764][ T4281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 3408.702220][ T4281] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 3408.716760][ T4281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3408.745593][ T4281] usb 2-1: config 0 descriptor??
[ 3408.763444][ T4281] smsusb:smsusb_probe: board id=8, interface number 0
[ 3408.795618][ T4281] smsusb:smsusb_probe: Device initialized with return code -19
[ 3408.925591][T16500] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3408.932487][T16500] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3409.060755][T16505] netlink: 'syz.1.11502': attribute type 10 has an invalid length.
[ 3409.071210][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3410.181412][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3410.393557][T16504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3410.400929][T16504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3411.006257][T16504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3411.033693][T16504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3411.224547][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11512'.
[ 3411.293273][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3411.732725][ T6198] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3411.776510][ T6198] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3411.817231][ T6198] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3411.879054][ T6198] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 3412.405006][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3413.295086][T16152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3413.327169][ T5891] IPVS: starting estimator thread 0...
[ 3413.386391][T16152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3413.427577][T16549] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[ 3413.516836][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3413.518404][T16552] IPVS: using max 50 ests per chain, 120000 per kthread
[ 3414.092524][ T5891] IPVS: starting estimator thread 0...
[ 3414.220803][T16565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11522'.
[ 3414.231916][T16565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11522'.
[ 3414.267321][ T5891] usb 2-1: USB disconnect, device number 48
[ 3414.275850][T16564] IPVS: using max 84 ests per chain, 201600 per kthread
[ 3414.290765][T27940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 3414.301425][T27940] Bluetooth: hci3: Injecting HCI hardware error event
[ 3414.310508][ T6594] Bluetooth: hci3: hardware error 0x00
[ 3414.628656][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3415.229886][T16575] misc userio: Invalid payload size
[ 3415.263659][T16575] misc userio: No port type given on /dev/userio
[ 3415.361629][T16578] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3415.696654][T16579] misc userio: The device must be registered before sending interrupts
[ 3415.740513][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3416.334628][T16586] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3416.341534][T16586] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3416.510378][ T6594] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 3416.852292][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3417.964540][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3418.466562][T31055] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 3418.563839][T17882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3418.596992][T17882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3418.659121][T31055] usb 9-1: Using ep0 maxpacket: 8
[ 3418.762271][T31055] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 3418.801481][T31055] usb 9-1: config 179 has no interface number 0
[ 3418.892921][T16626] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3419.075969][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3419.487546][T31055] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 3419.544026][T31055] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 3419.658733][T31055] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3419.712471][T31055] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 3419.781049][T30152] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 3420.187795][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3420.235240][T31055] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3420.258472][T31055] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 3420.322919][T31055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3420.358849][T30152] usb 3-1: Using ep0 maxpacket: 16
[ 3420.371915][T16608] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 3420.388265][T30152] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 3420.406114][T30152] usb 3-1: config 159 has an invalid interface number: 195 but max is 0
[ 3420.436052][T30152] usb 3-1: config 159 has no interface number 0
[ 3420.461347][T30152] usb 3-1: config 159 interface 195 altsetting 5 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 3420.502898][T30152] usb 3-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 42897, setting to 1024
[ 3420.557703][T30152] usb 3-1: config 159 interface 195 has no altsetting 0
[ 3420.594501][T30152] usb 3-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c
[ 3420.638841][T30152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3420.668679][T30152] usb 3-1: Product: syz
[ 3420.681705][T30152] usb 3-1: Manufacturer: syz
[ 3420.707373][T30152] usb 3-1: SerialNumber: syz
[ 3420.758667][T16608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3420.789044][T16608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3421.299608][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3422.048473][T30152] udl 3-1:159.195: [drm] Unrecognized vendor firmware descriptor
[ 3422.061981][T30152] [drm:udl_init] *ERROR* Selecting channel failed
[ 3422.077649][T30152] [drm] Initialized udl 0.0.1 for 3-1:159.195 on minor 2
[ 3422.118209][T30152] [drm] Initialized udl on minor 2
[ 3422.140424][T30152] udl 3-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3422.289879][T16652] netlink: 'syz.8.11536': attribute type 1 has an invalid length.
[ 3422.292307][T30152] udl 3-1:159.195: [drm] Cannot find any crtc or sizes
[ 3422.308478][T16652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3422.317394][T16652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3422.324704][ T5891] udl 3-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3422.411417][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3422.681299][T30152] usb 3-1: USB disconnect, device number 72
[ 3422.687443][ T5891] udl 3-1:159.195: [drm] Cannot find any crtc or sizes
[ 3422.804031][T16652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3422.814372][T16652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3422.890872][T30714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3422.898977][T30714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3423.523253][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3424.306429][T30152] usb 9-1: USB disconnect, device number 3
[ 3424.306622][    C1] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 3424.320796][    C1] dummy_hcd dummy_hcd.8: timer fired with no URBs pending?
[ 3424.635088][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3425.281279][T16671] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[ 3425.747066][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3425.829889][   T30] audit: type=1326 audit(2000001153.469:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16687 comm="syz.2.11558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d84d8f749 code=0x0
[ 3426.774624][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11561'.
[ 3426.861085][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3427.408047][T16730] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 3427.575356][T14564] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 3427.786459][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11568'.
[ 3427.932815][T14564] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3427.944348][T14564] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3427.962770][T14564] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[ 3427.972014][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3427.984836][T14564] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3428.014319][T14564] usb 9-1: config 0 descriptor??
[ 3428.221242][T16739] bridge0: entered promiscuous mode
[ 3428.229943][T16739] macvlan2: entered promiscuous mode
[ 3429.082692][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3429.121012][T16754] macvlan3: entered promiscuous mode
[ 3430.194199][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3430.479412][T14564] usbhid 9-1:0.0: can't add hid device: -71
[ 3430.490666][T14564] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 3430.503472][T14564] usb 9-1: USB disconnect, device number 4
[ 3431.306016][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3431.673761][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11582'.
[ 3431.698936][   T30] audit: type=1400 audit(2000001158.960:3952): avc:  denied  { ioctl } for  pid=16783 comm="syz.1.11582" path="socket:[253853]" dev="sockfs" ino=253853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[ 3431.992312][T27940] Bluetooth: hci8: command 0x0405 tx timeout
[ 3432.417831][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3432.471381][T10845] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 3432.653364][T10845] usb 2-1: Using ep0 maxpacket: 16
[ 3432.698497][T10845] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3433.129837][T10845] usb 2-1: config 159 has an invalid interface number: 195 but max is 0
[ 3433.165110][T10845] usb 2-1: config 159 has no interface number 0
[ 3433.240534][T10845] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 3433.318747][T10845] usb 2-1: config 159 interface 195 altsetting 5 endpoint 0x1 has invalid maxpacket 42897, setting to 1024
[ 3433.363628][T10845] usb 2-1: config 159 interface 195 has no altsetting 0
[ 3433.394022][T10845] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c
[ 3433.425898][T10845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3433.459098][T10845] usb 2-1: Product: syz
[ 3433.463271][T10845] usb 2-1: Manufacturer: syz
[ 3433.483794][T10845] usb 2-1: SerialNumber: syz
[ 3433.529669][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3433.791056][T10845] udl 2-1:159.195: [drm] Unrecognized vendor firmware descriptor
[ 3433.807899][T10845] [drm:udl_init] *ERROR* Selecting channel failed
[ 3433.835247][T10845] [drm] Initialized udl 0.0.1 for 2-1:159.195 on minor 2
[ 3433.852857][T10845] [drm] Initialized udl on minor 2
[ 3433.864341][T10845] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3433.895323][T10845] udl 2-1:159.195: [drm] Cannot find any crtc or sizes
[ 3433.902737][ T6325] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 3434.002664][ T6325] udl 2-1:159.195: [drm] Cannot find any crtc or sizes
[ 3434.011320][T10845] usb 2-1: USB disconnect, device number 49
[ 3434.641468][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3435.185730][T16820] FAULT_INJECTION: forcing a failure.
[ 3435.185730][T16820] name failslab, interval 1, probability 0, space 0, times 0
[ 3435.199846][T16820] CPU: 1 UID: 0 PID: 16820 Comm: syz.8.11592 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3435.199865][T16820] Tainted: [L]=SOFTLOCKUP
[ 3435.199869][T16820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3435.199875][T16820] Call Trace:
[ 3435.199879][T16820]  <TASK>
[ 3435.199883][T16820]  dump_stack_lvl+0x16c/0x1f0
[ 3435.199901][T16820]  should_fail_ex+0x512/0x640
[ 3435.199918][T16820]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 3435.199936][T16820]  should_failslab+0xc2/0x120
[ 3435.199951][T16820]  kmem_cache_alloc_noprof+0x83/0x770
[ 3435.199962][T16820]  ? skb_clone+0x190/0x3f0
[ 3435.199976][T16820]  ? skb_clone+0x190/0x3f0
[ 3435.199991][T16820]  skb_clone+0x190/0x3f0
[ 3435.200002][T16820]  netlink_deliver_tap+0xabd/0xd30
[ 3435.200017][T16820]  netlink_unicast+0x64c/0x870
[ 3435.200032][T16820]  ? __pfx_netlink_unicast+0x10/0x10
[ 3435.200050][T16820]  netlink_sendmsg+0x8c8/0xdd0
[ 3435.200065][T16820]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3435.200083][T16820]  sock_write_iter+0x566/0x610
[ 3435.200097][T16820]  ? __pfx_sock_write_iter+0x10/0x10
[ 3435.200116][T16820]  ? __pfx_file_has_perm+0x10/0x10
[ 3435.200130][T16820]  do_iter_readv_writev+0x662/0x9e0
[ 3435.200144][T16820]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3435.200159][T16820]  ? selinux_file_permission+0x126/0x660
[ 3435.200183][T16820]  ? bpf_lsm_file_permission+0x9/0x10
[ 3435.200194][T16820]  ? security_file_permission+0x71/0x210
[ 3435.200209][T16820]  ? rw_verify_area+0xcf/0x6c0
[ 3435.200226][T16820]  vfs_writev+0x35f/0xde0
[ 3435.200246][T16820]  ? __lock_acquire+0x436/0x2890
[ 3435.200268][T16820]  ? __pfx_vfs_writev+0x10/0x10
[ 3435.200293][T16820]  ? __fget_files+0x20e/0x3c0
[ 3435.200307][T16820]  ? __fget_files+0x1f0/0x3c0
[ 3435.200325][T16820]  ? do_writev+0x28c/0x340
[ 3435.200335][T16820]  do_writev+0x28c/0x340
[ 3435.200347][T16820]  ? __pfx_do_writev+0x10/0x10
[ 3435.200363][T16820]  do_syscall_64+0xcd/0xf80
[ 3435.200378][T16820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3435.200390][T16820] RIP: 0033:0x7ff0d9d8f749
[ 3435.200400][T16820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3435.200410][T16820] RSP: 002b:00007ff0dab62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3435.200422][T16820] RAX: ffffffffffffffda RBX: 00007ff0d9fe5fa0 RCX: 00007ff0d9d8f749
[ 3435.200428][T16820] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[ 3435.200435][T16820] RBP: 00007ff0dab62090 R08: 0000000000000000 R09: 0000000000000000
[ 3435.200441][T16820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3435.200447][T16820] R13: 00007ff0d9fe6038 R14: 00007ff0d9fe5fa0 R15: 00007ffe3a3964b8
[ 3435.200461][T16820]  </TASK>
[ 3435.201161][T16820] gretap0: entered promiscuous mode
[ 3435.517360][T16822] misc userio: No port type given on /dev/userio
[ 3435.584768][T16823] misc userio: The device must be registered before sending interrupts
[ 3435.748417][T16820] netlink: 'syz.8.11592': attribute type 2 has an invalid length.
[ 3435.756501][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3435.765829][T16820] netlink: 9 bytes leftover after parsing attributes in process `syz.8.11592'.
[ 3436.775914][T16831] SELinux: failed to load policy
[ 3436.865119][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3437.976973][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3438.674573][T16852] bridge0: entered promiscuous mode
[ 3438.680073][T16852] macvlan2: entered promiscuous mode
[ 3438.986992][T16860] 9p: Bad value for 'wfdno'
[ 3439.020567][T16860] Set syz0 is full, maxelem 0 reached
[ 3439.088814][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3439.216513][   T30] audit: type=1326 audit(2000001165.985:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16868 comm="syz.8.11604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff0d9d8f749 code=0x0
[ 3440.200670][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3440.298126][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11606'.
[ 3440.307342][T16879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11606'.
[ 3441.312687][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3441.723155][T16887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3441.730621][T16887] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3441.738507][T16887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3441.796552][T16887] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3441.811852][   T30] audit: type=1400 audit(2000001168.417:3954): avc:  denied  { connect } for  pid=16886 comm="syz.1.11608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 3442.411381][T16892] ceph: Path missing in source
[ 3442.424262][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3442.872472][T16891] SELinux: failed to load policy
[ 3443.536060][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3444.480931][ T6594] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 3444.493803][ T6594] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 3444.506308][ T6594] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 3444.514381][ T6594] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 3444.522146][ T6594] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 3444.647934][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3445.759880][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3446.074505][T16910] chnl_net:caif_netlink_parms(): no params data found
[ 3446.700802][T27940] Bluetooth: hci9: command tx timeout
[ 3446.728099][T16910] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3446.774993][T16910] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3446.807152][T16910] bridge_slave_0: entered allmulticast mode
[ 3446.845074][T16910] bridge_slave_0: entered promiscuous mode
[ 3446.871534][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3446.944060][T16910] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3446.988817][T16910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3447.022044][T16910] bridge_slave_1: entered allmulticast mode
[ 3447.047452][T16910] bridge_slave_1: entered promiscuous mode
[ 3447.193432][T16910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3447.259478][T16910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3447.663110][T16910] team0: Port device team_slave_0 added
[ 3447.768875][T16910] team0: Port device team_slave_1 added
[ 3447.884820][T16952] macvlan3: entered promiscuous mode
[ 3447.983365][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3448.924404][T27940] Bluetooth: hci9: command tx timeout
[ 3449.105878][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3449.140154][T16910] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3449.155010][T16910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3449.229794][T16910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3449.267094][T16910] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3449.275105][T16910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3449.342578][T16910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3449.396452][T16967] FAULT_INJECTION: forcing a failure.
[ 3449.396452][T16967] name failslab, interval 1, probability 0, space 0, times 0
[ 3449.455448][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.7.11627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3449.455477][T16967] Tainted: [L]=SOFTLOCKUP
[ 3449.455482][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3449.455492][T16967] Call Trace:
[ 3449.455498][T16967]  <TASK>
[ 3449.455505][T16967]  dump_stack_lvl+0x16c/0x1f0
[ 3449.455529][T16967]  should_fail_ex+0x512/0x640
[ 3449.455552][T16967]  ? __kvmalloc_node_noprof+0x129/0xa40
[ 3449.455579][T16967]  should_failslab+0xc2/0x120
[ 3449.455598][T16967]  __kvmalloc_node_noprof+0x14a/0xa40
[ 3449.455615][T16967]  ? xt_alloc_entry_offsets+0x3f/0x60
[ 3449.455635][T16967]  ? __lock_acquire+0x436/0x2890
[ 3449.455654][T16967]  ? xt_alloc_entry_offsets+0x3f/0x60
[ 3449.455672][T16967]  xt_alloc_entry_offsets+0x3f/0x60
[ 3449.455691][T16967]  translate_table+0x22d/0x1720
[ 3449.455717][T16967]  ? find_held_lock+0x2b/0x80
[ 3449.455736][T16967]  ? __might_fault+0xe3/0x190
[ 3449.455753][T16967]  ? __pfx_translate_table+0x10/0x10
[ 3449.455780][T16967]  do_ipt_set_ctl+0x603/0xc40
[ 3449.455791][T16967]  ? find_held_lock+0x2b/0x80
[ 3449.455812][T16967]  ? nf_sockopt_find.constprop.0+0x222/0x290
[ 3449.455834][T16967]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[ 3449.455857][T16967]  ? sockopt_release_sock+0x52/0x60
[ 3449.455877][T16967]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3449.455895][T16967]  ? trace_contention_end+0xdd/0x110
[ 3449.455920][T16967]  ? nf_sockopt_find.constprop.0+0x222/0x290
[ 3449.455943][T16967]  nf_setsockopt+0x8d/0xf0
[ 3449.455963][T16967]  ip_setsockopt+0xcb/0xf0
[ 3449.455988][T16967]  tcp_setsockopt+0xa7/0x100
[ 3449.456007][T16967]  smc_setsockopt+0x1b6/0xa00
[ 3449.456020][T16967]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 3449.456041][T16967]  ? __pfx_smc_setsockopt+0x10/0x10
[ 3449.456067][T16967]  ? selinux_socket_setsockopt+0x6a/0x80
[ 3449.456085][T16967]  ? __pfx_smc_setsockopt+0x10/0x10
[ 3449.456105][T16967]  do_sock_setsockopt+0xf3/0x1d0
[ 3449.456124][T16967]  __sys_setsockopt+0x1a0/0x230
[ 3449.456141][T16967]  __x64_sys_setsockopt+0xbd/0x160
[ 3449.456153][T16967]  ? do_syscall_64+0x91/0xf80
[ 3449.456169][T16967]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3449.456186][T16967]  do_syscall_64+0xcd/0xf80
[ 3449.456203][T16967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3449.456217][T16967] RIP: 0033:0x7f1c90f8f749
[ 3449.456230][T16967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3449.456243][T16967] RSP: 002b:00007f1c8f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 3449.456256][T16967] RAX: ffffffffffffffda RBX: 00007f1c911e5fa0 RCX: 00007f1c90f8f749
[ 3449.456265][T16967] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[ 3449.456273][T16967] RBP: 00007f1c8f1f6090 R08: 00000000000003b8 R09: 0000000000000000
[ 3449.456281][T16967] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001
[ 3449.456289][T16967] R13: 00007f1c911e6038 R14: 00007f1c911e5fa0 R15: 00007ffc3e638ee8
[ 3449.456311][T16967]  </TASK>
[ 3449.808894][T16910] hsr_slave_0: entered promiscuous mode
[ 3449.826981][T16910] hsr_slave_1: entered promiscuous mode
[ 3449.835891][T16910] debugfs: 'hsr0' already exists in 'hsr'
[ 3449.841673][T16910] Cannot create hsr debugfs directory
[ 3449.979698][T16973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11629'.
[ 3450.217731][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3450.257526][T16910] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 3450.341354][T16910] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 3450.385698][T16910] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 3450.461367][T16910] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 3450.494620][T16980] /dev/nullb0: Can't open blockdev
[ 3451.120038][T16910] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3451.148695][T27940] Bluetooth: hci9: command tx timeout
[ 3451.244127][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11631'.
[ 3451.318866][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3451.376483][T16910] 8021q: adding VLAN 0 to HW filter on device team0
[ 3451.851957][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3451.859048][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3451.868789][T27940] Bluetooth: hci5: command 0x0406 tx timeout
[ 3451.920552][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3451.927630][ T7875] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3452.004747][T16910] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 3452.015925][T16910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 3452.430661][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3452.472707][T17006] macvlan2: entered promiscuous mode
[ 3452.481007][T17006] bridge0: entered promiscuous mode
[ 3452.643802][T16910] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3453.435518][ T6594] Bluetooth: hci9: command tx timeout
[ 3453.542478][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3454.161165][T16910] veth0_vlan: entered promiscuous mode
[ 3454.310282][T16910] veth1_vlan: entered promiscuous mode
[ 3454.380895][T17045] ntfs3(nullb0): Primary boot signature is not NTFS.
[ 3454.392847][T17045] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[ 3454.469909][T16910] veth0_macvtap: entered promiscuous mode
[ 3454.509783][T16910] veth1_macvtap: entered promiscuous mode
[ 3454.592530][T16910] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3454.664997][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3454.724042][T16910] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3454.793694][T17882] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3454.836881][T17882] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3454.881200][T17882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3454.945110][T17882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3455.660613][T10845] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 3455.698405][T21499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3455.722142][T21499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3455.766667][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3455.791177][T21499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3455.800701][T21499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3455.866975][T10845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 3455.910658][T10845] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 3456.011759][T10845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3456.018176][T17054] misc userio: No port type given on /dev/userio
[ 3456.051461][T10845] usb 9-1: config 0 descriptor??
[ 3456.079479][T10845] smsusb:smsusb_probe: board id=8, interface number 0
[ 3456.087974][T17057] misc userio: The device must be registered before sending interrupts
[ 3456.088349][T10845] smsusb:smsusb_probe: Device initialized with return code -19
[ 3456.888989][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3456.910454][T17064] netlink: 'syz.8.11643': attribute type 10 has an invalid length.
[ 3457.990011][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3458.739921][   T30] audit: type=1400 audit(2000001184.263:3955): avc:  denied  { lock } for  pid=17086 comm="syz.7.11652" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[ 3459.080195][T30994] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 3459.101903][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3459.263181][T30994] usb 3-1: Using ep0 maxpacket: 8
[ 3459.294248][T30994] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[ 3459.318978][T30994] usb 3-1: config 0 has no interface number 0
[ 3459.349968][T30994] usb 3-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a
[ 3459.384021][T30994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3459.414989][T30994] usb 3-1: Product: syz
[ 3459.429952][T30994] usb 3-1: Manufacturer: syz
[ 3459.443390][T30994] usb 3-1: SerialNumber: syz
[ 3459.490376][T30994] usb 3-1: config 0 descriptor??
[ 3459.556745][T30994] gspca_main: t613-2.14.0 probing 17a1:0128
[ 3459.561348][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11655'.
[ 3459.702646][   T31] INFO: task kworker/u8:21:6364 blocked for more than 143 seconds.
[ 3459.732499][   T31]       Tainted: G             L      syzkaller #0
[ 3459.764340][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3459.790713][   T31] task:kworker/u8:21   state:D stack:22792 pid:6364  tgid:6364  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3459.834305][   T31] Workqueue: netns cleanup_net
[ 3459.854743][   T31] Call Trace:
[ 3459.869876][   T31]  <TASK>
[ 3459.886316][   T31]  ? __schedule+0x10b9/0x6150
[ 3459.900834][   T31]  __schedule+0x1139/0x6150
[ 3459.915910][   T31]  ? __pfx___schedule+0x10/0x10
[ 3459.932468][   T31]  ? find_held_lock+0x2b/0x80
[ 3459.950023][   T31]  ? schedule+0x2d7/0x3a0
[ 3459.960402][   T31]  schedule+0xe7/0x3a0
[ 3459.971603][   T31]  schedule_preempt_disabled+0x13/0x30
[ 3460.048897][   T31]  __mutex_lock+0xc69/0x1ca0
[ 3460.089072][   T31]  ? rdma_dev_change_netns+0x30/0x320
[ 3460.117151][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 3460.117680][T30994] gspca_t613: unknown sensor 0000
[ 3460.122199][   T31]  ? kasan_quarantine_put+0x10a/0x240
[ 3460.122243][   T31]  ? rdma_dev_change_netns+0x30/0x320
[ 3460.127410][T30994] t613 3-1:0.196: probe with driver t613 failed with error -22
[ 3460.146070][   T31]  rdma_dev_change_netns+0x30/0x320
[ 3460.151467][   T31]  rdma_dev_exit_net+0x2dd/0x590
[ 3460.170560][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 3460.176026][   T31]  ? __pfx___might_resched+0x10/0x10
[ 3460.191944][   T31]  ? __pfx_cfg80211_pernet_exit+0x10/0x10
[ 3460.198309][   T31]  ? mutex_is_locked+0x17/0x60
[ 3460.213325][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 3460.218862][   T31]  ops_undo_list+0x2ee/0xab0
[ 3460.223468][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 3460.228692][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3460.256093][   T31]  ? cleanup_net+0x347/0x830
[ 3460.260704][   T31]  ? idr_destroy+0x62/0x2e0
[ 3460.267446][   T31]  cleanup_net+0x41b/0x830
[ 3460.271965][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 3460.276908][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3460.292827][T17065] usb 9-1: USB disconnect, device number 5
[ 3460.299418][   T31]  process_one_work+0x9ba/0x1b20
[ 3460.304396][   T31]  ? __pfx_bond_alb_monitor+0x10/0x10
[ 3460.317025][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 3460.322609][   T31]  ? assign_work+0x1a0/0x250
[ 3460.327274][   T31]  worker_thread+0x6c8/0xf10
[ 3460.331912][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3460.337102][   T31]  kthread+0x3c5/0x780
[ 3460.341161][   T31]  ? __pfx_kthread+0x10/0x10
[ 3460.345979][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3460.350726][   T31]  ? __pfx_kthread+0x10/0x10
[ 3460.355704][   T31]  ret_from_fork+0x983/0xb10
[ 3460.360279][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3460.365453][   T31]  ? __switch_to+0x7af/0x10d0
[ 3460.370212][   T31]  ? __pfx_kthread+0x10/0x10
[ 3460.376713][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3460.381523][   T31]  </TASK>
[ 3460.397442][   T31] INFO: task syz.3.11190:15156 blocked for more than 143 seconds.
[ 3460.409616][   T31]       Tainted: G             L      syzkaller #0
[ 3460.417128][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3460.425792][   T31] task:syz.3.11190     state:D stack:25416 pid:15156 tgid:15155 ppid:4447   task_flags:0x400140 flags:0x00080002
[ 3460.439517][   T31] Call Trace:
[ 3460.442948][   T31]  <TASK>
[ 3460.445874][   T31]  ? __schedule+0x10b9/0x6150
[ 3460.450568][   T31]  __schedule+0x1139/0x6150
[ 3460.455179][   T31]  ? __pfx___schedule+0x10/0x10
[ 3460.460102][   T31]  ? find_held_lock+0x2b/0x80
[ 3460.464780][   T31]  ? schedule+0x2d7/0x3a0
[ 3460.469088][   T31]  schedule+0xe7/0x3a0
[ 3460.473524][   T31]  schedule_timeout+0x257/0x290
[ 3460.478370][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 3460.486424][   T31]  ? mark_held_locks+0x49/0x80
[ 3460.491208][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3460.496541][   T31]  __wait_for_common+0x2fc/0x4e0
[ 3460.501472][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 3460.506919][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 3460.512528][   T31]  ? ib_cq_pool_cleanup+0x220/0x360
[ 3460.517904][   T31]  disable_device+0x16f/0x280
[ 3460.522576][   T31]  ? __pfx_disable_device+0x10/0x10
[ 3460.527949][   T31]  __ib_unregister_device+0x2b4/0x480
[ 3460.533305][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[ 3460.539210][   T31]  ib_unregister_device_and_put+0x5a/0x80
[ 3460.545084][   T31]  nldev_dellink+0x21f/0x320
[ 3460.549668][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[ 3460.554810][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3460.559870][   T31]  ? cap_capable+0x10d/0x3f0
[ 3460.564470][   T31]  ? bpf_lsm_capable+0x9/0x10
[ 3460.569233][   T31]  ? security_capable+0x7e/0x260
[ 3460.574413][   T31]  ? ns_capable+0xd7/0x110
[ 3460.578864][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[ 3460.584035][   T31]  rdma_nl_rcv_msg+0x38a/0x6e0
[ 3460.589048][   T31]  ? __pfx_rdma_nl_rcv_msg+0x10/0x10
[ 3460.596055][   T31]  ? __lock_acquire+0x436/0x2890
[ 3460.601242][   T31]  rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430
[ 3460.607663][   T31]  ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10
[ 3460.614723][   T31]  ? netlink_deliver_tap+0x1ae/0xd30
[ 3460.620128][   T31]  netlink_unicast+0x5aa/0x870
[ 3460.624875][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 3460.630147][   T31]  netlink_sendmsg+0x8c8/0xdd0
[ 3460.634984][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3460.640356][   T31]  ____sys_sendmsg+0xa5d/0xc30
[ 3460.645835][   T31]  ? copy_msghdr_from_user+0x10a/0x160
[ 3460.651301][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3460.656678][   T31]  ? __pfx_futex_wake_mark+0x10/0x10
[ 3460.662050][   T31]  ___sys_sendmsg+0x134/0x1d0
[ 3460.666770][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3460.671957][   T31]  ? futex_private_hash_put+0x160/0x1b0
[ 3460.677700][   T31]  __sys_sendmsg+0x16d/0x220
[ 3460.682345][   T31]  ? __pfx___sys_sendmsg+0x10/0x10
[ 3460.687589][   T31]  ? __secure_computing+0x28e/0x3b0
[ 3460.692792][   T31]  do_syscall_64+0xcd/0xf80
[ 3460.697512][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3460.705703][   T31] RIP: 0033:0x7fea2d98f749
[ 3460.710124][   T31] RSP: 002b:00007fea2e8e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3460.718603][   T31] RAX: ffffffffffffffda RBX: 00007fea2dbe5fa0 RCX: 00007fea2d98f749
[ 3460.726997][   T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007
[ 3460.734952][   T31] RBP: 00007fea2da13f91 R08: 0000000000000000 R09: 0000000000000000
[ 3460.743073][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3460.751157][   T31] R13: 00007fea2dbe6038 R14: 00007fea2dbe5fa0 R15: 00007ffec813f558
[ 3460.759178][   T31]  </TASK>
[ 3460.762356][   T31] 
[ 3460.762356][   T31] Showing all locks held in the system:
[ 3460.763414][T17468] usb 3-1: USB disconnect, device number 73
[ 3460.778104][   T31] 1 lock held by khungtaskd/31:
[ 3460.783656][   T31]  #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 3460.803423][   T31] 2 locks held by getty/5577:
[ 3460.808195][   T31]  #0: ffff88814de4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 3460.827095][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510
[ 3460.837361][   T31] 4 locks held by kworker/u8:21/6364:
[ 3460.842726][   T31]  #0: ffff88801badc948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[ 3460.853103][   T31]  #1: ffffc9000d17fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[ 3460.863138][   T31]  #2: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830
[ 3460.872473][   T31]  #3: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[ 3460.883728][   T31] 3 locks held by kworker/1:1/17468:
[ 3460.889023][   T31]  #0: ffff888020eb2148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20
[ 3460.900368][   T31]  #1: ffffc90003797c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20
[ 3460.911855][   T31]  #2: ffff8880298f1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0
[ 3460.922717][   T31] 3 locks held by kworker/u8:25/28832:
[ 3460.928174][   T31]  #0: ffff8880b843ac98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130
[ 3460.938145][   T31]  #1: ffff8880b8524608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150
[ 3460.947171][   T31]  #2: ffff88804e8a8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x560
[ 3460.957250][   T31] 2 locks held by syz.3.11190/15156:
[ 3460.962535][   T31]  #0: ffffffff9af7abd8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0
[ 3460.972952][   T31]  #1: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480
[ 3460.984535][   T31] 2 locks held by syz.4.11212/15262:
[ 3460.989793][   T31]  #0: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[ 3460.999272][   T31]  #1: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[ 3461.010545][   T31] 2 locks held by syz.6.11338/15819:
[ 3461.015843][   T31]  #0: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[ 3461.025238][   T31]  #1: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[ 3461.038707][   T31] 2 locks held by syz.5.11404/16081:
[ 3461.043979][   T31]  #0: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[ 3461.053403][   T31]  #1: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[ 3461.064891][   T31] 2 locks held by syz.0.11564/16720:
[ 3461.073619][   T31]  #0: ffffffff9012b510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0
[ 3461.083072][   T31]  #1: ffff888033774700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320
[ 3461.094322][   T31] 2 locks held by syz.2.11653/17089:
[ 3461.099583][   T31]  #0: ffff8880571a9908 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x86/0x270
[ 3461.110127][   T31]  #1: ffffffff8e3d4df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0
[ 3461.120265][   T31] 
[ 3461.123209][   T31] =============================================
[ 3461.123209][   T31] 
[ 3461.131608][   T31] NMI backtrace for cpu 0
[ 3461.131619][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3461.131635][   T31] Tainted: [L]=SOFTLOCKUP
[ 3461.131639][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3461.131646][   T31] Call Trace:
[ 3461.131650][   T31]  <TASK>
[ 3461.131654][   T31]  dump_stack_lvl+0x116/0x1f0
[ 3461.131672][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 3461.131689][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3461.131703][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 3461.131720][   T31]  sys_info+0x133/0x180
[ 3461.131735][   T31]  watchdog+0xe66/0x1180
[ 3461.131750][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3461.131760][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3461.131770][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3461.131789][   T31]  ? __kthread_parkme+0x19e/0x250
[ 3461.131806][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3461.131822][   T31]  kthread+0x3c5/0x780
[ 3461.131839][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.131852][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3461.131862][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.131874][   T31]  ret_from_fork+0x983/0xb10
[ 3461.131887][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3461.131899][   T31]  ? __switch_to+0x7af/0x10d0
[ 3461.131912][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.131925][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3461.131946][   T31]  </TASK>
[ 3461.131950][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 3461.275229][    C1] NMI backtrace for cpu 1
[ 3461.275245][    C1] CPU: 1 UID: 0 PID: 5800 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3461.275264][    C1] Tainted: [L]=SOFTLOCKUP
[ 3461.275268][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3461.275276][    C1] RIP: 0010:native_apic_msr_write+0x28/0x40
[ 3461.275298][    C1] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 91 06 10 0a e9 8c 06 10 0a 89 f6 31 d2 89 cf e9 e1 e9 76
[ 3461.275310][    C1] RSP: 0018:ffffc90003697b08 EFLAGS: 00000046
[ 3461.275322][    C1] RAX: 0000000000010012 RBX: ffff8880b8523f40 RCX: 0000000000000838
[ 3461.275330][    C1] RDX: 0000000000000000 RSI: 0000000000010012 RDI: 0000000000000038
[ 3461.275337][    C1] RBP: 0000000000010012 R08: 0000000000000005 R09: 000000000000003f
[ 3461.275345][    C1] R10: 0000000000000020 R11: ffff888077002ff0 R12: 0000000000000001
[ 3461.275352][    C1] R13: 0000000000000001 R14: 0000000000000020 R15: ffff8880b8528440
[ 3461.275360][    C1] FS:  000055558129b500(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000
[ 3461.275373][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3461.275382][    C1] CR2: 000000110c312f03 CR3: 000000007c7ad000 CR4: 00000000003526f0
[ 3461.275390][    C1] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e
[ 3461.275397][    C1] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3461.275404][    C1] Call Trace:
[ 3461.275409][    C1]  <TASK>
[ 3461.275414][    C1]  lapic_next_event+0x10/0x20
[ 3461.275428][    C1]  clockevents_program_event+0x26e/0x370
[ 3461.275449][    C1]  tick_program_event+0xa9/0x140
[ 3461.275462][    C1]  hrtimer_reprogram+0x27b/0x450
[ 3461.275482][    C1]  hrtimer_start_range_ns+0x9e8/0x11f0
[ 3461.275504][    C1]  do_nanosleep+0x1f6/0x580
[ 3461.275518][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[ 3461.275529][    C1]  ? __asan_memset+0x23/0x50
[ 3461.275542][    C1]  ? __hrtimer_setup+0x176/0x280
[ 3461.275559][    C1]  hrtimer_nanosleep+0x155/0x380
[ 3461.275572][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[ 3461.275585][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 3461.275608][    C1]  ? get_timespec64+0x147/0x240
[ 3461.275622][    C1]  ? __pfx_get_timespec64+0x10/0x10
[ 3461.275637][    C1]  common_nsleep+0xa1/0xd0
[ 3461.275652][    C1]  __x64_sys_clock_nanosleep+0x34d/0x4a0
[ 3461.275666][    C1]  ? __pfx___x64_sys_clock_nanosleep+0x10/0x10
[ 3461.275681][    C1]  do_syscall_64+0xcd/0xf80
[ 3461.275698][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3461.275710][    C1] RIP: 0033:0x7fdb1d1c1fc3
[ 3461.275721][    C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 <f7> d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10
[ 3461.275732][    C1] RSP: 002b:00007fff04380b08 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[ 3461.275743][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdb1d1c1fc3
[ 3461.275752][    C1] RDX: 00007fff04380b20 RSI: 0000000000000000 RDI: 0000000000000000
[ 3461.275759][    C1] RBP: 0000000000000000 R08: 00007fff04380b50 R09: 00007fdb1dfee000
[ 3461.275767][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff04380f70
[ 3461.275775][    C1] R13: 0000000000000004 R14: 00007fff04380b5c R15: 00007fff04380bf0
[ 3461.275788][    C1]  </TASK>
[ 3461.331523][    C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 3461.609532][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 3461.616384][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3461.627032][   T31] Tainted: [L]=SOFTLOCKUP
[ 3461.631330][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3461.641365][   T31] Call Trace:
[ 3461.644622][   T31]  <TASK>
[ 3461.647531][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 3461.652102][   T31]  vpanic+0x640/0x6f0
[ 3461.656076][   T31]  panic+0xca/0xd0
[ 3461.659778][   T31]  ? __pfx_panic+0x10/0x10
[ 3461.664174][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3461.670139][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b1/0x300
[ 3461.676301][   T31]  ? nmi_trigger_cpumask_backtrace+0x2be/0x300
[ 3461.682447][   T31]  ? watchdog+0xe83/0x1180
[ 3461.686847][   T31]  ? watchdog+0xe76/0x1180
[ 3461.691244][   T31]  watchdog+0xe94/0x1180
[ 3461.695472][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3461.700215][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3461.704869][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 3461.710050][   T31]  ? __kthread_parkme+0x19e/0x250
[ 3461.715052][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3461.719707][   T31]  kthread+0x3c5/0x780
[ 3461.723755][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.728324][   T31]  ? rcu_is_watching+0x12/0xc0
[ 3461.733069][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.737639][   T31]  ret_from_fork+0x983/0xb10
[ 3461.742208][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3461.747300][   T31]  ? __switch_to+0x7af/0x10d0
[ 3461.751959][   T31]  ? __pfx_kthread+0x10/0x10
[ 3461.756530][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3461.761286][   T31]  </TASK>
[ 3461.764555][   T31] Kernel Offset: disabled
[ 3461.768852][   T31] Rebooting in 86400 seconds..