last executing test programs:

9.358406634s ago: executing program 1 (id=173):
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
mount$nfs4(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00016c61", @ANYRESHEX=r0, @ANYRESOCT=r0])
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xf6e3, 0x1, 0x2}})

8.923514168s ago: executing program 1 (id=178):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

8.148186937s ago: executing program 1 (id=183):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ipvlan1\x00', {0x2}, 0x100})
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
fstat(r2, &(0x7f0000000440))
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="280000000000000029000000020000006b"], 0x28}}], 0x1, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc", 0xc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04", 0x80}], 0x8, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x870}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x18}}], 0x4, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

7.691119886s ago: executing program 0 (id=188):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0)

7.059436251s ago: executing program 1 (id=190):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000006a004d792abd7000fbdbdf25020000000000000008000a0002000000080005f43c8f16e70d912d29bad4d90c997443a454f9c3ddb276338affea44955cacf8cb2beea244240f571ab7aed755ce7946d5fa01726c3e6103a3c4326f93c71fadc555facb84897ffa83af11c99ee4", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x24044000)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r2 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc})
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r3 = creat(&(0x7f0000000040)='./bus\x00', 0x114)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x143041, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$nl_route(r4, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x0, 0x80, 0x33, 0x0, 0x0, 0x5, 0x10}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x1)
inotify_add_watch(r3, &(0x7f0000000a00)='./bus\x00', 0x84)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1d, &(0x7f00000008c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)

6.987906867s ago: executing program 3 (id=191):
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

5.935679993s ago: executing program 4 (id=193):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

5.813617859s ago: executing program 3 (id=194):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0)

4.82799089s ago: executing program 0 (id=195):
syz_emit_ethernet(0xba, &(0x7f0000000000)={@random="19e72b903103", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0xac, 0x66, 0x0, 0x71, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @private=0xa010100, {0x24, 0x4, 0x3, 0x17, 0x4ff, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @loopback, {[@timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x4, [{@remote, 0x83}]}, @noop, @cipso={0x86, 0x32, 0x3, [{0x7, 0x12, "373da5243fca69c84e4d628d0721d1b1"}, {0x0, 0xd, "b4a58cb9a032ece9a1cc4a"}, {0x1, 0xd, "599b6bf0a7d5c3a5ef0313"}]}, @noop, @end, @noop, @ssrr={0x89, 0xb, 0xc6, [@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_prespec={0x44, 0x2c, 0x11, 0x3, 0x0, [{@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x19f00000}, {@empty}, {@local, 0x9b}, {@broadcast, 0xa212}]}]}}}}}}}, 0x0) (fail_nth: 6)

4.735968812s ago: executing program 2 (id=196):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.016312572s ago: executing program 3 (id=197):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0)

3.997652031s ago: executing program 4 (id=198):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}})

3.906551198s ago: executing program 0 (id=199):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0)
sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f0000000540)=@canfd={{0x4}, 0x2d, 0x1, 0x0, 0x0, "36dfab38258d87e6f4369d656596599186d7e0b2a4c62f1221c34679eddf327ff5359b22be189dc3af652a4e28a97499d9f274dcafa14ee68f8882f4bf171c3c"}, 0x48}, 0x1, 0x0, 0x0, 0x40448c0}, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0xc000, 0x9, 0x0, 0x3, 0x28, 0xff, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10)
syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000600)=@mgmt_frame=@auth={{{}, {0x3}, @device_b, @device_a, @from_mac=@device_b, {0x0, 0x1}}, 0x0, 0x2, 0x1e, @void, [{0xdd, 0x8, "b32f6e9bc74a71e0"}, {0xdd, 0xa8, "e1fa119b0c2d6f047fa27b30afb13011de15e1709cf629d042fef1c2ac768e6cc9aac6f65f3a1d8f104bcc93202a11cd1a882a2e6abcffb190d67d2b2bad20d3ae06aedc510bd90de4eb92faf5b8ba18e41f830d7bb6e26e192843e125a3a8ddb11693d495c232bf05ccb7fccea1a640390899d8e364a487969ba31ea57b1188d006088525ea3d285ccf70bd10e06caf52486f57ad2430106d37fcd9a5af1a8d479e80a609991279"}, {0xdd, 0x2f, "b8378d88f2e195a42571540772a7a53e900c0d910cedb9a2c2effef1f8feab532374b93b3474d3d946bdf656865a02"}, {0xdd, 0xab, "85b3a4ecc0849e9c27bd40f0f42bc294f242189ab8af5595f25143dfd4e20a264fa341805a259ff9cb1e45238986eace7179c1315ad6f28f813af2c5fe8225c3a4e773c72ed9f826f6d61464bb860b6e04aecfaad3093e18d01f71488232a5c1de2aa9f8cc5b88fb628b75bba46e718c6ce5f2f719b75b435c21bdba6fb451f065eee42067c9978703ae322c65cd1f210fd30239bee97d8978aac73e2c8046ed8a4554d5d50b8dd635f67c"}, {0xdd, 0xc2, "c2009fd8d2b52cea070e2a17e891f08ba1ace48b93fd436f91836630ea3ee3dc0fd6ee12a864a135532e2746af38e22b8f9e896dac6b43c38014a834b2abcc32c67601442e715350fc5376d6d1aba3718235967c81ad61b30cc6b32cf1a8191b1341b2eadef3156af838761a311da0967aa8237bc50d5acfcc91dad8d8d3af2a3c081af83ece34a3b357b1d65b41cd6b8e47b732382787c1066cf312d176d5bd386bc8e28356f2525064aa4e27b9225c0df6eaeb7dbad453a613b6ca950ebcce21d1"}, {0xdd, 0x2d, "f8b069b33b2bd0273d05154ea85605c7ec08b5c489b360a16036a063022076cdfa01d8658eb1d3f0311d287a95"}, {0xdd, 0xd4, "acffb449b7a608bb120bc0a171fe5760dcff047549d5e687528b0c9d70217286d863083b12e737fcd424eb805967fc70b38150eb4766d44a1281c402b37eccc3bef776cb1561e74c7cefdff93044c9a6b4041ca6e4b830ca4d4febd842888a14357ad875e6919e32a01b608162a145cfca1cb86130f6c49929a5f3c1c25b40317d73bb74914af0c6d6cc58cd0731155d5ab1804120984d7f7e113f374a9926e6f770f693b248aad50795f0e04782eba60c01cd7ffcc27a6dd4ec53c0bd1e6ccf44da91ee7821eb3f1ce5e5f000390286356a29e8"}]}, 0x379)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

3.888044485s ago: executing program 1 (id=200):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.775004193s ago: executing program 4 (id=201):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.987833461s ago: executing program 4 (id=202):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

2.934672529s ago: executing program 3 (id=203):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0)
sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f0000000540)=@canfd={{0x4}, 0x2d, 0x1, 0x0, 0x0, "36dfab38258d87e6f4369d656596599186d7e0b2a4c62f1221c34679eddf327ff5359b22be189dc3af652a4e28a97499d9f274dcafa14ee68f8882f4bf171c3c"}, 0x48}, 0x1, 0x0, 0x0, 0x40448c0}, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0xc000, 0x9, 0x0, 0x3, 0x28, 0xff, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10)
syz_emit_ethernet(0x9a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000008b960c121824"], 0x28)

2.7732465s ago: executing program 2 (id=204):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000140)=@file={0x1}, 0x6e)
listen(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.641559504s ago: executing program 2 (id=205):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0xfffffffc, 0x0, 0xcd7e], [], 0x0, [0x1]}, 0x0, 0x2000}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "06010000"}]}, 0x54}}, 0x20000080) (fail_nth: 6)

2.277770649s ago: executing program 1 (id=206):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ipvlan1\x00', {0x2}, 0x100})
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
fstat(r2, &(0x7f0000000440))
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="280000000000000029000000020000006b"], 0x28}}], 0x1, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc", 0xc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04", 0x80}], 0x8, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x870}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x18}}], 0x4, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r8 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(r8)
sched_setscheduler(r8, 0x6, &(0x7f0000000000)=0x2)

2.189941621s ago: executing program 0 (id=207):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0)

2.133112621s ago: executing program 2 (id=208):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cfecffffff010000000800"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=r3, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES8=r5], 0x64}}, 0x0)
write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0200000200000005dd000000000000000000000000000000000000000000008113000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000380070673effeb09b5351f5bde054000000000187b8200b500002b595fcb14034354b9fd9ef196a51cd5157adc8103b494e10000000000000000020008005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8e289da649a37002c016f69f9ecd86ca0f63e20dcc4246465762f6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7f09ff53c7e4d1ad66e2d070798019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18685fc8bc7d7dc626e4390796a19848274669ab13f8b1f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a5120264c19e0d5cfb3a205e27d53df72dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/557, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x21e)

1.747826352s ago: executing program 3 (id=209):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0xc004)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x1, 0x399})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x13, 0x5, 0x401, 0x70bd2c, 0x25dfdbfc, {0x5, 0x0, 0x3}, [@typed={0x8, 0x31, 0x0, 0x0, @u32=0x6}, @generic="a4a2d77babe58524480788f626545786b490389b3b3230ad2539d5da712573f781fc40f9c8d9b4c1cbec2e1b9b381e005ef2a3cbd5f0bee81a98933315b898dc92ce91dca2be49eefc022b1b9ceb4750f8dd94bf7aa6af643355be8abf6cf90b722aff0c93d19f33b347fcf1857e9e8e897aded3e4c83b06299f60165ec363776e3d4e23d68386254c89181161d2a4d168c765a0bfdc7bf01c5632ec651ea5c65109472ee52631013920595a"]}, 0xc8}, 0x1, 0x0, 0x0, 0x8804}, 0x4000810)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0)
io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x0, 0x115580)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5f}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1.73394539s ago: executing program 4 (id=210):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000002000000000000000a00000085100000f8ffffff180100002005000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000960000008500000006000000184b0000fcffffff000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r5})
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r2, 0x0, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

1.53605733s ago: executing program 2 (id=211):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800a25e4113c182", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}})

1.30914059s ago: executing program 4 (id=212):
sched_setscheduler(0x0, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0)
r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xe, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1.186580232s ago: executing program 2 (id=213):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

541.110011ms ago: executing program 0 (id=214):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, 0x0)

144.128936ms ago: executing program 3 (id=215):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ipvlan1\x00', {0x2}, 0x100})
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
fstat(r2, &(0x7f0000000440))
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="280000000000000029000000020000006b"], 0x28}}], 0x1, 0x4000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc", 0xc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe", 0x13}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04", 0x80}], 0x8, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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", 0x870}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}], 0x18}}], 0x4, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
r8 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgid(r8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

0s ago: executing program 0 (id=216):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0)
msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x1, 0x2080)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x102)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780)='rpc_pipefs\x00', 0x1000000, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts.
[   86.789192][ T5788] cgroup: Unknown subsys name 'net'
[   87.042275][ T5788] cgroup: Unknown subsys name 'cpuset'
[   87.095013][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.051909][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   91.980487][    T9] cfg80211: failed to load regulatory.db
[   92.491417][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.503023][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.511960][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.513036][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.529617][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.537258][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.539124][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.540301][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.568580][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.576385][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.620348][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.632477][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.643463][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.655965][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.658702][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.705595][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.706657][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.713836][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.720440][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.726794][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.729074][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.736167][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.737602][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.739668][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.747252][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.596135][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   93.670103][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   93.802807][ T5810] chnl_net:caif_netlink_parms(): no params data found
[   93.841309][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   93.890740][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   94.042867][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.043852][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.044004][ T5803] bridge_slave_0: entered allmulticast mode
[   94.052675][ T5803] bridge_slave_0: entered promiscuous mode
[   94.117008][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.117133][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.117316][ T5803] bridge_slave_1: entered allmulticast mode
[   94.119698][ T5803] bridge_slave_1: entered promiscuous mode
[   94.168338][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.168457][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.168876][ T5802] bridge_slave_0: entered allmulticast mode
[   94.170729][ T5802] bridge_slave_0: entered promiscuous mode
[   94.242588][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.242772][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.242893][ T5802] bridge_slave_1: entered allmulticast mode
[   94.248285][ T5802] bridge_slave_1: entered promiscuous mode
[   94.335253][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.372452][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.372637][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.372760][ T5810] bridge_slave_0: entered allmulticast mode
[   94.379962][ T5810] bridge_slave_0: entered promiscuous mode
[   94.415304][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.415527][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.415642][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.415761][ T5809] bridge_slave_0: entered allmulticast mode
[   94.417652][ T5809] bridge_slave_0: entered promiscuous mode
[   94.469256][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.469403][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.469587][ T5810] bridge_slave_1: entered allmulticast mode
[   94.471540][ T5810] bridge_slave_1: entered promiscuous mode
[   94.503277][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.525410][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.525525][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.525903][ T5809] bridge_slave_1: entered allmulticast mode
[   94.527664][ T5809] bridge_slave_1: entered promiscuous mode
[   94.615916][ T5118] Bluetooth: hci0: command tx timeout
[   94.615926][ T5805] Bluetooth: hci1: command tx timeout
[   94.617019][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.617124][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.617282][ T5811] bridge_slave_0: entered allmulticast mode
[   94.619198][ T5811] bridge_slave_0: entered promiscuous mode
[   94.668269][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.700148][ T5805] Bluetooth: hci2: command tx timeout
[   94.722104][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.722221][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.722343][ T5811] bridge_slave_1: entered allmulticast mode
[   94.724138][ T5811] bridge_slave_1: entered promiscuous mode
[   94.774423][ T5805] Bluetooth: hci4: command tx timeout
[   94.791167][ T5803] team0: Port device team_slave_0 added
[   94.833745][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.855666][ T5805] Bluetooth: hci3: command tx timeout
[   94.867659][ T5803] team0: Port device team_slave_1 added
[   94.886138][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.914134][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.925752][ T5802] team0: Port device team_slave_0 added
[   94.946628][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.949796][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.983766][ T5802] team0: Port device team_slave_1 added
[   95.019010][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.052261][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.052276][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.052294][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.139799][ T5810] team0: Port device team_slave_0 added
[   95.159561][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.159578][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.159603][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.162131][ T5809] team0: Port device team_slave_0 added
[   95.221372][ T5810] team0: Port device team_slave_1 added
[   95.222113][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.222124][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.222142][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.286072][ T5809] team0: Port device team_slave_1 added
[   95.288833][ T5811] team0: Port device team_slave_0 added
[   95.316499][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.316516][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.316543][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.372787][ T5811] team0: Port device team_slave_1 added
[   95.428713][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.428725][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.428744][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.479861][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.479874][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.479894][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.529528][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.529545][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.529573][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.587555][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.587613][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.587683][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.592113][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.592161][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   95.592229][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.103951][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.103965][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.103984][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.147077][ T5803] hsr_slave_0: entered promiscuous mode
[   96.151359][ T5803] hsr_slave_1: entered promiscuous mode
[   96.195150][ T5802] hsr_slave_0: entered promiscuous mode
[   96.196053][ T5802] hsr_slave_1: entered promiscuous mode
[   96.196814][ T5802] debugfs: 'hsr0' already exists in 'hsr'
[   96.196895][ T5802] Cannot create hsr debugfs directory
[   96.313737][ T5810] hsr_slave_0: entered promiscuous mode
[   96.316305][ T5810] hsr_slave_1: entered promiscuous mode
[   96.318925][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   96.318976][ T5810] Cannot create hsr debugfs directory
[   96.363178][ T5809] hsr_slave_0: entered promiscuous mode
[   96.364126][ T5809] hsr_slave_1: entered promiscuous mode
[   96.368649][ T5809] debugfs: 'hsr0' already exists in 'hsr'
[   96.368745][ T5809] Cannot create hsr debugfs directory
[   96.433324][ T5811] hsr_slave_0: entered promiscuous mode
[   96.441223][ T5811] hsr_slave_1: entered promiscuous mode
[   96.441951][ T5811] debugfs: 'hsr0' already exists in 'hsr'
[   96.441968][ T5811] Cannot create hsr debugfs directory
[   96.694468][ T5805] Bluetooth: hci0: command tx timeout
[   96.694483][ T5118] Bluetooth: hci1: command tx timeout
[   96.774421][ T5805] Bluetooth: hci2: command tx timeout
[   96.854484][ T5805] Bluetooth: hci4: command tx timeout
[   96.937417][ T5805] Bluetooth: hci3: command tx timeout
[   97.338148][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.382668][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.400544][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.453215][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   97.559177][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.603232][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.659143][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.702794][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.829494][ T5810] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.862973][ T5810] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.899912][ T5810] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.942627][ T5810] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.084171][ T5809] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.118844][ T5809] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.155871][ T5809] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.215140][ T5809] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.328455][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.359430][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.402829][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.433122][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.471996][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.550065][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   98.597840][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.599077][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.644889][  T177] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.645298][  T177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.678090][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.776248][ T5805] Bluetooth: hci1: command tx timeout
[   98.776254][ T5118] Bluetooth: hci0: command tx timeout
[   98.790359][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[   98.805692][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.840753][  T177] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.840896][  T177] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.859409][ T5118] Bluetooth: hci2: command tx timeout
[   98.884020][  T177] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.890983][  T177] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.926965][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   98.933058][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.936158][ T5118] Bluetooth: hci4: command tx timeout
[   98.993160][ T1473] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.994079][ T1473] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.014486][ T5118] Bluetooth: hci3: command tx timeout
[   99.084026][ T1524] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.084175][ T1524] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.122763][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   99.158764][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.182584][ T1414] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.183507][ T1414] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.241432][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.241641][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.307471][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   99.349371][ T3992] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.349652][ T3992] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.408613][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.408769][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.493702][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.807208][ T5803] veth0_vlan: entered promiscuous mode
[   99.880524][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.894028][ T5803] veth1_vlan: entered promiscuous mode
[  100.066582][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.104216][ T5803] veth0_macvtap: entered promiscuous mode
[  100.151195][ T5802] veth0_vlan: entered promiscuous mode
[  100.160518][ T5803] veth1_macvtap: entered promiscuous mode
[  100.208792][ T5802] veth1_vlan: entered promiscuous mode
[  100.228769][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.231176][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.276457][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.326528][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.386123][   T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.406216][ T5810] veth0_vlan: entered promiscuous mode
[  100.407908][   T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.448142][   T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.463579][   T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.559910][ T5810] veth1_vlan: entered promiscuous mode
[  100.630311][ T5802] veth0_macvtap: entered promiscuous mode
[  100.711964][ T5802] veth1_macvtap: entered promiscuous mode
[  100.762372][ T5809] veth0_vlan: entered promiscuous mode
[  100.839797][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.842487][ T5809] veth1_vlan: entered promiscuous mode
[  100.854500][ T5118] Bluetooth: hci0: command tx timeout
[  100.854530][ T5118] Bluetooth: hci1: command tx timeout
[  100.880632][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.880653][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.919943][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.935172][ T5805] Bluetooth: hci2: command tx timeout
[  100.955480][ T5810] veth0_macvtap: entered promiscuous mode
[  100.993403][   T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.012531][   T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.013067][ T5810] veth1_macvtap: entered promiscuous mode
[  101.014496][ T5805] Bluetooth: hci4: command tx timeout
[  101.036474][   T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.039841][   T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.039924][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.039939][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.095986][ T5805] Bluetooth: hci3: command tx timeout
[  101.169140][ T5811] veth0_vlan: entered promiscuous mode
[  101.287262][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.331768][ T5811] veth1_vlan: entered promiscuous mode
[  101.354823][ T5809] veth0_macvtap: entered promiscuous mode
[  101.379378][ T5917] usb usb2: usbfs: process 5917 (syz.1.2) did not claim interface 0 before use
[  101.408970][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.409529][ T5809] veth1_macvtap: entered promiscuous mode
[  101.473459][ T3992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.484613][ T3992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.484747][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.484764][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.490575][ T3992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.513188][ T3992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.647397][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.693040][ T3992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.693062][ T3992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.725796][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.800962][ T5811] veth0_macvtap: entered promiscuous mode
[  101.849004][ T1414] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.863738][ T5811] veth1_macvtap: entered promiscuous mode
[  101.871683][ T1414] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.908788][ T1414] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.934938][ T1414] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.967852][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.967873][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.142108][ T5926] netlink: 'syz.0.1': attribute type 9 has an invalid length.
[  102.142159][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[  102.273886][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.273907][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.294175][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.399163][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.427404][ T1414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.427425][ T1414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.464640][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.520206][ T1473] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.531420][ T1473] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.538836][ T1473] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.565601][ T1414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.631819][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.631839][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.670564][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.670598][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.670639][ T5868] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  102.670664][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.729919][ T5868] usb 2-1: config 0 descriptor??
[  103.204328][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.204349][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.261091][ T5868] usbhid 2-1:0.0: can't add hid device: -71
[  103.261224][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  103.371916][ T5868] usb 2-1: USB disconnect, device number 2
[  103.382163][ T5935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.444409][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.444431][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.476859][ T5935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.136764][ T5960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16'.
[  105.744412][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'.
[  105.762216][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17'.
[  106.384279][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  106.724162][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  106.948880][ T5975] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.158448][ T5980] FAULT_INJECTION: forcing a failure.
[  107.158448][ T5980] name failslab, interval 1, probability 0, space 0, times 0
[  107.158499][ T5980] CPU: 1 UID: 0 PID: 5980 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  107.158519][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  107.158537][ T5980] Call Trace:
[  107.158549][ T5980]  <TASK>
[  107.158558][ T5980]  dump_stack_lvl+0xe8/0x150
[  107.158600][ T5980]  should_fail_ex+0x46b/0x600
[  107.158632][ T5980]  should_failslab+0xa8/0x100
[  107.158653][ T5980]  __kmalloc_noprof+0xdf/0x7b0
[  107.158674][ T5980]  ? sctp_send_reset_streams+0x370/0xd60
[  107.158703][ T5980]  sctp_send_reset_streams+0x370/0xd60
[  107.158733][ T5980]  sctp_setsockopt+0x9d4/0x12c0
[  107.158759][ T5980]  ? sock_common_setsockopt+0x36/0xc0
[  107.158794][ T5980]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  107.158823][ T5980]  do_sock_setsockopt+0x17c/0x1b0
[  107.158847][ T5980]  __x64_sys_setsockopt+0x143/0x1b0
[  107.158870][ T5980]  do_syscall_64+0x14d/0xf80
[  107.158889][ T5980]  ? trace_irq_disable+0x3b/0x150
[  107.158912][ T5980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.158933][ T5980]  ? clear_bhb_loop+0x40/0x90
[  107.158958][ T5980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.158979][ T5980] RIP: 0033:0x7ffb0cdbc819
[  107.159004][ T5980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.159021][ T5980] RSP: 002b:00007ffb0b016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  107.159045][ T5980] RAX: ffffffffffffffda RBX: 00007ffb0d035fa0 RCX: 00007ffb0cdbc819
[  107.159060][ T5980] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004
[  107.159073][ T5980] RBP: 00007ffb0b016090 R08: 000000000001000f R09: 0000000000000000
[  107.159087][ T5980] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001
[  107.159100][ T5980] R13: 00007ffb0d036038 R14: 00007ffb0d035fa0 R15: 00007ffd84d1d828
[  107.159135][ T5980]  </TASK>
[  107.533652][ T5985] =======================================================
[  107.533652][ T5985] WARNING: The mand mount option has been deprecated and
[  107.533652][ T5985]          and is ignored by this kernel. Remove the mand
[  107.533652][ T5985]          option from the mount to silence this warning.
[  107.533652][ T5985] =======================================================
[  109.009091][ T5998] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  109.035239][ T5998] FAULT_INJECTION: forcing a failure.
[  109.035239][ T5998] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  109.035299][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  109.035323][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  109.035336][ T5998] Call Trace:
[  109.035344][ T5998]  <TASK>
[  109.035354][ T5998]  dump_stack_lvl+0xe8/0x150
[  109.035391][ T5998]  should_fail_ex+0x46b/0x600
[  109.035426][ T5998]  _copy_from_user+0x2d/0xb0
[  109.035448][ T5998]  ucma_set_option+0xf9/0xcc0
[  109.035486][ T5998]  ? __pfx_ucma_set_option+0x10/0x10
[  109.035521][ T5998]  ? __pfx___schedule+0x10/0x10
[  109.035557][ T5998]  ? irqentry_exit+0x59e/0x620
[  109.035580][ T5998]  ? lockdep_hardirqs_on+0x7a/0x110
[  109.035602][ T5998]  ? irqentry_exit+0x59e/0x620
[  109.035623][ T5998]  ? rcu_is_watching+0x15/0xb0
[  109.035659][ T5998]  ? __pfx_ucma_set_option+0x10/0x10
[  109.035717][ T5998]  ucma_write+0x257/0x2f0
[  109.035750][ T5998]  ? __pfx_ucma_write+0x10/0x10
[  109.035781][ T5998]  ? vfs_write+0x234/0xba0
[  109.035816][ T5998]  ? __pfx_ucma_write+0x10/0x10
[  109.035849][ T5998]  vfs_write+0x2a3/0xba0
[  109.035898][ T5998]  ? __pfx_vfs_write+0x10/0x10
[  109.035934][ T5998]  ? __fget_files+0x2a/0x420
[  109.035967][ T5998]  ? __fget_files+0x2a/0x420
[  109.035996][ T5998]  ? __fget_files+0x3a6/0x420
[  109.036025][ T5998]  ? __fget_files+0x2a/0x420
[  109.036064][ T5998]  ksys_write+0x156/0x270
[  109.036101][ T5998]  ? __pfx_ksys_write+0x10/0x10
[  109.036148][ T5998]  do_syscall_64+0x14d/0xf80
[  109.036172][ T5998]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.036195][ T5998]  ? clear_bhb_loop+0x40/0x90
[  109.036222][ T5998]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.036245][ T5998] RIP: 0033:0x7f42b42dc819
[  109.036265][ T5998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.036283][ T5998] RSP: 002b:00007f42b24ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  109.036307][ T5998] RAX: ffffffffffffffda RBX: 00007f42b4556180 RCX: 00007f42b42dc819
[  109.036323][ T5998] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000003
[  109.036336][ T5998] RBP: 00007f42b24ec090 R08: 0000000000000000 R09: 0000000000000000
[  109.036350][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.036363][ T5998] R13: 00007f42b4556218 R14: 00007f42b4556180 R15: 00007ffcf8caced8
[  109.036396][ T5998]  </TASK>
[  111.164262][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  111.456312][ T6010] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  111.634747][ T6009] 8021q: VLANs not supported on ipvlan1
[  113.396153][ T5868] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  113.561890][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short
[  113.564069][ T5868] usb 3-1: not running at top speed; connect to a high speed hub
[  113.596560][ T5868] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  113.596588][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.596603][ T5868] usb 3-1: Product: syz
[  113.596613][ T5868] usb 3-1: Manufacturer: syz
[  113.596623][ T5868] usb 3-1: SerialNumber: syz
[  113.734176][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'.
[  114.146159][ T5868] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  114.146430][ T5868] usb 3-1: MIDIStreaming interface descriptor not found
[  114.184766][ T6031] could not allocate digest TFM handle blake2b-384
[  114.192835][ T6009] syz.1.28 (6009): drop_caches: 2
[  114.440693][ T6043] netlink: 64 bytes leftover after parsing attributes in process `syz.4.37'.
[  114.475585][ T6043] program syz.4.37 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.680182][ T5868] usb 3-1: USB disconnect, device number 2
[  114.973036][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.064407][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  115.227148][   T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  115.227176][   T10] usb 1-1: config 1 has no interface number 0
[  115.227221][   T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  115.227249][   T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  115.227274][   T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  115.229693][   T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  115.229720][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.229740][   T10] usb 1-1: Product: syz
[  115.229755][   T10] usb 1-1: Manufacturer: syz
[  115.229782][   T10] usb 1-1: SerialNumber: syz
[  115.346712][ T6048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  115.568340][ T6048] IPv6: NLM_F_REPLACE set, but no existing node found!
[  115.572775][ T6048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  115.608921][   T10] usb 1-1: No status endpoint found
[  118.067153][ T5868] usb 1-1: USB disconnect, device number 2
[  118.601658][ T6063] could not allocate digest TFM handle blake2b-384
[  119.065706][ T6070] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.666851][ T6081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.49'.
[  120.674765][ T6081] netlink: 'syz.1.49': attribute type 9 has an invalid length.
[  120.674787][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'.
[  120.819899][ T6088] tmpfs: Bad value for 'size'
[  120.954390][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  121.084496][ T5888] usb 1-1: device descriptor read/64, error -71
[  121.864435][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.019312][ T5888] usb 1-1: device descriptor read/64, error -71
[  122.301920][ T5888] usb usb1-port1: attempt power cycle
[  122.310582][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  122.354261][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.374274][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.384264][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.394264][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.404263][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.414265][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.424264][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  122.434276][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  124.189709][   T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  124.189739][   T10] usb 2-1: config 1 has no interface number 0
[  124.189790][   T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  124.189817][   T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  124.189844][   T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  124.259063][   T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  124.259094][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.259115][   T10] usb 2-1: Product: syz
[  124.259130][   T10] usb 2-1: Manufacturer: syz
[  124.259144][   T10] usb 2-1: SerialNumber: syz
[  124.343193][ T6103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  124.568779][ T6103] IPv6: NLM_F_REPLACE set, but no existing node found!
[  124.591257][ T6103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  124.608984][   T10] usb 2-1: No status endpoint found
[  125.810464][ T6119] Smack: duplicate mount options
[  127.205949][   T31] usb 2-1: USB disconnect, device number 3
[  127.231408][ T6128] FAULT_INJECTION: forcing a failure.
[  127.231408][ T6128] name failslab, interval 1, probability 0, space 0, times 0
[  127.231461][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  127.231509][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  127.231533][ T6128] Call Trace:
[  127.231548][ T6128]  <TASK>
[  127.231560][ T6128]  dump_stack_lvl+0xe8/0x150
[  127.231610][ T6128]  should_fail_ex+0x46b/0x600
[  127.231646][ T6128]  should_failslab+0xa8/0x100
[  127.231671][ T6128]  __kmalloc_noprof+0xdf/0x7b0
[  127.231693][ T6128]  ? sk_prot_alloc+0xe7/0x210
[  127.231715][ T6128]  ? kmem_cache_alloc_noprof+0x388/0x680
[  127.231753][ T6128]  sk_prot_alloc+0xe7/0x210
[  127.231773][ T6128]  ? sk_alloc+0x27/0x390
[  127.231805][ T6128]  sk_alloc+0x3a/0x390
[  127.231832][ T6128]  pptp_create+0x32/0x300
[  127.231866][ T6128]  pppox_create+0x131/0x1b0
[  127.231904][ T6128]  __sock_create+0x4b2/0x9d0
[  127.231947][ T6128]  __sys_socket+0xd6/0x1b0
[  127.231984][ T6128]  __x64_sys_socket+0x7a/0x90
[  127.232018][ T6128]  do_syscall_64+0x14d/0xf80
[  127.232040][ T6128]  ? trace_irq_disable+0x3b/0x150
[  127.232068][ T6128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.232091][ T6128]  ? clear_bhb_loop+0x40/0x90
[  127.232118][ T6128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.232140][ T6128] RIP: 0033:0x7f42b42dc819
[  127.232180][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  127.232201][ T6128] RSP: 002b:00007f42b252e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  127.232228][ T6128] RAX: ffffffffffffffda RBX: 00007f42b4555fa0 RCX: 00007f42b42dc819
[  127.232243][ T6128] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018
[  127.232255][ T6128] RBP: 00007f42b252e090 R08: 0000000000000000 R09: 0000000000000000
[  127.232269][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.232281][ T6128] R13: 00007f42b4556038 R14: 00007f42b4555fa0 R15: 00007ffcf8caced8
[  127.232321][ T6128]  </TASK>
[  127.873218][ T6133] Driver unsupported XDP return value 0 on prog  (id 6) dev N/A, expect packet loss!
[  128.613675][ T6149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.082790][ T6160] fuse: Bad value for 'user_id'
[  132.082810][ T6160] fuse: Bad value for 'user_id'
[  133.005787][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  133.005903][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  137.015558][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.134577][ T6198] could not allocate digest TFM handle blake2b-384
[  141.813171][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'.
[  141.815356][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'.
[  142.524800][ T6267] 8021q: VLANs not supported on ipvlan1
[  146.584338][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  147.017521][   T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  147.017549][   T10] usb 1-1: config 1 has no interface number 0
[  147.017612][   T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  147.017639][   T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  147.017666][   T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  147.020734][   T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  147.020763][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.020784][   T10] usb 1-1: Product: syz
[  147.020799][   T10] usb 1-1: Manufacturer: syz
[  147.020814][   T10] usb 1-1: SerialNumber: syz
[  147.891271][ T6319] 8021q: VLANs not supported on ipvlan1
[  147.949422][ T6305] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  149.045402][ T6332] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  149.831889][   T10] usb 1-1: Error in usbnet_get_endpoints (-71)
[  149.876582][   T10] usb 1-1: USB disconnect, device number 6
[  152.078563][ T6349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.412536][ T6349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  154.180502][ T6319] syz.2.119 (6319): drop_caches: 2
[  154.524495][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'.
[  154.555977][ T6361] netlink: 'syz.3.131': attribute type 9 has an invalid length.
[  154.555993][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'.
[  158.181557][ T6388] 8021q: VLANs not supported on ipvlan1
[  159.024404][ T1687] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  159.208063][ T1687] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  159.208091][ T1687] usb 2-1: config 1 has no interface number 0
[  159.208136][ T1687] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  159.208163][ T1687] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  159.208250][ T1687] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  159.262795][ T1687] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  159.262826][ T1687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.262847][ T1687] usb 2-1: Product: syz
[  159.262862][ T1687] usb 2-1: Manufacturer: syz
[  159.262877][ T1687] usb 2-1: SerialNumber: syz
[  159.608608][ T6394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.772414][ T6407] overlayfs: overlapping lowerdir path
[  160.305200][ T6394] IPv6: NLM_F_REPLACE set, but no existing node found!
[  160.306402][ T6394] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  160.318120][ T1687] usb 2-1: No status endpoint found
[  161.126053][ T1687] usb 2-1: USB disconnect, device number 4
[  162.300242][ T6388] syz.3.137 (6388): drop_caches: 2
[  163.074351][ T1687] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  163.234345][ T1687] usb 1-1: Using ep0 maxpacket: 16
[  163.236670][ T1687] usb 1-1: config 8 has an invalid interface number: 206 but max is 0
[  163.236689][ T1687] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  163.236702][ T1687] usb 1-1: config 8 has no interface number 0
[  163.236732][ T1687] usb 1-1: config 8 interface 206 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  163.236752][ T1687] usb 1-1: config 8 interface 206 has no altsetting 0
[  163.238769][ T1687] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  163.238795][ T1687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.238809][ T1687] usb 1-1: Product: syz
[  163.238819][ T1687] usb 1-1: Manufacturer: syz
[  163.238853][ T1687] usb 1-1: SerialNumber: syz
[  163.605703][ T1687] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected
[  163.612030][ T1687] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  163.621737][ T1687] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  163.666597][ T1687] usb 1-1: USB disconnect, device number 7
[  163.691785][ T1687] garmin_gps 1-1:8.206: device disconnected
[  163.960333][ T6450] 8021q: VLANs not supported on ipvlan1
[  166.141763][ T6450] syz.3.153 (6450): drop_caches: 2
[  166.748159][ T6483] 9p: Bad value for 'wfdno'
[  166.960337][ T6493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.018724][ T6493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.185965][ T6498] 8021q: VLANs not supported on ipvlan1
[  168.514438][ T6498] syz.0.170 (6498): drop_caches: 2
[  169.178461][ T6519] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  169.216785][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'.
[  169.217247][ T6519] 8021q: VLANs not supported on ip_vti0
[  169.237868][ T6521] FAULT_INJECTION: forcing a failure.
[  169.237868][ T6521] name failslab, interval 1, probability 0, space 0, times 0
[  169.247599][ T6521] CPU: 0 UID: 0 PID: 6521 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  169.247628][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  169.247641][ T6521] Call Trace:
[  169.247650][ T6521]  <TASK>
[  169.247659][ T6521]  dump_stack_lvl+0xe8/0x150
[  169.247698][ T6521]  should_fail_ex+0x46b/0x600
[  169.247735][ T6521]  should_failslab+0xa8/0x100
[  169.247760][ T6521]  kmem_cache_alloc_noprof+0x87/0x680
[  169.247795][ T6521]  ? skb_clone+0x212/0x3a0
[  169.247826][ T6521]  skb_clone+0x212/0x3a0
[  169.247856][ T6521]  __netlink_deliver_tap+0x404/0x850
[  169.247902][ T6521]  ? netlink_deliver_tap+0x2e/0x1b0
[  169.247936][ T6521]  netlink_deliver_tap+0x19c/0x1b0
[  169.247972][ T6521]  netlink_unicast+0x805/0x9f0
[  169.248011][ T6521]  ? __pfx_netlink_unicast+0x10/0x10
[  169.248044][ T6521]  ? netlink_sendmsg+0x650/0xb40
[  169.248074][ T6521]  ? skb_put+0x11b/0x210
[  169.248100][ T6521]  netlink_sendmsg+0x813/0xb40
[  169.248155][ T6521]  ? __pfx_netlink_sendmsg+0x10/0x10
[  169.248190][ T6521]  ? unwind_get_return_address+0x4d/0x90
[  169.248216][ T6521]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  169.248253][ T6521]  ____sys_sendmsg+0x94c/0x9c0
[  169.248284][ T6521]  ? __pfx_____sys_sendmsg+0x10/0x10
[  169.248318][ T6521]  ? import_iovec+0x73/0xa0
[  169.248356][ T6521]  ___sys_sendmsg+0x2a5/0x360
[  169.248386][ T6521]  ? __pfx____sys_sendmsg+0x10/0x10
[  169.248449][ T6521]  ? __fget_files+0x2a/0x420
[  169.248476][ T6521]  ? __fget_files+0x3a6/0x420
[  169.248514][ T6521]  __x64_sys_sendmsg+0x1c3/0x2a0
[  169.248546][ T6521]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  169.248580][ T6521]  ? __pfx_ksys_write+0x10/0x10
[  169.248631][ T6521]  do_syscall_64+0x14d/0xf80
[  169.248655][ T6521]  ? trace_irq_disable+0x3b/0x150
[  169.248681][ T6521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.248702][ T6521]  ? clear_bhb_loop+0x40/0x90
[  169.248729][ T6521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.248751][ T6521] RIP: 0033:0x7f2a4f82c819
[  169.248771][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.248788][ T6521] RSP: 002b:00007f2a4da86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  169.248810][ T6521] RAX: ffffffffffffffda RBX: 00007f2a4faa5fa0 RCX: 00007f2a4f82c819
[  169.248826][ T6521] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[  169.248839][ T6521] RBP: 00007f2a4da86090 R08: 0000000000000000 R09: 0000000000000000
[  169.248852][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.248864][ T6521] R13: 00007f2a4faa6038 R14: 00007f2a4faa5fa0 R15: 00007ffd684ce048
[  169.248898][ T6521]  </TASK>
[  169.546124][ T6523] 9p: Bad value for 'wfdno'
[  169.773656][ T6530] fuse: Bad value for 'fd'
[  169.845742][ T6533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.948449][ T6532] 8021q: VLANs not supported on ipvlan1
[  170.074551][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.172654][ T6536] syz.1.183 (6536): drop_caches: 2
[  173.617014][ T6572] FAULT_INJECTION: forcing a failure.
[  173.617014][ T6572] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  173.617066][ T6572] CPU: 1 UID: 0 PID: 6572 Comm: syz.0.195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  173.617090][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  173.617116][ T6572] Call Trace:
[  173.617124][ T6572]  <TASK>
[  173.617132][ T6572]  dump_stack_lvl+0xe8/0x150
[  173.617176][ T6572]  should_fail_ex+0x46b/0x600
[  173.617227][ T6572]  _copy_to_user+0x31/0xb0
[  173.617257][ T6572]  simple_read_from_buffer+0xe1/0x170
[  173.617290][ T6572]  proc_fail_nth_read+0x1be/0x230
[  173.617328][ T6572]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.617359][ T6572]  ? rw_verify_area+0x2ac/0x4e0
[  173.617392][ T6572]  ? tun_chr_write_iter+0x190/0x200
[  173.617426][ T6572]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  173.617456][ T6572]  vfs_read+0x212/0xa80
[  173.617499][ T6572]  ? __pfx_vfs_read+0x10/0x10
[  173.617535][ T6572]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  173.617561][ T6572]  ? lockdep_hardirqs_on+0x7a/0x110
[  173.617585][ T6572]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  173.617610][ T6572]  ? mutex_lock_nested+0x152/0x1d0
[  173.617639][ T6572]  ? fdget_pos+0x252/0x320
[  173.617679][ T6572]  ksys_read+0x156/0x270
[  173.617715][ T6572]  ? __pfx_ksys_read+0x10/0x10
[  173.617762][ T6572]  do_syscall_64+0x14d/0xf80
[  173.617785][ T6572]  ? trace_irq_disable+0x3b/0x150
[  173.617811][ T6572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.617835][ T6572]  ? clear_bhb_loop+0x40/0x90
[  173.617863][ T6572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.617884][ T6572] RIP: 0033:0x7f42b429d04e
[  173.617905][ T6572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  173.617923][ T6572] RSP: 002b:00007f42b252dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  173.617945][ T6572] RAX: ffffffffffffffda RBX: 00007f42b252e6c0 RCX: 00007f42b429d04e
[  173.617961][ T6572] RDX: 000000000000000f RSI: 00007f42b252e0a0 RDI: 0000000000000003
[  173.617974][ T6572] RBP: 00007f42b252e090 R08: 0000000000000000 R09: 0000000000000000
[  173.617987][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.618006][ T6572] R13: 00007f42b4556038 R14: 00007f42b4555fa0 R15: 00007ffcf8caced8
[  173.618041][ T6572]  </TASK>
[  174.016725][ T6579] 9p: Bad value for 'wfdno'
[  174.103780][ T6584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.837519][ T6576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.078361][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.128802][ T5868] kernel read not supported for file bpf-prog (pid: 5868 comm: kworker/1:4)
[  175.159762][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.280372][ T6602] FAULT_INJECTION: forcing a failure.
[  175.280372][ T6602] name failslab, interval 1, probability 0, space 0, times 0
[  175.280408][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.2.205 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  175.280431][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  175.280444][ T6602] Call Trace:
[  175.280452][ T6602]  <TASK>
[  175.280461][ T6602]  dump_stack_lvl+0xe8/0x150
[  175.280500][ T6602]  should_fail_ex+0x46b/0x600
[  175.280536][ T6602]  should_failslab+0xa8/0x100
[  175.280571][ T6602]  kmem_cache_alloc_noprof+0x87/0x680
[  175.280607][ T6602]  ? skb_clone+0x212/0x3a0
[  175.280638][ T6602]  skb_clone+0x212/0x3a0
[  175.280676][ T6602]  __netlink_deliver_tap+0x404/0x850
[  175.280731][ T6602]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.280769][ T6602]  netlink_deliver_tap+0x19c/0x1b0
[  175.280804][ T6602]  netlink_sendskb+0x68/0x140
[  175.280851][ T6602]  netlink_unicast+0x3c5/0x9f0
[  175.280890][ T6602]  ? __pfx_netlink_unicast+0x10/0x10
[  175.280930][ T6602]  netlink_rcv_skb+0x2b6/0x4b0
[  175.280964][ T6602]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  175.280999][ T6602]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  175.281044][ T6602]  ? netlink_deliver_tap+0x2e/0x1b0
[  175.281086][ T6602]  netlink_unicast+0x831/0x9f0
[  175.281132][ T6602]  ? __pfx_netlink_unicast+0x10/0x10
[  175.281164][ T6602]  ? netlink_sendmsg+0x650/0xb40
[  175.281196][ T6602]  ? skb_put+0x11b/0x210
[  175.281222][ T6602]  netlink_sendmsg+0x813/0xb40
[  175.281267][ T6602]  ? __pfx_netlink_sendmsg+0x10/0x10
[  175.281302][ T6602]  ? unwind_get_return_address+0x4d/0x90
[  175.281329][ T6602]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  175.281368][ T6602]  ____sys_sendmsg+0x94c/0x9c0
[  175.281400][ T6602]  ? __pfx_____sys_sendmsg+0x10/0x10
[  175.281436][ T6602]  ? import_iovec+0x73/0xa0
[  175.281474][ T6602]  ___sys_sendmsg+0x2a5/0x360
[  175.281506][ T6602]  ? __pfx____sys_sendmsg+0x10/0x10
[  175.281572][ T6602]  ? __fget_files+0x2a/0x420
[  175.281600][ T6602]  ? __fget_files+0x3a6/0x420
[  175.281641][ T6602]  __x64_sys_sendmsg+0x1c3/0x2a0
[  175.281669][ T6602]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  175.281706][ T6602]  ? __pfx_ksys_write+0x10/0x10
[  175.281753][ T6602]  do_syscall_64+0x14d/0xf80
[  175.281776][ T6602]  ? trace_irq_disable+0x3b/0x150
[  175.281803][ T6602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.281826][ T6602]  ? clear_bhb_loop+0x40/0x90
[  175.281853][ T6602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.281876][ T6602] RIP: 0033:0x7f2a4f82c819
[  175.281914][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.281933][ T6602] RSP: 002b:00007f2a4da86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  175.281956][ T6602] RAX: ffffffffffffffda RBX: 00007f2a4faa5fa0 RCX: 00007f2a4f82c819
[  175.281972][ T6602] RDX: 0000000020000080 RSI: 0000200000000280 RDI: 0000000000000003
[  175.281986][ T6602] RBP: 00007f2a4da86090 R08: 0000000000000000 R09: 0000000000000000
[  175.282000][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.282012][ T6602] R13: 00007f2a4faa6038 R14: 00007f2a4faa5fa0 R15: 00007ffd684ce048
[  175.282059][ T6602]  </TASK>
[  175.808983][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'.
[  175.812105][ T6607] netlink: 'syz.2.208': attribute type 9 has an invalid length.
[  175.812126][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'.
[  176.006487][ T6609] 8021q: VLANs not supported on ipvlan1
[  176.217755][ T6609] syz.1.206 (6609): drop_caches: 2
[  176.446767][ T6616] 9p: Bad value for 'wfdno'
[  176.985475][ T5969] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  177.380666][ T5969] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  177.380697][ T5969] usb 5-1: config 1 has no interface number 0
[  177.380757][ T5969] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  177.380792][ T5969] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  177.380819][ T5969] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  177.443443][ T5969] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  177.443476][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.443496][ T5969] usb 5-1: Product: syz
[  177.443511][ T5969] usb 5-1: Manufacturer: syz
[  177.443526][ T5969] usb 5-1: SerialNumber: syz
[  177.529002][ T6620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.778641][ T6620] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.824493][ T5969] usb 5-1: No status endpoint found
[  177.857467][ T5969]  1024-page vmalloc region starting at 0xffffc9000e6e1000 allocated at kcov_ioctl+0x58/0x640
[  177.857513][ T5969] list_add corruption. next->prev should be prev (ffffffff8de28360), but was ffffffff00080000. (next=ffffc9000e6e1000).
[  177.858289][ T5969] ------------[ cut here ]------------
[  177.858299][ T5969] kernel BUG at lib/list_debug.c:31!
[  177.858345][ T5969] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  177.858368][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  177.858391][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  177.858405][ T5969] Workqueue: usb_hub_wq hub_event
[  177.858435][ T5969] RIP: 0010:__list_add_valid_or_report+0xf4/0x130
[  177.858478][ T5969] Code: fd 60 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 93 31 82 fd 48 8b 53 08 48 c7 c7 60 78 a6 8b 4c 89 f6 48 89 d9 e8 9d f2 7e fc 90 <0f> 0b 4c 89 f7 e8 e2 fc 60 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 63
[  177.858494][ T5969] RSP: 0018:ffffc9000552f770 EFLAGS: 00010246
[  177.858511][ T5969] RAX: 0000000000000075 RBX: ffffc9000e6e1000 RCX: afa4690f2ca7ec00
[  177.858526][ T5969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  177.858538][ T5969] RBP: 1ffff92001cdc201 R08: 0000000000000000 R09: 0000000000000000
[  177.858551][ T5969] R10: dffffc0000000000 R11: ffffed101710491b R12: ffffc9000e6e1008
[  177.858572][ T5969] R13: dffffc0000000000 R14: ffffffff8de28360 R15: ffffc9001bbb5000
[  177.858588][ T5969] FS:  0000000000000000(0000) GS:ffff888126336000(0000) knlGS:0000000000000000
[  177.858605][ T5969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.858618][ T5969] CR2: 000020000006a030 CR3: 000000005c2d4000 CR4: 00000000003526f0
[  177.858636][ T5969] Call Trace:
[  177.858645][ T5969]  <TASK>
[  177.858656][ T5969]  kcov_remote_stop+0x457/0x680
[  177.858685][ T5969]  hub_event+0x49d8/0x4f60
[  177.858733][ T5969]  ? __pfx_hub_event+0x10/0x10
[  177.858761][ T5969]  ? process_scheduled_works+0xa8d/0x18c0
[  177.858790][ T5969]  ? process_scheduled_works+0xa8d/0x18c0
[  177.858820][ T5969]  process_scheduled_works+0xb6e/0x18c0
[  177.858864][ T5969]  ? __pfx_process_scheduled_works+0x10/0x10
[  177.858896][ T5969]  ? assign_work+0x3d5/0x5e0
[  177.858933][ T5969]  worker_thread+0xa53/0xfc0
[  177.858976][ T5969]  kthread+0x388/0x470
[  177.858997][ T5969]  ? __pfx_worker_thread+0x10/0x10
[  177.859026][ T5969]  ? __pfx_kthread+0x10/0x10
[  177.859047][ T5969]  ret_from_fork+0x51e/0xb90
[  177.859077][ T5969]  ? __pfx_ret_from_fork+0x10/0x10
[  177.859106][ T5969]  ? __switch_to+0xc7d/0x1450
[  177.859132][ T5969]  ? __pfx_kthread+0x10/0x10
[  177.859153][ T5969]  ret_from_fork_asm+0x1a/0x30
[  177.859180][ T5969]  </TASK>
[  177.859187][ T5969] Modules linked in:
[  177.859207][ T5969] ---[ end trace 0000000000000000 ]---
[  177.859218][ T5969] RIP: 0010:__list_add_valid_or_report+0xf4/0x130
[  177.859244][ T5969] Code: fd 60 fd 42 80 7c 2d 00 00 74 08 4c 89 e7 e8 93 31 82 fd 48 8b 53 08 48 c7 c7 60 78 a6 8b 4c 89 f6 48 89 d9 e8 9d f2 7e fc 90 <0f> 0b 4c 89 f7 e8 e2 fc 60 fd 43 80 3c 2c 00 74 08 4c 89 f7 e8 63
[  177.859261][ T5969] RSP: 0018:ffffc9000552f770 EFLAGS: 00010246
[  177.859278][ T5969] RAX: 0000000000000075 RBX: ffffc9000e6e1000 RCX: afa4690f2ca7ec00
[  177.859293][ T5969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  177.859323][ T5969] RBP: 1ffff92001cdc201 R08: 0000000000000000 R09: 0000000000000000
[  177.859337][ T5969] R10: dffffc0000000000 R11: ffffed101710491b R12: ffffc9000e6e1008
[  177.859352][ T5969] R13: dffffc0000000000 R14: ffffffff8de28360 R15: ffffc9001bbb5000
[  177.859368][ T5969] FS:  0000000000000000(0000) GS:ffff888126336000(0000) knlGS:0000000000000000
[  177.859385][ T5969] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  177.859399][ T5969] CR2: 000020000006a030 CR3: 000000005c2d4000 CR4: 00000000003526f0
[  177.859420][ T5969] Kernel panic - not syncing: Fatal exception
[  177.859999][ T5969] Kernel Offset: disabled