last executing test programs:

5m25.275264258s ago: executing program 32 (id=976):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4d019}, 0x20048905)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0))
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r4, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000c8f30303000000f9ff0000000000a000000000afb7bd548524"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c10e8ff010303000000ae0000000000000000100800010101000000e2d2c4c76960815b12a0d5c83b6a9471a774f93364a8b123c062fb685964e4ad60ab0869672a0994f16371335a315d8d0ef9ec380c13dcd6acad8451fd28f051f84a607599469fd8d44fe8324e8a705a7e0402c0db49055e944b5ba7cdbb86d41fb557ee947cc319dc4fd2299a61971b066986d6757edd8de85cc15dcd589d23fe8ac126379786e6766420e35ab3c871fe77206add49eb9b36b0dc221a8800e77b73fa7bea"], 0x1c}}, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff80, &(0x7f0000000000)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdd250401f2800c001300ff070000000000001400010000000000000000000000ffff6401010150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf844d05c72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0be94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900c9bf05f84d170df4a9c155a0e43eb61d777c2137a6035135f8b90ec2b8816d95aee51bdfd7141dab8ae0a92930de34a299fbec384adbf05a62530458c6a37f0bbc0a1bd218c299e8ec17c0e8d7687ac6109be0784e1dc8398a5fa741943f03a981204cbc3973eeabd57873e453eed91580ac594d21c9a6f04abba38a7aee38940d62fb26304beb5dd786fcccadca8745d4f932b886b327ca7a51077945"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080)

5m4.283960861s ago: executing program 33 (id=1117):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f00000000c0)=0x6, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
prctl$PR_GET_TSC(0x43, 0x0)
mknod$loop(0x0, 0xfff, 0x0)

5m2.651778488s ago: executing program 34 (id=1129):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000002800000000000000000000085000000200000001801000020786c250000000000202020"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000038c0)={0x11, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0xee, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4m32.748804994s ago: executing program 35 (id=1271):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

4m20.318711735s ago: executing program 36 (id=1321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x50, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_KEYS={0x20, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "736cd07259"}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800)

4m17.64419722s ago: executing program 37 (id=1333):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$sw_sync_info(0xffffff9c, 0x0, 0x8500, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x5, @remote, 0x3}, 0x80, &(0x7f00000029c0)=[{0x0}], 0x1}, 0xa0d1)
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x13c}, &(0x7f0000000340), &(0x7f0000000480))
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3m28.06219474s ago: executing program 38 (id=1597):
r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382)
r1 = dup3(r0, r0, 0x80000)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={""/10, ""/2, @dev}, <r2=>0x0}, &(0x7f0000000040)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50)

3m18.141050901s ago: executing program 39 (id=1644):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x1, 0x4, 0x5, {0x200002, 0x5, 0x2005, 0xa, 0x8000, 0x3, 0x4, 0x5, 0x9, 0xd25, 0x7, 0x60b, 0x6d, 0xfffd, "6fd5aa7203dceeb0be00ac360e3600000300"}}) (fail_nth: 7)

1m44.082123388s ago: executing program 40 (id=2157):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x20}, {}, {}, {}, 0x0, 0x10, 0x0, 0x4, 0x0, 0x800000, 0x0, 0x4, 0x0, 0x6})

1m43.073559392s ago: executing program 41 (id=2166):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000540)={'veth0_to_team\x00'})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x14, r3, 0x1, 0x0, 0x0, {0x19}}, 0x14}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a030000000000000000000200002e0900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x20000000)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0)
mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)='omfs\x00', 0x200000, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x4, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4020)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000008000100001001"], 0x24}}, 0x0)
syz_io_uring_setup(0x46da, &(0x7f0000000280)={0x0, 0x5f71, 0x400, 0x2, 0x215}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f0000000340)=0x9, 0x0, 0x4)

1m39.561517247s ago: executing program 42 (id=2175):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) (async)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000000000))
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x81f4, 0xffff18b7, 0x4, 0x384, 0x80000000, 0x1b}, 0x9c) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYRES64, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xc9, &(0x7f0000000f80)=""/201, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r4 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e40)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0xa08410, 0x0) (async)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
io_uring_setup(0x3eb1, &(0x7f0000000080)={0x0, 0x5ff6, 0xc00, 0x10, 0x147}) (async)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)

1m33.734783604s ago: executing program 43 (id=2184):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'dummy0\x00', 0x1}, 0x18)
r1 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40, 0x0)
r4 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18)
connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)

1m22.95168892s ago: executing program 6 (id=2252):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280))
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x81, 0x3, 0x1000, 0x717e387b, 0x98, "1a004e00787680f600", 0x4, 0x2})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
listen(r2, 0x0)
connect$rose(r2, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60, 0xfe}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = dup(r1)
close_range(r1, 0xffffffffffffffff, 0x2)
r5 = fcntl$dupfd(r0, 0x406, r1)
sendto$inet(r5, &(0x7f0000000180)="847d4387490111ba78430b9c3c957876dd3733bf343c7ecdac78cac3b835b2258c2af769a63fb1bc9da9216ba208051c9f362fe546573203294e55bce956ad4622749b2a52befde16020b1c54b050e8b7a1c3e48902357c2f66ff31d0996cf4900848769c532d5d402f25a2d4a2bdd2765bba9bd2ce34f08968b3336be2309338707da81565db2dd4bd24fad9929c074ef80022ed7ddde71718e99ce2421b3a238334c50260944606a2df50dddc8d57de0e9b58e347e11875387a1a5405c0e0be0ada5320f585f74d10ccb32bfdd2711686503e3c65695cffc01865cd2ac7dde984b749e3ab531001c1bf1ea5ad989b9ce564a51", 0xf4, 0x8000, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})

1m22.951412701s ago: executing program 6 (id=2253):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2cc001, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf)
openat$userfaultfd(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x40000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x1c, "fee8a2abd607000000000000072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c00", [0x0, 0x200]}})
ioctl$TCFLSH(r1, 0x400455c8, 0xb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x84)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1m22.724491025s ago: executing program 6 (id=2256):
io_uring_setup(0x5e4b, &(0x7f0000000200)={0x0, 0xdba3, 0x3, 0x0, 0x315})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet(0x2, 0x3, 0x2)
futex(0x0, 0x85, 0x1, 0x0, 0x0, 0x7fffffff)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000040)=0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x2c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m21.501445686s ago: executing program 6 (id=2260):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)=ANY=[], 0x2354}}, 0x8c0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000006, 0x50032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

1m21.4019498s ago: executing program 6 (id=2262):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

1m21.279512113s ago: executing program 6 (id=2263):
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmmsg(r2, &(0x7f0000008280)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x8}, {{&(0x7f00000001c0)=@tipc=@id, 0x80, &(0x7f0000001980)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000280)}, {&(0x7f00000014c0)=""/156, 0x9c}, {&(0x7f0000001580)=""/239, 0xef}, {&(0x7f0000001680)=""/113, 0x71}, {&(0x7f0000001700)=""/198, 0xc6}, {&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/194, 0xc2}], 0x9, &(0x7f0000001a00)=""/154, 0x9a}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001ac0)=""/53, 0x35}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/35, 0x23}, {&(0x7f0000001c00)=""/79, 0x4f}, {&(0x7f0000001c80)=""/92, 0x5c}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000004100)=""/4097, 0x1001}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/115, 0x73}, {&(0x7f0000003e80)=""/110, 0x6e}], 0xa, &(0x7f00000083c0)=""/245, 0xf5}, 0x7}, {{&(0x7f0000004080)=@hci, 0x80, &(0x7f0000005500), 0x0, &(0x7f0000005540)=""/3, 0x3}, 0xa}, {{&(0x7f0000005580)=@l2, 0x80, &(0x7f0000007900)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/168, 0xa8}, {&(0x7f00000066c0)=""/97, 0x61}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/121, 0x79}, {&(0x7f00000077c0)=""/134, 0x86}, {&(0x7f0000007880)=""/126, 0x7e}], 0x7, &(0x7f0000007940)=""/230, 0xe6}, 0x5}, {{&(0x7f0000007a40)=@isdn, 0x80, &(0x7f0000007b00)=[{&(0x7f0000007ac0)=""/54, 0x36}], 0x1, &(0x7f0000007b40)=""/166, 0xa6}, 0x8}, {{&(0x7f0000007c00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000007c80)=""/183, 0xb7}, {&(0x7f0000007d40)=""/232, 0xe8}, {&(0x7f0000007e40)=""/165, 0xa5}, {&(0x7f0000007f00)=""/185, 0xb9}, {&(0x7f0000007fc0)=""/106, 0x6a}, {&(0x7f0000008040)=""/144, 0x90}, {&(0x7f0000008100)=""/172, 0xac}], 0x7, &(0x7f0000008200)=""/74, 0x4a}, 0x5}], 0x7, 0x2, &(0x7f0000008380)={0x77359400})
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff})
fcntl$setlease(r1, 0x400, 0x2)
r3 = fsopen(&(0x7f0000000140)='jffs2\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
dup3(r4, r0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f0000000140), 0x80000)
r6 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r10, 0x0})
io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m21.12909773s ago: executing program 5 (id=2265):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2cc001, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf)
openat$userfaultfd(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x40000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00)
ioctl$TCFLSH(r1, 0x400455c8, 0xb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x84)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1m20.26239606s ago: executing program 5 (id=2267):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000000)={0x100, r2}, 0x0)
close(r2)
close(r1)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

1m20.257902799s ago: executing program 5 (id=2269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x880) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 32)
sched_setaffinity(r6, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32=r10, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

1m20.024115008s ago: executing program 5 (id=2270):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)=ANY=[], 0x2354}}, 0x8c0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000006, 0x50032, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

1m19.861638182s ago: executing program 5 (id=2271):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

1m19.860890094s ago: executing program 3 (id=2272):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20040000)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xff03, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe", 0x57}, {&(0x7f00000000c0)="f98a88f5b4", 0x5}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m19.860516782s ago: executing program 5 (id=2273):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, 0x0, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0xf14, 0xf, 0x1, 0x7fff, 0x7, 0xff, 0xa44, 0xf67, 0x7, 0x6, 0x7, 0x400, 0x4, 0xc, 0xa3, 0xf, 0x500, 0x4, 0x3, 0x23, 0x51, 0x7c7, 0x0, 0x2, 0x8001, 0x3ff, 0x7, 0x40, 0xe7, 0x2, 0x55, 0xfffffffc, 0xa0, 0x9, 0x4, 0x4, 0x100, 0x9, 0x897, 0x8, 0xd883, 0x6, 0x7, 0x3ff, 0x0, 0x80, 0xe94c, 0x8, 0x3, 0x600, 0x6, 0x0, 0x7f, 0x3, 0x6, 0x0, 0xed8, 0x5, 0xffff7fff, 0x3, 0x9, 0x80000001, 0x3, 0x2, 0x8, 0xfff, 0x3ff, 0xaa1, 0x7, 0x6, 0xff, 0x80000000, 0x180, 0x8001, 0x56c6, 0x80000000, 0x9, 0x4a1c, 0x4ee, 0x9, 0x5, 0xd, 0x9, 0x200, 0xad75, 0x6, 0x3, 0x2, 0x1, 0x1, 0x8, 0xfffffffb, 0x200, 0x5, 0x5fa, 0x4, 0x47, 0x0, 0x10, 0x80000001, 0x4e, 0x8fdd, 0x1, 0x8, 0x3, 0x8, 0x1, 0x79f, 0x9, 0x80000001, 0x8, 0x7, 0x7, 0x7fff, 0x9, 0x800b, 0xfffffffa, 0xd, 0x0, 0x9, 0x80, 0x4, 0x2, 0x0, 0xfffffffb, 0x54, 0x4, 0x3ff, 0xffff, 0x7, 0x6, 0x7, 0x4, 0xdfb, 0x81, 0x6ae0, 0xfffffffa, 0x621, 0x0, 0x4, 0x442, 0x100, 0x10, 0x3, 0x9, 0x100, 0x4, 0x8fac, 0x1, 0x2, 0x3, 0x4, 0x39d, 0x4, 0x1, 0x9, 0x81, 0x800, 0x6, 0x3ff, 0xfffffffc, 0x9, 0x3, 0xfffffffb, 0x7fffffff, 0x9, 0x401, 0xffff, 0x7fffffff, 0x4, 0x8, 0x30000, 0x4f9, 0x7fff, 0x9, 0x8001, 0x401, 0xfffffff9, 0x7, 0x2, 0x9, 0x5, 0xfffffffe, 0x8, 0x3, 0x1b1f, 0xd91b, 0x8, 0x6, 0x9, 0x1, 0x0, 0x6, 0xeb, 0x5, 0x1, 0x8, 0x2, 0xc, 0x1ff, 0x10000, 0x7, 0x4, 0x6fd, 0x2, 0x8, 0x0, 0xca0, 0x8ae, 0x0, 0x401, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x5, 0x8, 0x8, 0x6, 0xffff8000, 0x0, 0x3, 0x100, 0x3, 0xb, 0x4, 0x7, 0xfffffffe, 0xffffffff, 0x1, 0x3973, 0x0, 0x3, 0x565f, 0x8, 0x9, 0x3, 0xd, 0x100, 0x6, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x0, 0x80000000, 0x9, 0xffffae87, 0x8, 0x6, 0xf, 0x4, 0x1, 0xffff]}]}}]}, 0x45c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r8=>0x0})
accept4$inet(r5, 0x0, &(0x7f00000000c0), 0x40000)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000580)={0x3, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x8c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0x2, &(0x7f0000002400)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}])
r11 = openat$comedi(0xffffff9c, 0x0, 0x200000, 0x0)
ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000180)={'ni_daq_700\x00', [0xe, 0x8, 0x401, 0x1, 0x3, 0xe253, 0x80000000, 0x46, 0x4, 0x3, 0x1455, 0x3, 0x6, 0xfff, 0xac, 0x0, 0x80a0, 0x8, 0x98b8, 0x9, 0x5, 0x6, 0x2, 0x4, 0x9, 0x26a, 0x80, 0x9, 0x6e, 0x8, 0x0, 0xfffffff9]})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4004)

1m19.741763201s ago: executing program 3 (id=2274):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
epoll_create1(0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000000)=0x41de, 0x4)
syz_io_uring_setup(0xc97, 0x0, &(0x7f00000003c0), 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="850000004f000000350000000000000085000000d00000009500000000000000f4670880271e3503200ffa95a2c8c037c5a142dfa8ba6287066c5197fabd5f7010e81ae0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e2eb15d756a2350ea7c09cc28de194f44800000000b0d3712c7e1e23166304d95433b3b30514b1ccbaa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3003006b6e51a7f550afc809000000000000007846c744ae6af3c04143cca8d95c2c505d5e37102124d85cec074c6949e1d76d067a97000247fe5f0600000000000711aba46aac3abe6c4d7f47ef6d7eb6baaa4a9779f8595caea75d0400c221c110ef050000000ee282ab76f593d928cf95846be6277c04b8c5324812696a62d992a4f8dc8dcba00b1b2d2547c45b0c52087b5efaa98496b9a95166bd008ea02a7b56c0ebfb19a3426833280be1f844ce328c10752a42dca52fb98c1452b6516e9d114ea64d15fd89e287ebf942f7147f7b2744419a2f238f173d0cd46dafc6e95500f53e5309ec91d83cf4fbd775d9c07d59101949f8982b6c403a08606d6a2fd1fdfce2b91a8665b1e629b3b28000000000000009000000d98255ea78431845ea38ca3d4dd562797c8c3265512da6fd6575ad0f0e30175cf800d0380367e653af5fd72c5335aeb479d3a397dbbde8892bb31ffcc55392"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x48e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000340)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0xc92)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, 0x0, 0x0)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

1m18.676623886s ago: executing program 3 (id=2277):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2cc001, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xf)
openat$userfaultfd(0xffffff9c, &(0x7f00000000c0), 0x80800, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x40000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00)
ioctl$TCFLSH(r1, 0x400455c8, 0xb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x84)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c050)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1m18.401184822s ago: executing program 3 (id=2279):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0xc00, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)=ANY=[], 0x2354}}, 0x8c0)
socket$alg(0x26, 0x5, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000006, 0x50032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

1m18.201331522s ago: executing program 3 (id=2282):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

1m18.138397818s ago: executing program 3 (id=2283):
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000280)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38, 0x38]}}]})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x4, 0x9}, 0x8)

1m16.201834998s ago: executing program 2 (id=2287):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036)

1m15.241933082s ago: executing program 2 (id=2288):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036)

1m14.303635573s ago: executing program 2 (id=2289):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004076a23a6dcdc7a6987fcb4ee006012abd700000000000049a39d635197f7c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0)
utimensat(r4, 0x0, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0x3fffffff}}, 0x100)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES8=r4, @ANYRES16=r1], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x55)

1m14.179049271s ago: executing program 2 (id=2290):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0)
read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000000})
write$binfmt_script(r2, &(0x7f0000020240), 0x10010)
fsetxattr$trusted_overlay_upper(r0, &(0x7f00000012c0), 0x0, 0x0, 0x0)
fremovexattr(r0, &(0x7f0000002480)=@random={'user.', '/dev/null\x00'})

1m14.070930106s ago: executing program 2 (id=2291):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

1m12.319519225s ago: executing program 2 (id=2292):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x73, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

1m6.046275638s ago: executing program 44 (id=2263):
r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
recvmmsg(r2, &(0x7f0000008280)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000300)=""/232, 0xe8}], 0x1}, 0x8}, {{&(0x7f00000001c0)=@tipc=@id, 0x80, &(0x7f0000001980)=[{&(0x7f0000000400)=""/154, 0x9a}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000280)}, {&(0x7f00000014c0)=""/156, 0x9c}, {&(0x7f0000001580)=""/239, 0xef}, {&(0x7f0000001680)=""/113, 0x71}, {&(0x7f0000001700)=""/198, 0xc6}, {&(0x7f0000001800)=""/99, 0x63}, {&(0x7f0000001880)=""/194, 0xc2}], 0x9, &(0x7f0000001a00)=""/154, 0x9a}}, {{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001ac0)=""/53, 0x35}, {&(0x7f0000001b00)=""/156, 0x9c}, {&(0x7f0000001bc0)=""/35, 0x23}, {&(0x7f0000001c00)=""/79, 0x4f}, {&(0x7f0000001c80)=""/92, 0x5c}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000004100)=""/4097, 0x1001}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/115, 0x73}, {&(0x7f0000003e80)=""/110, 0x6e}], 0xa, &(0x7f00000083c0)=""/245, 0xf5}, 0x7}, {{&(0x7f0000004080)=@hci, 0x80, &(0x7f0000005500), 0x0, &(0x7f0000005540)=""/3, 0x3}, 0xa}, {{&(0x7f0000005580)=@l2, 0x80, &(0x7f0000007900)=[{&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/168, 0xa8}, {&(0x7f00000066c0)=""/97, 0x61}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/121, 0x79}, {&(0x7f00000077c0)=""/134, 0x86}, {&(0x7f0000007880)=""/126, 0x7e}], 0x7, &(0x7f0000007940)=""/230, 0xe6}, 0x5}, {{&(0x7f0000007a40)=@isdn, 0x80, &(0x7f0000007b00)=[{&(0x7f0000007ac0)=""/54, 0x36}], 0x1, &(0x7f0000007b40)=""/166, 0xa6}, 0x8}, {{&(0x7f0000007c00)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000007c80)=""/183, 0xb7}, {&(0x7f0000007d40)=""/232, 0xe8}, {&(0x7f0000007e40)=""/165, 0xa5}, {&(0x7f0000007f00)=""/185, 0xb9}, {&(0x7f0000007fc0)=""/106, 0x6a}, {&(0x7f0000008040)=""/144, 0x90}, {&(0x7f0000008100)=""/172, 0xac}], 0x7, &(0x7f0000008200)=""/74, 0x4a}, 0x5}], 0x7, 0x2, &(0x7f0000008380)={0x77359400})
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xfff})
fcntl$setlease(r1, 0x400, 0x2)
r3 = fsopen(&(0x7f0000000140)='jffs2\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x101)
dup3(r4, r0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
pipe2$9p(&(0x7f0000000140), 0x80000)
r6 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r10, 0x0})
io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m4.536236287s ago: executing program 45 (id=2273):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r7, 0x0, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x2}, 0xe)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xff}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0xf14, 0xf, 0x1, 0x7fff, 0x7, 0xff, 0xa44, 0xf67, 0x7, 0x6, 0x7, 0x400, 0x4, 0xc, 0xa3, 0xf, 0x500, 0x4, 0x3, 0x23, 0x51, 0x7c7, 0x0, 0x2, 0x8001, 0x3ff, 0x7, 0x40, 0xe7, 0x2, 0x55, 0xfffffffc, 0xa0, 0x9, 0x4, 0x4, 0x100, 0x9, 0x897, 0x8, 0xd883, 0x6, 0x7, 0x3ff, 0x0, 0x80, 0xe94c, 0x8, 0x3, 0x600, 0x6, 0x0, 0x7f, 0x3, 0x6, 0x0, 0xed8, 0x5, 0xffff7fff, 0x3, 0x9, 0x80000001, 0x3, 0x2, 0x8, 0xfff, 0x3ff, 0xaa1, 0x7, 0x6, 0xff, 0x80000000, 0x180, 0x8001, 0x56c6, 0x80000000, 0x9, 0x4a1c, 0x4ee, 0x9, 0x5, 0xd, 0x9, 0x200, 0xad75, 0x6, 0x3, 0x2, 0x1, 0x1, 0x8, 0xfffffffb, 0x200, 0x5, 0x5fa, 0x4, 0x47, 0x0, 0x10, 0x80000001, 0x4e, 0x8fdd, 0x1, 0x8, 0x3, 0x8, 0x1, 0x79f, 0x9, 0x80000001, 0x8, 0x7, 0x7, 0x7fff, 0x9, 0x800b, 0xfffffffa, 0xd, 0x0, 0x9, 0x80, 0x4, 0x2, 0x0, 0xfffffffb, 0x54, 0x4, 0x3ff, 0xffff, 0x7, 0x6, 0x7, 0x4, 0xdfb, 0x81, 0x6ae0, 0xfffffffa, 0x621, 0x0, 0x4, 0x442, 0x100, 0x10, 0x3, 0x9, 0x100, 0x4, 0x8fac, 0x1, 0x2, 0x3, 0x4, 0x39d, 0x4, 0x1, 0x9, 0x81, 0x800, 0x6, 0x3ff, 0xfffffffc, 0x9, 0x3, 0xfffffffb, 0x7fffffff, 0x9, 0x401, 0xffff, 0x7fffffff, 0x4, 0x8, 0x30000, 0x4f9, 0x7fff, 0x9, 0x8001, 0x401, 0xfffffff9, 0x7, 0x2, 0x9, 0x5, 0xfffffffe, 0x8, 0x3, 0x1b1f, 0xd91b, 0x8, 0x6, 0x9, 0x1, 0x0, 0x6, 0xeb, 0x5, 0x1, 0x8, 0x2, 0xc, 0x1ff, 0x10000, 0x7, 0x4, 0x6fd, 0x2, 0x8, 0x0, 0xca0, 0x8ae, 0x0, 0x401, 0x0, 0x7fff, 0x5, 0x4, 0x5, 0x5, 0x8, 0x8, 0x6, 0xffff8000, 0x0, 0x3, 0x100, 0x3, 0xb, 0x4, 0x7, 0xfffffffe, 0xffffffff, 0x1, 0x3973, 0x0, 0x3, 0x565f, 0x8, 0x9, 0x3, 0xd, 0x100, 0x6, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x0, 0x80000000, 0x9, 0xffffae87, 0x8, 0x6, 0xf, 0x4, 0x1, 0xffff]}]}}]}, 0x45c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r8=>0x0})
accept4$inet(r5, 0x0, &(0x7f00000000c0), 0x40000)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000580)={0x3, {{0x2, 0x4e25, @multicast2}}, 0x1}, 0x8c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
io_setup(0x2, &(0x7f0000002400)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}])
r11 = openat$comedi(0xffffff9c, 0x0, 0x200000, 0x0)
ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f0000000180)={'ni_daq_700\x00', [0xe, 0x8, 0x401, 0x1, 0x3, 0xe253, 0x80000000, 0x46, 0x4, 0x3, 0x1455, 0x3, 0x6, 0xfff, 0xac, 0x0, 0x80a0, 0x8, 0x98b8, 0x9, 0x5, 0x6, 0x2, 0x4, 0x9, 0x26a, 0x80, 0x9, 0x6e, 0x8, 0x0, 0xfffffff9]})
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={r5})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x4004)

1m2.533627975s ago: executing program 46 (id=2283):
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000280)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38, 0x38]}}]})
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x4, 0x9}, 0x8)

57.215645015s ago: executing program 47 (id=2292):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x73, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

49.43655872s ago: executing program 1 (id=2322):
msgsnd(0xffffffffffffffff, &(0x7f0000000100)={0x1}, 0x4, 0x800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x255fdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000400000000000000009500000000f444a972110e5a000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x18c)
mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]})
lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

47.911815719s ago: executing program 1 (id=2332):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r2 = socket$kcm(0x11, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r4, &(0x7f0000001f40)=[{0x0, 0x23}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}], 0x3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x6, [@datasec={0x9, 0x9, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x7f}, {0x4, 0x6, 0x690000}, {0x2, 0x7fffffff, 0xfffffff8}, {0x4, 0x43736d09, 0x9}, {0x5, 0x3, 0xfffffffb}, {0x5, 0x7, 0x400}, {0x5, 0xa8, 0x400}, {0x3, 0x200, 0x7}, {0x2, 0xce, 0xcc}], '/='}]}, {0x0, [0x30, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000400), 0x9a, 0x0, 0x0, 0xf9}, 0x28)
dup(r2)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$sock(r6, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40d0)
recvmmsg(r6, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/5, 0x5}], 0x1}, 0x9}], 0x1, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xa9f, 0xd, 0x2, 0x448a0, r1, 0x8, '\x00', r3, r4, 0x1, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xe, 0x5, &(0x7f0000000f80)=@framed={{}, [@map_val={0x18, 0x7, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @multicast1}, &(0x7f0000000240)=0xc)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)

47.701748114s ago: executing program 1 (id=2333):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x10}, 0x14}, 0x1, 0x0, 0x0, 0x24000805}, 0x0)
keyctl$invalidate(0x15, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0})
r1 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRES32], 0x48)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xaf4, 0x0)
shutdown(r5, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
chroot(&(0x7f0000000000)='./file0\x00')
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1)

46.370934926s ago: executing program 1 (id=2344):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xc, &(0x7f0000000300)) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x3, 0x0, {0x81, 0x80, 0x10, 0xcb, 0x0, 0x0, 0x0, 0x8, 0x1000c}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0) (rerun: 64)
pselect6(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x13c, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xf0, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64d6dd9218ad21964b472eabb9e95b7ee6675c"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async, rerun: 32)
creat(&(0x7f0000000440)='./file0\x00', 0x0) (async, rerun: 32)
syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r8, r8, 0x0, 0x40008)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}})

46.170912883s ago: executing program 1 (id=2345):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

46.17048163s ago: executing program 1 (id=2346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x2200, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010020000900030073797a31000000000900010073797a31"], 0xa8}}, 0x0)

43.391810876s ago: executing program 8 (id=2357):
socket$caif_stream(0x25, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x88)
r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x103642, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={0x0, 0x5, 0xc})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0xfffffffd, 0x1c, 0x1, 0x100, &(0x7f0000000440)="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"})
ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000))
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = syz_io_uring_setup(0x114, &(0x7f0000000440)={0x0, 0x4000002, 0x80, 0x7, 0x48}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4)
unshare(0x20000400)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x48, 0x0, r4, 0x0, 0x0})
io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, 0x0)
syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f5000000019078ac1e0001ac1614aa03019078030400004600000000004000002f0009ac141410ac1414bb44440001000086dd00000000ac1414bb00000000ac14143300000000000000000000004fe0000002000000007f00000100000008ac1414aa00000004e000000100000000"], 0x0)
ioctl$UI_DEV_CREATE(r8, 0x5501)

42.337780216s ago: executing program 8 (id=2360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x11}}, 0x1c}}, 0x4000004)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x48)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="05050400c90078e1d6c9783673ac84daada5a422cf31e53b62057fcd860f0a21a1b3", @ANYRES16], 0x7)

41.771341118s ago: executing program 8 (id=2363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x74)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) (fail_nth: 7)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8000000003c)

41.450724883s ago: executing program 8 (id=2365):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$VT_RELDISP(r0, 0x5605)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x82, 0x274, &(0x7f0000000000)="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", &(0x7f0000000100)="e387f898bcf4a2a16aba15b6dc5b6a8bf37288c5da36eca2d99623288091b2726f2da739c0211a48def2fff986b1051d62e74954c4987aa36401c4bbc7afa296257c5c7d10d5ff6c04c96e02e1bdb0f5e4a1b92f417ce9c7986f99b6d7d3df348189cc6290a9f37cab9fe94b7a955137e4d55024451187302f3d1a026537f2919a2c0f55b21366a4d47f24d5f0ec50a9b5b783050693f40b2c8f", 0xfc, 0x9a})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) (async)
r2 = openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x400000, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x40b3, 0x4) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) (async)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000003c0)={0x3}) (async)
r4 = openat$pmem0(0xffffff9c, &(0x7f0000000400), 0x180, 0x0)
ioctl$BLKDISCARDZEROES(r4, 0x127c, &(0x7f0000000440)) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6c}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000) (async)
openat$ttyprintk(0xffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async)
r6 = syz_open_dev$video4linux(&(0x7f0000000600), 0x7, 0x101140)
ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f0000000640)={0xd, "50e2fbc027a7281f9ed5dabdfa7a9a0a7d1da68f287b3d46d1969c988c9238b8"}) (async)
r7 = memfd_secret(0x80000)
ioctl$BTRFS_IOC_SEND(r5, 0x40449426, &(0x7f00000006c0)={{r0}, 0x1, &(0x7f0000000680)=[0x1], 0xe, 0x5}) (async)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000780), r7) (async)
getsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f00000007c0)={@private0, <r9=>0x0}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x280, r8, 0x800, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x614}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xead}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x20080845}, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000c80)={0x1, 0x2, 0x1000, 0xf8, &(0x7f0000000b40)="75a5b6a3f80c59880a83094a85e87f0b96f37b1e79a7b75190d34ce02313d50f136cb65d4cf23d862770cee8a8d83fe31f403b70fe72ad1fbb6d5bda9306f77ae32a78ed7647e9366a7b6f5b76b6411bb4c15779d37a95f85b0420b6c87f9c542a364649f49a8771d84a38357dff70eee5a5f639dab39e52e32761d33f7896fcc8fa7f1d50d305f923bb4e5499891392e8f82739fb566c1da151a3d0362e79c383567264493bce0f03386dc399d4eaf1302439090113b660f0e5b09f0da9bffddb6eebfe35eaa57fa68bcdd9be1a34bde8b5be92154d06bee8eab18e21a743f4cfb46307d20d131cb0263b161a54e58020bb20e89caa4325", 0x1d, 0x0, &(0x7f0000000c40)="3cb5a0f551ffc49b2b236aeb067568c61117196de3ec0b5e148613cd02"})
ioctl$BLKRRPART(r4, 0x125f, 0x0) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20004801) (async)
connect$packet(r7, &(0x7f0000000e80)={0x11, 0xf8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) (async)
bind$qrtr(r7, &(0x7f0000000ec0)={0x2a, 0xffffffff, 0x8000}, 0xc)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000f40), 0x2)

41.450509435s ago: executing program 8 (id=2366):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
mmap(&(0x7f00007ac000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mkdir(&(0x7f0000000340)='./file0\x00', 0xc1)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0)
acct(&(0x7f0000000380)='./file0\x00')
geteuid()
socket(0x10, 0x3, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x8000}, 0x3c)

41.309556346s ago: executing program 8 (id=2368):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x792b9ea7f11fc5aa, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000000700)={0x20071026, r0}, &(0x7f00000006c0)={0x200000, 0x200000, 0x80, 0x0, 0x0, 0x40000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000f1e4a7960a93525021c2d988b6ff0b71fe363557b2e652dfd698609107e2b8de5d3153ab4aa4b7208032f750388b01cd4cb14d67eb9b186feab383f2f417ee05e5018d7deaafc05e4595f0ba0003bab44709fca9457cc2"], 0x0, 0x26, 0x0, 0x1}, 0x28)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

31.079758601s ago: executing program 48 (id=2346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x2200, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a31000000002c000000050a01020000000000000000010020000900030073797a31000000000900010073797a31"], 0xa8}}, 0x0)

25.697367753s ago: executing program 49 (id=2368):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x792b9ea7f11fc5aa, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
capset(&(0x7f0000000700)={0x20071026, r0}, &(0x7f00000006c0)={0x200000, 0x200000, 0x80, 0x0, 0x0, 0x40000000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000f1e4a7960a93525021c2d988b6ff0b71fe363557b2e652dfd698609107e2b8de5d3153ab4aa4b7208032f750388b01cd4cb14d67eb9b186feab383f2f417ee05e5018d7deaafc05e4595f0ba0003bab44709fca9457cc2"], 0x0, 0x26, 0x0, 0x1}, 0x28)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)

5.096428113s ago: executing program 0 (id=2527):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
syz_io_uring_setup(0x10f8, &(0x7f00000003c0)={0x0, 0xfffffffa, 0x2, 0x3, 0x2bf}, 0x0, &(0x7f0000000380))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="000000009dfd00656300000c00028005000b0000000000"], 0x3c}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0)
r4 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xc3\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q\x00'/1189, 0x42, 0x2, 0x0)
close(r4)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
dup2(0xffffffffffffffff, r1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32=r5, @ANYRES8=r1, @ANYRES32=r2, @ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}, 0x1c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x9, 0x0)
r9 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000ca0000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})

4.140268425s ago: executing program 0 (id=2531):
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2b, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r2)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1)
fcntl$setlease(r4, 0x400, 0x1)
r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
open$dir(&(0x7f0000000240)='./file0\x00', 0x101000, 0x4)
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xfffffe99)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)

3.820585103s ago: executing program 9 (id=2532):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
statx(r3, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r6, 0x0, 0x8, 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRESDEC=r0, @ANYRES16=r5, @ANYRESDEC, @ANYBLOB="98d6c8837ccbd4ecf2bc4874d8360a53f035187c0add6b7e55d81ccb053c4256c978f97cf2ef42cf4d42b1dbfeb1f5975a7807399afbfe1b98c0512a38c3510ca2f21effc0ac6dddb5f670d8c3b35f48c4bf8cff6e3a7da4029a1d85df57517a19e3a4bec7e8e16ec30c988447aa10138958cc9f488033fd2b4c0573877cd23826c0833374571f9ebb3f9e39ea04e0b31e33915f2e6a4579c9817dc99a4a"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @private1}}, 0x0, 0x0, 0x3f8, 0x1000, 0x32}, 0x9c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.774415069s ago: executing program 0 (id=2533):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (fail_nth: 7)

2.56063088s ago: executing program 0 (id=2534):
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000001c0)={r2, 0x0, 0x42, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d05f93b3b6cd1fcb7f9bbfbb1bc905d11583e1b93b5cd88a4c7d371f222aa269619b660c7d4f6187", 0x0, 0xd, 0x0, 0xa1, 0x0, &(0x7f0000000080)="6cda76a0cb69aa9286472dff66c8ffbd0b0cb7a6d5e68e91e0d6ed6a60fabc09fcb4dd1383593edef59da099eacb822a2749d7f0dc2c487e30da87d739e82a08e123f9b53e1e4b3a4eb01a1f659b8de567c570b02c918227d7e87a25870af1719286c055ad197c32b7104373fe5ea1c91bb58e20bbf4359770e5905ed5a8b4a48138db5835e1ea1b40218c71f5d3a2dccbf596e61e54e0ab32f9bec2c115c4f342", 0x0, 0x2, 0x0, 0x4}, 0x32)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/93, &(0x7f00000001c0)=""/79, 0x30000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000380)={'icmp\x00'}, &(0x7f0000000580)=0x1e)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x64000000, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/210, 0xd2}]}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0})
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}}, 0x8000)
socket(0x18, 0x0, 0x1)
open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b)

2.381315098s ago: executing program 7 (id=2535):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
ioctl$KDSETMODE(r0, 0x4b3a, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x5, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0x18fed, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
gettid()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
openat(r1, &(0x7f0000000040)='./file0/file0\x00', 0x280742, 0x105)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xf198, 0x400, 0x14, 0x193}, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.210503824s ago: executing program 9 (id=2536):
msgsnd(0xffffffffffffffff, &(0x7f0000000100)={0x1}, 0x4, 0x800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x255fdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_UID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x2, &(0x7f0000000100)="8d83", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})

1.780822585s ago: executing program 7 (id=2541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x7, 0x9}}}}]}, 0x44}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e, 0x10000000}, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x4)

1.630798598s ago: executing program 4 (id=2543):
r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x9, 0x1)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r1 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
socket$nl_route(0x10, 0x3, 0x0)

1.491134957s ago: executing program 7 (id=2544):
socket$kcm(0x29, 0x5, 0x0)
r0 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
write$binfmt_misc(r0, &(0x7f00000000c0)="0ed0", 0x2)
fcntl$addseals(r0, 0x409, 0x8)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/kcm\x00')
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x10a}]})
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x0, 0x6}}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x8800)

1.389623656s ago: executing program 4 (id=2545):
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x8040, 0x104)
r1 = openat$autofs(0xffffff9c, &(0x7f0000000480), 0x404501, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x1cb)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=r8, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x4048030}, 0xc000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\f\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=r6, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
getpeername$llc(r0, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000280)=0x10)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), r9)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r12, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
write$binfmt_misc(r11, &(0x7f0000000000), 0xd)

1.389380781s ago: executing program 7 (id=2546):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x38, r5, 0x60b, 0x70bd2d, 0x4000, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x8000000, 0x0, 0x1}, 0x0) (fail_nth: 4)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40)
unshare(0x6a040000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)

1.248315458s ago: executing program 4 (id=2547):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f00000006c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xc3\x04\x00\x00\x00\x00\x00\x00g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x04\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83\xd9\xb7,%\xb4;e\x1c\x04\xf9\x06F\xbdfC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\t\x00\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\xf0e\r\xac\"\x13tNx\xc0$)\x14\xbb\xe2\x00\xb8\x16-\x15\x1f\xb3\x10\xb4\xf3\x87=|\xeb\xbc\x1f\xf3\xcbR\x061w\xfc\xdd2U\xb0e\xe2\xf5\xed\\\xad\xae\xa1\xdd.\x02\xbeyk\xf3(\xe1E\xcc\x9fl\x1b\xa2\xb3\v.g y}\x97', 0x2)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000380)={0x0, 0x2, [{r1, 0x0, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x8000, 0x10000}]})
syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00')
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4)

1.247703198s ago: executing program 9 (id=2548):
r0 = socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003052dbd70000007000000000000", @ANYRESHEX=r2, @ANYBLOB="0000000000100000140012800800010067726500080002800400120008000a00", @ANYRES32=r2, @ANYBLOB="9b2bf5ae9da745d44b68fbe9c0c805eed7bf63c95b08385b9b537c3f7facf3931074f1895627f9c967fb0042895e772dedfe2e107cb15429a23294e2aa2c1858f92ceb81615f0b77aeed69449393ef1f48b0b3135dd39419327a9d560ba8bd003d1a93482d8a7c3a5512dd866c32cda3f9a6af5712cf4d511432919c67cc1f297a3c620ae87082171c61"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x40010)
r4 = socket(0x10, 0x803, 0x8001)
r5 = socket(0x10, 0x803, 0x2)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e20, 0x0, 0x4e20, 0x2be8, 0x2, 0x20, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x8, 0x5b, 0x2, 0x7, 0x6f03, 0x5, 0xff}, {0x8, 0x5, 0x7fff, 0x6}, 0x7, 0x6e6bb0, 0x0, 0x1, 0x2, 0x2}, {{@in=@remote, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x6, 0xa830, 0x6, 0x8}}, 0xe4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
getcwd(&(0x7f0000000000)=""/155, 0x9b)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.190241959s ago: executing program 4 (id=2549):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c00000009"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000060bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

1.039562431s ago: executing program 9 (id=2550):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r3, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3})
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036)

910.47466ms ago: executing program 4 (id=2551):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r0, 0x4020744f, 0x0)

897.369773ms ago: executing program 0 (id=2552):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000040)=0x1ff, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_TMR_STOP(r3, 0x5402)
ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic})
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), r2)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x149800, 0x1a8)
io_setup(0x1, &(0x7f0000000b80)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
open$dir(&(0x7f0000000140)='./file0\x00', 0x16a1c1, 0x112)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=<r7=>0x0)
r8 = getuid()
mount$cgroup(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x40044, &(0x7f0000000280)={[{@none}, {@noprefix}, {@nofavordynmods}, {@name={'name', 0x3d, '+/'}}, {@subsystem='memory'}, {@subsystem='net_prio'}, {@xattr}, {@subsystem='memory'}], [{@subj_user={'subj_user', 0x3d, 'vlan1\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '9p\x00'}}, {@fowner_gt={'fowner>', r8}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x37, 0x34, 0x32, 0x63, 0x62, 0x36, 0x66], 0x2d, [0x61, 0x34, 0x66, 0x33], 0x2d, [0x62, 0x39, 0x31, 0x34], 0x2d, [0x96f8b078c66476ed, 0x39, 0x62, 0x38], 0x2d, [0x36, 0x33, 0x63, 0x34, 0x33, 0x31, 0x38, 0x38]}}}, {@obj_role={'obj_role', 0x3d, 'vlan1\x00'}}]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x2d4, 0x11, 0x800, 0x9, 0x25dfdbff, {0x13}, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="9043c1de067425c720580584401c0a2a98ca0212a70f07967821e7d9461848af444b726a7c0fa03e84e0d1c2f48789dce9bdd7f503402cdbee822e1b761683b65ab9cb8eba162fa0f762bb945f2c8471b89078d98b19cfcba832f5e99d2295c966c121f605e8691554c1e5e3e20f23f2232cb7cc5f37b8e5950aee222eaf25987ddf27c5bd4eb62aefa375f110e72408b8b2486e83282a7f708edd48cabe1cb05f4fc72a1821a74eb5dfc21bd235568d53bd48862f7b770335d5f0875b1d4ab36984fb2d444838dd8c4b71f17f7203f57d8dd25678115254ca22fc076d01c8", @generic="8f69fbaee05aac009d56fb5e78ef4333ca8677912f7152a9f6943bcc014270c54a5ee23f9f5a1ce98a27475a9d9f5edd8dd998fff3f8ea6e442aad943fd9d4944e551cac7f3ceca83f27148252f4881994ff59b489d99cef83a6c975bd3d0ab111d1c181add154e25c204e980beef43ed6ac9fd7ead027509db9505f4a3b16dbd8021d27938b120b79eb99c784227e4b53bc705c742bba5684f57069", @generic="c1e0c5e1a2aec06463e9392460d0fbd599942be17f477d09e411b7a4a4a695a553b2a33801462f39f2753697f3bb556597f250e988d21b7d88485fa079627cf299d768174ca49501f3c825d0458460a1646e8002f5e1888f163c517f67ce692154be9901181689e9a263c4123b3acc5e45a8c7c2c97b2343acb0926081", @nested={0xa3, 0x11d, 0x0, 0x1, [@generic="7a8b05850b28575cf95dbccb6088d2bc496acf2558f534f0707355d4a70b14ce351478c614f5e5956f8ac6dd13b835f34d81f84ccfaf7ea2e19f01", @typed={0x4, 0x3a}, @generic="c679bc81ea6389b21e789c32b51cdd20c59f0b282dd4ddd65b", @typed={0x8, 0x154, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x26}, @generic="b5a1284e4111203fe0c57970e428155f251e2c3ebc08ccef622fdb13582cbd2117878df839539d27dd626b", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r8}]}, @nested={0x10, 0xc6, 0x0, 0x1, [@nested={0x4, 0x5f}, @nested={0x4, 0xc3}, @typed={0x4, 0x131}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x5a5fd3ff4d90e835, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30028890}, 0x80)

809.387446ms ago: executing program 4 (id=2553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b00)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xf77d, 0x2, 0x1}, {0x9}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x76bc42, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="3ef7f8", 0x3}], 0x1}, 0xc804)

577.947719ms ago: executing program 0 (id=2554):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f000083d000/0x3000)=nil, 0x3000, 0xb635773f07ebbeed, 0x30, 0xffffffffffffffff, 0xa3398000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
getpid()
socket$nl_generic(0x10, 0x3, 0x10)

321.479073ms ago: executing program 7 (id=2555):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x13f, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0xb, r0, 0x0, 0x0, 0x1}}, 0x20)

170.536761ms ago: executing program 7 (id=2556):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000580))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe4)
r2 = getpid()
sched_setaffinity(r2, 0x0, 0x0)
r3 = getuid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="d00300003500000025bd7000fddbdf25110000003a00d88004000280315bad3a609131fa584065e55854ae1c5c01e9d992839cd8458d080028006401010208005000", @ANYRES32=r1, @ANYBLOB="0800dc000400000000000800e4006d7a026cf0032632ad2bf6947c0b2b6639ddd7e72c5e6fc3e00c60f741b07846778ead52a6d7a94a2b7b813045669747e42eb25dff5b11dd38eebcf5da422384f6228d1c686eaa626cf7", @ANYRES32=r2, @ANYBLOB="a50165800800e6006401010008004600", @ANYRES32=r3, @ANYBLOB="04003a00fe2c4099a0c1ed2c8c442d1bcdce1bb8aad89b846bbad57f09cb9898aa09b5e2ae1b04f6cf75868f6e64102d9da5868724025741916aabcbd87d2a4cac15c9c26d5997c72680aad0c780b2616d1d203de8084620b8b8c27eb82362be83bc854b31563e35bdb937c2ad40f295c8da8627eb19fa8d774797f3e4ebc6bcd3853f9570890632c67eb45014619e0a83fe1913813824c534dd70e827a18cd9d08408002e00ac1e010105006c00000000004ed03ae12f8e0ad87f6a9c1444c90002adcac9a4af153ce83fe546b526eab65a167eaa0b375037da1f3ae3c527f5808f8e34298d5142e1543a034212dc1dfe0c55c52758eb1e25b10feb3b2988f3e99054f5fdd415e26dc733f54f432771c1eaf747253fef9b5d7b86ea31ee7212b0b10c2e823735b5bf70d6de0e1e2412bfc92f7339d6ba41b06c59b2e5c5988ff4e8841ec29e7cdf41c82b81741bdfe64b7272b986c05ba54b471181da1331a4c20a2ab206d5d8c6560f6c5a64fc64b691e1aa2e21251c56f331b257c86a617a5216f8f98962ad93ec1012432b040087800000006bb01bbaf315a5d6f67b158d075abd3cf909c60b1e3e532a9a3e77bbaaf95e19310c78b98ca42bd0550229cfcb82cd62a591a911c0866764878dca02ceffd80db2967aca73a811c91779d073ec64abe20396b66019f6522704a786fc52d27acd6a20987f62cd365f77195aeb8d5994b5664d12ce8052bf09e0ae61eae8af54ffa22f057832eee9c19ba1d1abe9e6fc209ceea7b4f5bcc8ec72a1d66426b4edcd0b8ad794fe21d173ebb3eef8b11205312fb5d5b1aa07cb97ad0fe3e42c4cb764520647f1c25159f35055fcf330f51828743791ba216be60664fc95f47f6753f0009580c5220129a0d3c1c9c10a140f0109314f2b34edfd66702e4246ff0874de9f1f59485daae6d8732bd8532f3e6d9ed1023d7920554bb440a1baf00a0410fd207e0c2c33ff90dfb0c0c9cdee433553531c3c5104a6939783019239611240340c7d8b71726175580573201febfd4ddc47d37f882591730c00e200010001000000000008001400", @ANYRES32=0xee00, @ANYBLOB="04001c801500c6002f6465762f76686f73742d76736f636b000000000800560000000000aca4197703d2ecd96050ffecea40f625fb9e2a213a05efc283abd285bfea395fe005332754be794e494e6d31b2edb76fd63f2ee2a208c8da806614f25621a67700"], 0x3d0}, 0x1, 0x0, 0x0, 0x40c0}, 0x40)
r4 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setsig(0x4203, r5, 0x3, &(0x7f0000000200)={0x1f, 0x2, 0x1})
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)

37.618114ms ago: executing program 9 (id=2557):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6)

0s ago: executing program 9 (id=2558):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_io_uring_setup(0x3748, &(0x7f0000000300)={0x0, 0x9b0, 0x40, 0x2, 0x38d}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000380))
syz_io_uring_setup(0xd3, &(0x7f00000003c0)={0x0, 0x4d69, 0x0, 0x3, 0x221}, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
syz_io_uring_submit(r2, r4, &(0x7f00000003c0)=@IORING_OP_READ_FIXED={0x4, 0x34, 0x2000, @fd=r0, 0xcbba, 0x80, 0x80000000, 0x12, 0x0, {0x1}})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x14, &(0x7f0000000780)={0x0, 0x30, 0xc4, {0xc4, 0x2, "ec7262baa0b39c820eebd6607b26972f35ac9949aceda41866c7ab40f9260dd58c831a4c7576a4df1b1d9acb55807ca22952a63beb1e4415e2bf4931c7fd9b45db16ac69e7f679116c706cae170d72ec1c398ce0057fb7928af0d95a00a26a78811b44802a3679d132955486dc1e8037850003339d3801ff602162c4b9295d21f8efd83d52f86d458432a303f0b70b2446397f1abe31915e8d1fc56294a175ab414473a1263209d8aca7b730c056c200f091dbd68a15f081671cf5d7dcfa6b62c93f"}}, &(0x7f0000000880)=ANY=[@ANYBLOB="fdc879fd426ce6221504"], &(0x7f00000006c0)=ANY=[@ANYBLOB="00220f0000009963e67b6584a17244986765cc3bdd"], &(0x7f0000000900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x9e5}}}}, &(0x7f0000000b00)={0x18, &(0x7f0000000980)={0x20, 0xd, 0x49, "9d00287f41b93ddf3274b43871fc23b3cdc1adf090f9e09f81c4d01602e2c7973b4949a923a8bd8db1ce8f2a12bcbfb0e8fd2ff30ec0a5c4256482bf6cd5e0f9921dc0f46f1d91d9c2"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)=ANY=[@ANYBLOB="200129000000bf8bf36396dae3fb64c5eff50a9adbd0a5ac8d4da5b83ce9fed08b00cd965a93eb6919128519e54a02187cea800e7a9dc254e4414d45f07e60ce512729d720c0ab505ce633189e7baa8259ee812c2fd4d2cd083520672f9f220c68f35ef8200ed8a305de0085e37380370616171d3e18d39144f6c6276c8fd8fe119ffd0549e314a0cac56aa953facb5626971169b49b20bb75d2d293dcb552fc2fe5ba8ea008cf39f9f6eafc46a5b6a8631149b5c142f16b4a32a91c9727266c6f655da9cc41616314de9237984f38af738e6df0fcf24f4719912c845f5e6b55"], &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x2}})
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x18, 0x0, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b)

0s ago: executing program 0 (id=2559):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00/dev.\x00\x00#\x00'/38], 0x2a) (async)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) (async)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r0, 0x400455c8, 0x2) (async, rerun: 64)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) (rerun: 64)

kernel console output (not intermixed with test programs):

  435.193467][T13544] udevd[13544]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  435.823086][ T6106] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  436.003708][T14240] tipc: Started in network mode
[  436.005817][T14240] tipc: Node identity cec1def9e033, cluster identity 4711
[  436.009307][T14240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.014276][ T6106] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  436.014284][T14240] syzkaller0: entered promiscuous mode
[  436.019030][T14240] syzkaller0: entered allmulticast mode
[  436.019350][ T6106] usb 10-1: config 0 has no interface number 0
[  436.023064][ T6106] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.027780][ T6106] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.032005][ T6106] usb 10-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18
[  436.038297][ T6106] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.041539][T14239] tipc: Resetting bearer <eth:syzkaller0>
[  436.043498][ T6106] usb 10-1: config 0 descriptor??
[  436.044142][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2255'.
[  436.068357][T14239] tipc: Disabling bearer <eth:syzkaller0>
[  436.713900][T14212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.716662][T14212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.857808][   T40] audit: type=1326 audit(1769523200.713:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.873120][   T40] audit: type=1326 audit(1769523200.713:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.879896][   T40] audit: type=1326 audit(1769523200.723:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.910872][   T40] audit: type=1326 audit(1769523200.743:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.921550][ T9647] libceph: connect (1)[c::]:6789 error -101
[  436.927700][ T9647] libceph: mon0 (1)[c::]:6789 connect error
[  436.931271][   T40] audit: type=1326 audit(1769523200.743:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.945568][   T40] audit: type=1326 audit(1769523200.743:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.964377][   T40] audit: type=1326 audit(1769523200.743:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.979654][   T40] audit: type=1326 audit(1769523200.743:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  436.993735][   T40] audit: type=1326 audit(1769523200.743:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  437.010401][   T40] audit: type=1326 audit(1769523200.743:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.3.2258" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000
[  437.012569][ T6106] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.1/0003:04D9:A055.0014/input/input32
[  437.141686][ T6106] holtek_kbd 0003:04D9:A055.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1
[  437.149584][ T9647] usb 10-1: USB disconnect, device number 5
[  437.193274][   T53] libceph: connect (1)[c::]:6789 error -101
[  437.195342][   T53] libceph: mon0 (1)[c::]:6789 connect error
[  437.234706][T14280] fido_id[14280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb10/report_descriptor': No such file or directory
[  437.300411][T14260] ceph: No mds server is up or the cluster is laggy
[  437.404372][T14289] FAULT_INJECTION: forcing a failure.
[  437.404372][T14289] name failslab, interval 1, probability 0, space 0, times 0
[  437.408791][T14289] CPU: 3 UID: 0 PID: 14289 Comm: syz.3.2261 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  437.408810][T14289] Tainted: [L]=SOFTLOCKUP
[  437.408814][T14289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  437.408820][T14289] Call Trace:
[  437.408825][T14289]  <TASK>
[  437.408830][T14289]  dump_stack_lvl+0x100/0x190
[  437.408848][T14289]  should_fail_ex.cold+0x5/0xa
[  437.408867][T14289]  should_failslab+0xc2/0x120
[  437.408883][T14289]  __kmalloc_cache_noprof+0x80/0x810
[  437.408895][T14289]  ? __tcf_proto_lookup_ops+0xcf/0x100
[  437.408909][T14289]  ? fl_init+0x45/0x2c0
[  437.408923][T14289]  ? fl_init+0x45/0x2c0
[  437.408934][T14289]  ? __raw_spin_lock_init+0x3a/0x110
[  437.408951][T14289]  ? __pfx_fl_classify+0x10/0x10
[  437.408964][T14289]  fl_init+0x45/0x2c0
[  437.408976][T14289]  tc_new_tfilter+0xff5/0x23b0
[  437.408992][T14289]  ? lockdep_hardirqs_on+0x78/0x100
[  437.409007][T14289]  ? __pfx_tc_new_tfilter+0x10/0x10
[  437.409018][T14289]  ? kmem_cache_free+0x143/0x720
[  437.409030][T14289]  ? kfree_skbmem+0x19a/0x210
[  437.409045][T14289]  ? __lock_acquire+0x4a5/0x2630
[  437.409066][T14289]  ? find_held_lock+0x2b/0x80
[  437.409078][T14289]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  437.409096][T14289]  ? __pfx_tc_new_tfilter+0x10/0x10
[  437.409107][T14289]  rtnetlink_rcv_msg+0x95e/0xe90
[  437.409130][T14289]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.409152][T14289]  ? ref_tracker_free+0x37e/0x6c0
[  437.409185][T14289]  netlink_rcv_skb+0x159/0x420
[  437.409203][T14289]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  437.409227][T14289]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  437.409250][T14289]  ? netlink_deliver_tap+0x1ae/0xcc0
[  437.409269][T14289]  netlink_unicast+0x5aa/0x870
[  437.409289][T14289]  ? __pfx_netlink_unicast+0x10/0x10
[  437.409306][T14289]  ? __pfx___might_resched+0x10/0x10
[  437.409328][T14289]  netlink_sendmsg+0x8b0/0xda0
[  437.409348][T14289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  437.409368][T14289]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  437.409384][T14289]  ____sys_sendmsg+0xa54/0xc30
[  437.409398][T14289]  ? __pfx_____sys_sendmsg+0x10/0x10
[  437.409417][T14289]  ___sys_sendmsg+0x190/0x1e0
[  437.409431][T14289]  ? __pfx____sys_sendmsg+0x10/0x10
[  437.409461][T14289]  __sys_sendmsg+0x170/0x220
[  437.409478][T14289]  ? __pfx___sys_sendmsg+0x10/0x10
[  437.409500][T14289]  ? __pfx_ksys_write+0x10/0x10
[  437.409516][T14289]  __do_fast_syscall_32+0xde/0x660
[  437.409532][T14289]  do_fast_syscall_32+0x32/0x70
[  437.409546][T14289]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  437.409561][T14289] RIP: 0023:0xf747d579
[  437.409570][T14289] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  437.409581][T14289] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  437.409593][T14289] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040
[  437.409600][T14289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  437.409606][T14289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  437.409613][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  437.409619][T14289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  437.409633][T14289]  </TASK>
[  440.122353][ T9647] libceph: connect (1)[c::]:6789 error -101
[  440.126559][ T9647] libceph: mon0 (1)[c::]:6789 connect error
[  440.351327][T14352] ceph: No mds server is up or the cluster is laggy
[  440.456367][T14366] FAULT_INJECTION: forcing a failure.
[  440.456367][T14366] name failslab, interval 1, probability 0, space 0, times 0
[  440.461152][T14366] CPU: 0 UID: 0 PID: 14366 Comm: syz.2.2278 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.461182][T14366] Tainted: [L]=SOFTLOCKUP
[  440.461188][T14366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  440.461199][T14366] Call Trace:
[  440.461206][T14366]  <TASK>
[  440.461213][T14366]  dump_stack_lvl+0x100/0x190
[  440.461239][T14366]  should_fail_ex.cold+0x5/0xa
[  440.461269][T14366]  should_failslab+0xc2/0x120
[  440.461294][T14366]  ? tomoyo_encode2+0xfb/0x3c0
[  440.461310][T14366]  __kmalloc_noprof+0xf6/0x9c0
[  440.461336][T14366]  ? tomoyo_encode2+0xfb/0x3c0
[  440.461351][T14366]  tomoyo_encode2+0xfb/0x3c0
[  440.461372][T14366]  tomoyo_encode+0x29/0x50
[  440.461388][T14366]  tomoyo_realpath_from_path+0x18c/0x690
[  440.461412][T14366]  tomoyo_path_number_perm+0x23c/0x580
[  440.461436][T14366]  ? tomoyo_path_number_perm+0x22e/0x580
[  440.461464][T14366]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  440.461515][T14366]  ? find_held_lock+0x2b/0x80
[  440.461532][T14366]  ? hook_file_ioctl_common+0x146/0x410
[  440.461557][T14366]  ? __fget_files+0x215/0x3d0
[  440.461582][T14366]  ? __fget_files+0x21f/0x3d0
[  440.461605][T14366]  security_file_ioctl_compat+0xd3/0x230
[  440.461632][T14366]  __ia32_compat_sys_ioctl+0xc2/0x360
[  440.461663][T14366]  __do_fast_syscall_32+0xde/0x660
[  440.461689][T14366]  do_fast_syscall_32+0x32/0x70
[  440.461711][T14366]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  440.461733][T14366] RIP: 0023:0xf7f73579
[  440.461747][T14366] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  440.461764][T14366] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  440.461781][T14366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000001269
[  440.461793][T14366] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  440.461803][T14366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  440.461813][T14366] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  440.461823][T14366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  440.461847][T14366]  </TASK>
[  440.461866][T14366] ERROR: Out of memory at tomoyo_realpath_from_path.
[  441.815841][   T29] hid-generic 0005:0002:5508.0015: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  442.519924][T14390] syzkaller0: entered promiscuous mode
[  442.522312][T14390] syzkaller0: entered allmulticast mode
[  442.863201][   T40] kauditd_printk_skb: 254 callbacks suppressed
[  442.863218][   T40] audit: type=1326 audit(1769523206.703:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.873411][   T29] libceph: connect (1)[c::]:6789 error -101
[  442.874317][   T40] audit: type=1326 audit(1769523206.703:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.877718][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  442.883187][   T40] audit: type=1326 audit(1769523206.703:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.893815][   T40] audit: type=1326 audit(1769523206.703:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.903833][   T40] audit: type=1326 audit(1769523206.703:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.912275][   T40] audit: type=1326 audit(1769523206.703:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.920919][   T40] audit: type=1326 audit(1769523206.703:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.929727][   T40] audit: type=1326 audit(1769523206.703:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.929767][   T40] audit: type=1326 audit(1769523206.703:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  442.929803][   T40] audit: type=1326 audit(1769523206.703:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.2.2287" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73579 code=0x7ffc0000
[  443.153535][   T29] libceph: connect (1)[c::]:6789 error -101
[  443.156508][   T29] libceph: mon0 (1)[c::]:6789 connect error
[  443.487254][T14403] ceph: No mds server is up or the cluster is laggy
[  443.920778][T10716] libceph: connect (1)[c::]:6789 error -101
[  443.924478][T10716] libceph: mon0 (1)[c::]:6789 connect error
[  444.183250][T10716] libceph: connect (1)[c::]:6789 error -101
[  444.185467][T10716] libceph: mon0 (1)[c::]:6789 connect error
[  444.471296][T14411] ceph: No mds server is up or the cluster is laggy
[  444.585058][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  444.605280][ T1141] bridge_slave_1: left allmulticast mode
[  444.607640][ T1141] bridge_slave_1: left promiscuous mode
[  444.609955][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[  444.617203][ T1141] bridge_slave_0: left allmulticast mode
[  444.619172][ T1141] bridge_slave_0: left promiscuous mode
[  444.621462][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.670362][ T1141] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  444.673097][ T1141] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1e:79:6d:55:37:23 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  444.907556][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  444.911165][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  444.915695][ T1141] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  444.918866][ T1141] bond0 (unregistering): Released all slaves
[  445.002455][ T1141] bond1 (unregistering): (slave veth3): Releasing active interface
[  445.005956][ T1141] bond1 (unregistering): Released all slaves
[  445.093995][ T1141] bond2 (unregistering): (slave veth5): Releasing active interface
[  445.097001][ T1141] bond2 (unregistering): Released all slaves
[  445.173269][ T1141] bond3 (unregistering): Released all slaves
[  445.255617][ T1141] bond4 (unregistering): Released all slaves
[  445.340153][ T1141] bond5 (unregistering): Released all slaves
[  445.420009][ T1141] bond6 (unregistering): (slave veth17): Releasing active interface
[  445.423139][ T1141] bond6 (unregistering): Released all slaves
[  445.496978][ T1141] bond7 (unregistering): (slave veth19): Releasing active interface
[  445.499905][ T1141] bond7 (unregistering): Released all slaves
[  445.572279][ T1141] bond8 (unregistering): (slave veth21): Releasing active interface
[  445.575311][ T1141] bond8 (unregistering): Released all slaves
[  445.660700][ T1141] bond9 (unregistering): Released all slaves
[  445.770872][ T1141] bond10 (unregistering): Released all slaves
[  445.853669][ T1141] bond11 (unregistering): Released all slaves
[  445.966169][ T1141] bond12 (unregistering): (slave veth29): Releasing active interface
[  445.970866][ T1141] bond12 (unregistering): Released all slaves
[  446.062448][ T1141] bond13 (unregistering): (slave veth31): Releasing active interface
[  446.065570][ T1141] bond13 (unregistering): Released all slaves
[  446.153409][ T1141] bond14 (unregistering): Released all slaves
[  446.257972][ T1141] bond15 (unregistering): (slave veth39): Releasing backup interface
[  446.262401][ T1141] bond15 (unregistering): Released all slaves
[  446.365023][ T1141] bond16 (unregistering): (slave veth41): Releasing backup interface
[  446.369913][ T1141] bond16 (unregistering): Released all slaves
[  446.459806][ T1141] bond17 (unregistering): (slave veth43): Releasing backup interface
[  446.469747][ T1141] bond17 (unregistering): Released all slaves
[  446.676921][ T1141] tipc: Left network mode
[  446.979898][ T1141] hsr_slave_0: left promiscuous mode
[  446.982039][ T1141] hsr_slave_1: left promiscuous mode
[  447.742896][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  447.777776][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  448.034733][ T1141] team0 (unregistering): Port device dummy0 removed
[  448.443194][ T1141] IPVS: stop unused estimator thread 0...
[  452.921308][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  452.934534][ T5947] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  452.939476][ T5947] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  452.944852][ T5947] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  452.948152][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  453.105266][T14535] chnl_net:caif_netlink_parms(): no params data found
[  453.168842][T14535] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.171907][T14535] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.175393][T14535] bridge_slave_0: entered allmulticast mode
[  453.178305][T14535] bridge_slave_0: entered promiscuous mode
[  453.188773][T14535] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.191827][T14535] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.195117][T14535] bridge_slave_1: entered allmulticast mode
[  453.198711][T14535] bridge_slave_1: entered promiscuous mode
[  453.215223][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.220122][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  453.234215][T14535] team0: Port device team_slave_0 added
[  453.237301][T14535] team0: Port device team_slave_1 added
[  453.251205][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.253501][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.261516][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.292910][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.297357][ T1141] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.307913][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  453.310284][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.320828][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  453.349845][T14535] hsr_slave_0: entered promiscuous mode
[  453.353416][T14535] hsr_slave_1: entered promiscuous mode
[  453.356349][T14535] debugfs: 'hsr0' already exists in 'hsr'
[  453.358660][T14535] Cannot create hsr debugfs directory
[  453.391856][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.396218][ T1141] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.511797][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.516394][ T1141] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.647999][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.651293][ T1141] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.821195][ T1141] bridge_slave_1: left allmulticast mode
[  453.824867][ T1141] bridge_slave_1: left promiscuous mode
[  453.827200][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.830878][ T1141] bridge_slave_0: left allmulticast mode
[  453.833798][ T1141] bridge_slave_0: left promiscuous mode
[  453.836142][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.162000][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  454.168352][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.173591][ T1141] bond0 (unregistering): Released all slaves
[  454.464125][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  454.469368][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  454.475438][ T5947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  454.479552][ T5947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  454.482744][ T5947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  454.588899][ T1141] hsr_slave_0: left promiscuous mode
[  454.591729][ T1141] hsr_slave_1: left promiscuous mode
[  454.594463][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.597235][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.601456][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.604187][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.613419][ T1141] veth1_macvtap: left promiscuous mode
[  454.615248][ T1141] veth0_macvtap: left promiscuous mode
[  454.618288][ T1141] veth1_vlan: left promiscuous mode
[  454.620106][ T1141] veth0_vlan: left promiscuous mode
[  454.984008][ T5945] Bluetooth: hci0: command tx timeout
[  454.990662][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  455.029051][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  455.385131][T14577] chnl_net:caif_netlink_parms(): no params data found
[  455.460624][T14577] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.464807][T14577] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.467691][T14577] bridge_slave_0: entered allmulticast mode
[  455.471237][T14577] bridge_slave_0: entered promiscuous mode
[  455.475413][T14577] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.478296][T14577] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.481133][T14577] bridge_slave_1: entered allmulticast mode
[  455.484291][T14577] bridge_slave_1: entered promiscuous mode
[  455.506874][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.512314][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.533954][T14577] team0: Port device team_slave_0 added
[  455.537053][T14577] team0: Port device team_slave_1 added
[  455.549156][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.551227][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.559288][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.563788][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.565948][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.574130][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.601434][T14577] hsr_slave_0: entered promiscuous mode
[  455.604144][T14577] hsr_slave_1: entered promiscuous mode
[  455.890473][ T1141] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.975476][ T1141] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.062845][ T1141] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.145615][ T1141] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  456.205217][T14535] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  456.264185][T14535] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  456.268469][T14535] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  456.273346][T14535] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  456.386033][T14535] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.426452][ T1141] bridge_slave_1: left allmulticast mode
[  456.428488][ T1141] bridge_slave_1: left promiscuous mode
[  456.430976][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.433628][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  456.438396][ T1141] bridge_slave_0: left allmulticast mode
[  456.439784][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  456.440262][ T1141] bridge_slave_0: left promiscuous mode
[  456.448238][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  456.448359][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.455318][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  456.460421][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  456.506707][ T5945] Bluetooth: hci2: command tx timeout
[  456.739518][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  456.744475][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  456.748111][ T1141] bond0 (unregistering): Released all slaves
[  456.796139][T14535] 8021q: adding VLAN 0 to HW filter on device team0
[  456.815291][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.817601][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  456.841084][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  456.843505][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.063213][T14630] chnl_net:caif_netlink_parms(): no params data found
[  457.075119][ T5945] Bluetooth: hci0: command tx timeout
[  457.121455][T14630] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.124677][T14630] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.127051][T14630] bridge_slave_0: entered allmulticast mode
[  457.129842][T14630] bridge_slave_0: entered promiscuous mode
[  457.141274][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.150135][T14630] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.152472][T14630] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.154978][T14630] bridge_slave_1: entered allmulticast mode
[  457.157584][T14630] bridge_slave_1: entered promiscuous mode
[  457.166102][ T1141] hsr_slave_0: left promiscuous mode
[  457.172554][ T1141] hsr_slave_1: left promiscuous mode
[  457.175401][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  457.177785][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  457.180682][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  457.183103][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  457.192144][ T1141] veth1_macvtap: left promiscuous mode
[  457.195018][ T1141] veth0_macvtap: left promiscuous mode
[  457.196856][ T1141] veth1_vlan: left promiscuous mode
[  457.198584][ T1141] veth0_vlan: left promiscuous mode
[  457.561903][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  457.592487][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  457.885354][T14630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  457.890014][T14630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  457.907215][T14630] team0: Port device team_slave_0 added
[  457.910330][T14630] team0: Port device team_slave_1 added
[  457.924562][T14630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  457.926780][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.934845][T14630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  457.939120][T14630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  457.941327][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  457.949782][T14630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  457.979440][T14630] hsr_slave_0: entered promiscuous mode
[  457.981710][T14630] hsr_slave_1: entered promiscuous mode
[  457.984021][T14630] debugfs: 'hsr0' already exists in 'hsr'
[  457.985833][T14630] Cannot create hsr debugfs directory
[  458.069119][T14535] veth0_vlan: entered promiscuous mode
[  458.074075][T14535] veth1_vlan: entered promiscuous mode
[  458.087986][T14535] veth0_macvtap: entered promiscuous mode
[  458.091887][T14535] veth1_macvtap: entered promiscuous mode
[  458.101103][T14535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.105284][T14535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.117709][ T9645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.120524][ T9645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.126131][ T9645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.131256][ T9645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.170116][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.179055][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.182365][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.185173][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.505529][ T5945] Bluetooth: hci3: command tx timeout
[  458.583145][ T5945] Bluetooth: hci2: command tx timeout
[  458.590735][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.595340][T10716] hid-generic 0005:0002:5508.0016: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  458.700538][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.700963][T14695] fido_id[14695]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci3/hci3:200/report_descriptor': No such file or directory
[  458.820588][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.951686][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.100183][ T1141] bridge_slave_1: left allmulticast mode
[  459.102057][ T1141] bridge_slave_1: left promiscuous mode
[  459.106179][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.111415][ T1141] bridge_slave_0: left allmulticast mode
[  459.113725][ T1141] bridge_slave_0: left promiscuous mode
[  459.115561][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.153264][ T5945] Bluetooth: hci0: command tx timeout
[  459.476414][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.480579][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.484506][ T1141] bond0 (unregistering): Released all slaves
[  459.555001][T14630] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  459.581057][T14630] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  459.592866][T14630] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  459.606966][T14630] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  459.634894][T14577] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  459.659540][T14577] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  459.662656][ T1141] tipc: Left network mode
[  459.684122][T14577] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  459.689006][T14577] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  459.752510][T14630] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.771330][T14630] 8021q: adding VLAN 0 to HW filter on device team0
[  459.778504][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  459.780860][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  459.797039][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.799679][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  459.852143][T14577] 8021q: adding VLAN 0 to HW filter on device bond0
[  459.880649][T14577] 8021q: adding VLAN 0 to HW filter on device team0
[  459.899914][ T1141] hsr_slave_0: left promiscuous mode
[  459.902210][ T1141] hsr_slave_1: left promiscuous mode
[  459.906265][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  459.908714][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  459.911568][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  459.914818][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  459.928166][ T1141] veth1_macvtap: left promiscuous mode
[  459.930065][ T1141] veth0_macvtap: left promiscuous mode
[  459.931967][ T1141] veth1_vlan: left promiscuous mode
[  459.934869][ T1141] veth0_vlan: left promiscuous mode
[  460.266244][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  460.293317][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  460.365551][T11413] usb 12-1: new high-speed USB device number 13 using dummy_hcd
[  460.524393][T11413] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  460.528749][T11413] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  460.532708][T11413] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  460.536834][T11413] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.544210][T14748] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  460.550334][T11413] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  460.575786][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.578693][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  460.583106][ T5945] Bluetooth: hci3: command tx timeout
[  460.601447][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  460.603818][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  460.636432][T14577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  460.669862][T14630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.673285][ T5945] Bluetooth: hci2: command tx timeout
[  460.786590][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  460.820261][T14630] veth0_vlan: entered promiscuous mode
[  460.828429][T14630] veth1_vlan: entered promiscuous mode
[  460.866904][T14630] veth0_macvtap: entered promiscuous mode
[  460.873715][T14630] veth1_macvtap: entered promiscuous mode
[  460.876253][T12026] usb 12-1: USB disconnect, device number 13
[  460.887675][T14630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  460.898197][T14630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.910131][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.923452][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.926474][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.929788][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  460.965851][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.968390][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  460.985673][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  460.993010][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.007271][T14577] veth0_vlan: entered promiscuous mode
[  461.016798][T14577] veth1_vlan: entered promiscuous mode
[  461.042569][T14577] veth0_macvtap: entered promiscuous mode
[  461.051470][T14577] veth1_macvtap: entered promiscuous mode
[  461.064401][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.070723][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.084610][ T1141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.093197][   T46] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.096021][   T46] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.126270][   T46] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.176861][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.179361][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.193983][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.196490][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.234752][ T5945] Bluetooth: hci0: command tx timeout
[  461.879653][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  461.896941][ T5947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  461.911006][ T5947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  461.921034][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  461.938195][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  462.271087][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.455504][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.496747][T14825] chnl_net:caif_netlink_parms(): no params data found
[  462.606367][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.673067][ T5945] Bluetooth: hci3: command tx timeout
[  462.686713][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2305'.
[  462.695554][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.717439][T14825] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.720265][T14825] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.722730][T14825] bridge_slave_0: entered allmulticast mode
[  462.733755][T14825] bridge_slave_0: entered promiscuous mode
[  462.741627][T14825] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.743157][ T5945] Bluetooth: hci2: command tx timeout
[  462.755775][T14825] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.765894][T14825] bridge_slave_1: entered allmulticast mode
[  462.779276][T14825] bridge_slave_1: entered promiscuous mode
[  462.834984][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.848017][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.912246][T14825] team0: Port device team_slave_0 added
[  462.921208][T14825] team0: Port device team_slave_1 added
[  462.959098][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  462.963937][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  462.982127][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.004866][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.007704][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.028211][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.156003][T14825] hsr_slave_0: entered promiscuous mode
[  463.160576][T14825] hsr_slave_1: entered promiscuous mode
[  463.165026][T14825] debugfs: 'hsr0' already exists in 'hsr'
[  463.169094][T14825] Cannot create hsr debugfs directory
[  463.251346][ T1146] bridge_slave_1: left allmulticast mode
[  463.257832][ T1146] bridge_slave_1: left promiscuous mode
[  463.271738][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  463.300370][ T1146] bridge_slave_0: left allmulticast mode
[  463.302552][ T1146] bridge_slave_0: left promiscuous mode
[  463.307882][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.818088][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  463.830169][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  463.846196][ T1146] bond0 (unregistering): Released all slaves
[  463.917953][T10677] usb 12-1: new high-speed USB device number 14 using dummy_hcd
[  463.926872][T14876] xt_bpf: check failed: parse error
[  464.023169][ T5945] Bluetooth: hci1: command tx timeout
[  464.091436][T10677] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  464.095348][T10677] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  464.098864][T10677] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  464.101830][T10677] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.266469][T14865] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  464.272230][T10677] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  464.559917][ T7127] hid-generic 0005:0002:5508.0017: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  464.663579][   T61] usb 12-1: USB disconnect, device number 14
[  464.720016][T14887] fido_id[14887]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  464.753274][ T5945] Bluetooth: hci3: command tx timeout
[  464.766714][ T1146] hsr_slave_0: left promiscuous mode
[  464.767107][ T1146] hsr_slave_1: left promiscuous mode
[  464.767384][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  464.767395][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.767834][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.767846][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.782319][ T1146] veth1_macvtap: left promiscuous mode
[  464.782363][ T1146] veth0_macvtap: left promiscuous mode
[  464.782435][ T1146] veth1_vlan: left promiscuous mode
[  464.782484][ T1146] veth0_vlan: left promiscuous mode
[  465.903819][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  465.984421][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  466.103951][ T5945] Bluetooth: hci1: command tx timeout
[  467.033513][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2316'.
[  467.315414][T14825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  467.330205][T14825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  467.471680][T14825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  467.489162][T14825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  467.986225][T14825] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.997232][T14825] 8021q: adding VLAN 0 to HW filter on device team0
[  468.004413][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.006654][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.012792][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.015108][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.032405][T14910] Set syz1 is full, maxelem 65536 reached
[  468.198261][ T5945] Bluetooth: hci1: command tx timeout
[  468.251129][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.303286][T14825] veth0_vlan: entered promiscuous mode
[  468.320320][T14825] veth1_vlan: entered promiscuous mode
[  468.418320][T14958] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  468.420489][T14958] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  468.429343][T14825] veth0_macvtap: entered promiscuous mode
[  468.433487][T14958] vhci_hcd vhci_hcd.0: Device attached
[  468.446862][T14825] veth1_macvtap: entered promiscuous mode
[  468.480634][T14825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.494534][T14825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.507640][ T9645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.510579][ T9645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.518591][ T9645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.521385][ T9645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.677874][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.680832][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.701025][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.712082][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.713763][T11413] usb 54-1: SetAddress Request (6) to port 0
[  468.716642][T11413] usb 54-1: new SuperSpeed USB device number 6 using vhci_hcd
[  468.912347][T14989] FAULT_INJECTION: forcing a failure.
[  468.912347][T14989] name failslab, interval 1, probability 0, space 0, times 0
[  468.924676][T14991] netlink: 'syz.1.2303': attribute type 4 has an invalid length.
[  468.929905][T14989] CPU: 1 UID: 0 PID: 14989 Comm: syz.4.2319 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.929925][T14989] Tainted: [L]=SOFTLOCKUP
[  468.929929][T14989] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  468.929936][T14989] Call Trace:
[  468.929940][T14989]  <TASK>
[  468.929946][T14989]  dump_stack_lvl+0x100/0x190
[  468.929964][T14989]  should_fail_ex.cold+0x5/0xa
[  468.929983][T14989]  should_failslab+0xc2/0x120
[  468.930000][T14989]  __kmalloc_cache_noprof+0x80/0x810
[  468.930012][T14989]  ? __pfx___nla_validate_parse+0x10/0x10
[  468.930025][T14989]  ? hash_ipmac_create+0x37d/0x1280
[  468.930042][T14989]  ? hash_ipmac_create+0x37d/0x1280
[  468.930056][T14989]  hash_ipmac_create+0x37d/0x1280
[  468.930072][T14989]  ? __pfx_hash_ipmac_create+0x10/0x10
[  468.930087][T14989]  ip_set_create+0x6b8/0x14f0
[  468.930104][T14989]  ? __mutex_lock+0x8ef/0x1b90
[  468.930118][T14989]  ? __pfx_ip_set_create+0x10/0x10
[  468.930142][T14989]  ? find_held_lock+0x2b/0x80
[  468.930158][T14989]  nfnetlink_rcv_msg+0x9f4/0x1200
[  468.930177][T14989]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  468.930193][T14989]  ? kfree_skbmem+0x19a/0x210
[  468.930223][T14989]  netlink_rcv_skb+0x159/0x420
[  468.930241][T14989]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  468.930256][T14989]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  468.930281][T14989]  ? ns_capable+0xd2/0xf0
[  468.930295][T14989]  nfnetlink_rcv+0x1b3/0x440
[  468.930308][T14989]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  468.930326][T14989]  netlink_unicast+0x5aa/0x870
[  468.930346][T14989]  ? __pfx_netlink_unicast+0x10/0x10
[  468.930365][T14989]  ? netlink_sendmsg+0x818/0xda0
[  468.930385][T14989]  netlink_sendmsg+0x8b0/0xda0
[  468.930405][T14989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.930425][T14989]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  468.930442][T14989]  ____sys_sendmsg+0xa54/0xc30
[  468.930456][T14989]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.930476][T14989]  ___sys_sendmsg+0x190/0x1e0
[  468.930490][T14989]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.930521][T14989]  __sys_sendmsg+0x170/0x220
[  468.930543][T14989]  ? __pfx___sys_sendmsg+0x10/0x10
[  468.930569][T14989]  __do_fast_syscall_32+0xde/0x660
[  468.930585][T14989]  do_fast_syscall_32+0x32/0x70
[  468.930599][T14989]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  468.930613][T14989] RIP: 0023:0xf740d579
[  468.930622][T14989] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  468.930634][T14989] RSP: 002b:00000000f53f450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  468.930645][T14989] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040
[  468.930652][T14989] RDX: 0000000020004000 RSI: 0000000000000000 RDI: 0000000000000000
[  468.930658][T14989] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  468.930665][T14989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  468.930671][T14989] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  468.930686][T14989]  </TASK>
[  469.053398][T14961] vhci_hcd: connection reset by peer
[  469.057380][ T1152] vhci_hcd vhci_hcd.8: stop threads
[  469.062543][ T1152] vhci_hcd vhci_hcd.8: release socket
[  469.068499][ T1152] vhci_hcd vhci_hcd.8: disconnect device
[  469.741056][T15012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'.
[  469.847855][T15018] FAULT_INJECTION: forcing a failure.
[  469.847855][T15018] name failslab, interval 1, probability 0, space 0, times 0
[  469.861864][T15018] CPU: 0 UID: 0 PID: 15018 Comm: syz.4.2325 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  469.861895][T15018] Tainted: [L]=SOFTLOCKUP
[  469.861902][T15018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  469.861912][T15018] Call Trace:
[  469.861919][T15018]  <TASK>
[  469.861927][T15018]  dump_stack_lvl+0x100/0x190
[  469.861953][T15018]  should_fail_ex.cold+0x5/0xa
[  469.861978][T15018]  ? trace_fib_table_lookup+0x7a/0x1f0
[  469.862004][T15018]  should_failslab+0xc2/0x120
[  469.862028][T15018]  kmem_cache_alloc_noprof+0x83/0x780
[  469.862052][T15018]  ? dst_alloc+0x99/0x1a0
[  469.862078][T15018]  ? dst_alloc+0x99/0x1a0
[  469.862098][T15018]  dst_alloc+0x99/0x1a0
[  469.862123][T15018]  rt_dst_alloc+0x35/0x3a0
[  469.862141][T15018]  ip_route_output_key_hash_rcu+0x87a/0x2870
[  469.862171][T15018]  ip_route_output_key_hash+0x118/0x2b0
[  469.862194][T15018]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  469.862215][T15018]  ? __lock_acquire+0x4a5/0x2630
[  469.862242][T15018]  ? __lock_acquire+0x4a5/0x2630
[  469.862270][T15018]  tcp_v4_connect+0x86b/0x1bf0
[  469.862297][T15018]  ? __pfx_tcp_v4_connect+0x10/0x10
[  469.862319][T15018]  ? __local_bh_enable_ip+0x9e/0x120
[  469.862343][T15018]  mptcp_connect+0x4b5/0xad0
[  469.862374][T15018]  __inet_stream_connect+0x208/0xfa0
[  469.862401][T15018]  ? __pfx___inet_stream_connect+0x10/0x10
[  469.862420][T15018]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  469.862450][T15018]  ? __pfx_inet_stream_connect+0x10/0x10
[  469.862470][T15018]  ? __local_bh_enable_ip+0x9e/0x120
[  469.862493][T15018]  ? __pfx_inet_stream_connect+0x10/0x10
[  469.862517][T15018]  inet_stream_connect+0x57/0xa0
[  469.862538][T15018]  __sys_connect_file+0x141/0x1a0
[  469.862564][T15018]  __sys_connect+0x141/0x170
[  469.862586][T15018]  ? __pfx___sys_connect+0x10/0x10
[  469.862620][T15018]  ? ksys_write+0x1ac/0x250
[  469.862640][T15018]  ? __pfx_ksys_write+0x10/0x10
[  469.862663][T15018]  __ia32_sys_connect+0x71/0xb0
[  469.862684][T15018]  ? lockdep_hardirqs_on+0x78/0x100
[  469.862704][T15018]  __do_fast_syscall_32+0xde/0x660
[  469.862729][T15018]  do_fast_syscall_32+0x32/0x70
[  469.862750][T15018]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  469.862771][T15018] RIP: 0023:0xf740d579
[  469.862786][T15018] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  469.862803][T15018] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 000000000000016a
[  469.862822][T15018] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000
[  469.862833][T15018] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  469.862843][T15018] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  469.862853][T15018] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  469.862863][T15018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  469.862888][T15018]  </TASK>
[  470.263678][ T5945] Bluetooth: hci1: command tx timeout
[  471.451638][T15087] FAULT_INJECTION: forcing a failure.
[  471.451638][T15087] name failslab, interval 1, probability 0, space 0, times 0
[  471.456105][T15087] CPU: 1 UID: 0 PID: 15087 Comm: syz.8.2337 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.456138][T15087] Tainted: [L]=SOFTLOCKUP
[  471.456142][T15087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  471.456149][T15087] Call Trace:
[  471.456154][T15087]  <TASK>
[  471.456158][T15087]  dump_stack_lvl+0x100/0x190
[  471.456175][T15087]  should_fail_ex.cold+0x5/0xa
[  471.456194][T15087]  should_failslab+0xc2/0x120
[  471.456211][T15087]  __kmalloc_cache_noprof+0x80/0x810
[  471.456223][T15087]  ? nf_tables_newtable+0xcff/0x19f0
[  471.456237][T15087]  ? nf_tables_newtable+0xcff/0x19f0
[  471.456249][T15087]  nf_tables_newtable+0xcff/0x19f0
[  471.456264][T15087]  ? __pfx_nf_tables_newtable+0x10/0x10
[  471.456279][T15087]  ? __nla_parse+0x40/0x60
[  471.456294][T15087]  nfnetlink_rcv_batch+0x1418/0x2880
[  471.456315][T15087]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  471.456329][T15087]  ? find_held_lock+0x2b/0x80
[  471.456342][T15087]  ? __local_bh_enable_ip+0x9e/0x120
[  471.456356][T15087]  ? lockdep_hardirqs_on+0x78/0x100
[  471.456369][T15087]  ? __dev_queue_xmit+0x7dc/0x46f0
[  471.456402][T15087]  ? __nla_parse+0x40/0x60
[  471.456416][T15087]  nfnetlink_rcv+0x3bd/0x440
[  471.456429][T15087]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  471.456446][T15087]  netlink_unicast+0x5aa/0x870
[  471.456466][T15087]  ? __pfx_netlink_unicast+0x10/0x10
[  471.456491][T15087]  netlink_sendmsg+0x8b0/0xda0
[  471.456511][T15087]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.456537][T15087]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  471.456558][T15087]  ____sys_sendmsg+0xa54/0xc30
[  471.456575][T15087]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.456605][T15087]  ___sys_sendmsg+0x190/0x1e0
[  471.456627][T15087]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.456676][T15087]  __sys_sendmsg+0x170/0x220
[  471.456704][T15087]  ? __pfx___sys_sendmsg+0x10/0x10
[  471.456746][T15087]  ? __pfx_ksys_write+0x10/0x10
[  471.456771][T15087]  __do_fast_syscall_32+0xde/0x660
[  471.456789][T15087]  do_fast_syscall_32+0x32/0x70
[  471.456803][T15087]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  471.456817][T15087] RIP: 0023:0xf7fb3579
[  471.456827][T15087] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  471.456838][T15087] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  471.456849][T15087] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  471.456856][T15087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  471.456862][T15087] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  471.456868][T15087] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  471.456875][T15087] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  471.456889][T15087]  </TASK>
[  471.903133][ T5937] usb 13-1: new high-speed USB device number 5 using dummy_hcd
[  472.053036][ T5937] usb 13-1: Using ep0 maxpacket: 32
[  472.056788][ T5937] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.061320][ T5937] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.065168][ T5937] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  472.069970][ T5937] usb 13-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  472.073762][ T5937] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.078846][ T5937] usb 13-1: config 0 descriptor??
[  472.215541][   T40] kauditd_printk_skb: 803 callbacks suppressed
[  472.215710][   T40] audit: type=1326 audit(1769523236.073:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15118 comm="syz.7.2343" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73ad579 code=0x0
[  472.577105][T15097] input: syz0 as /devices/virtual/input/input39
[  472.607533][ T5937] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5011.0018/input/input40
[  472.688959][ T5937] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:0458:5011.0018/input/input41
[  472.709056][ T5937] kye 0003:0458:5011.0018: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0
[  473.037713][T15097] netlink: 'syz.8.2339': attribute type 1 has an invalid length.
[  473.090853][ T1458] usb 13-1: USB disconnect, device number 5
[  473.789586][T11413] usb 54-1: device descriptor read/8, error -110
[  473.914626][ T1458] hid-generic 0005:0002:5508.0019: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  473.968432][T15197] fido_id[15197]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  474.241947][T15202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  475.142710][T11413] usb usb54-port1: attempt power cycle
[  475.353705][T15239] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  475.356561][T15239] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  475.360705][T15239] vhci_hcd vhci_hcd.0: Device attached
[  475.384090][T15242] vhci_hcd: connection closed
[  475.384299][ T1141] vhci_hcd vhci_hcd.8: stop threads
[  475.387663][ T1141] vhci_hcd vhci_hcd.8: release socket
[  475.393802][ T1141] vhci_hcd vhci_hcd.8: disconnect device
[  475.474884][ T5945] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  475.477795][ T5945] Bluetooth: hci2: Injecting HCI hardware error event
[  475.481483][ T5945] Bluetooth: hci2: hardware error 0x00
[  476.402532][T15254] syz.4.2356 (15254) used greatest stack depth: 18136 bytes left
[  476.854122][T15271] ubi31: attaching mtd0
[  476.858237][T15271] ubi31: scanning is finished
[  476.860223][T15271] ubi31: empty MTD device detected
[  476.923986][T15271] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  476.926649][T15271] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  476.929127][T15271] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  476.931374][T15271] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  476.943057][T15271] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  476.945463][T15271] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  476.948245][T15271] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2109469715
[  476.951585][T15271] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  476.963484][T15272] ubi31: background thread "ubi_bgt31d" started, PID 15272
[  477.135314][T15274] FAULT_INJECTION: forcing a failure.
[  477.135314][T15274] name failslab, interval 1, probability 0, space 0, times 0
[  477.139716][T15274] CPU: 2 UID: 0 PID: 15274 Comm: syz.8.2363 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.139744][T15274] Tainted: [L]=SOFTLOCKUP
[  477.139750][T15274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  477.139759][T15274] Call Trace:
[  477.139766][T15274]  <TASK>
[  477.139774][T15274]  dump_stack_lvl+0x100/0x190
[  477.139799][T15274]  should_fail_ex.cold+0x5/0xa
[  477.139828][T15274]  should_failslab+0xc2/0x120
[  477.139853][T15274]  __kmalloc_node_track_caller_noprof+0xf9/0x9d0
[  477.139878][T15274]  ? mptcp_pm_nl_add_addr_doit+0x1e6/0xc80
[  477.139903][T15274]  ? kmemdup_noprof+0x29/0x60
[  477.139924][T15274]  kmemdup_noprof+0x29/0x60
[  477.139945][T15274]  mptcp_pm_nl_add_addr_doit+0x1e6/0xc80
[  477.139970][T15274]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  477.139988][T15274]  ? __pfx___nla_validate_parse+0x10/0x10
[  477.140010][T15274]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  477.140031][T15274]  ? rcu_is_watching+0x12/0xc0
[  477.140047][T15274]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  477.140066][T15274]  ? trace_kmalloc+0x83/0xb0
[  477.140088][T15274]  ? __kmalloc_noprof+0x365/0x9c0
[  477.140114][T15274]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290
[  477.140132][T15274]  ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290
[  477.140157][T15274]  genl_family_rcv_msg_doit+0x214/0x300
[  477.140178][T15274]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  477.140196][T15274]  ? genl_get_cmd+0x3ef/0x720
[  477.140217][T15274]  ? bpf_lsm_capable+0x9/0x10
[  477.140232][T15274]  ? security_capable+0x80/0x260
[  477.140253][T15274]  ? ns_capable+0xd2/0xf0
[  477.140273][T15274]  genl_rcv_msg+0x560/0x800
[  477.140294][T15274]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.140313][T15274]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  477.140341][T15274]  netlink_rcv_skb+0x159/0x420
[  477.140368][T15274]  ? __pfx_genl_rcv_msg+0x10/0x10
[  477.140387][T15274]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  477.140422][T15274]  ? netlink_deliver_tap+0x1ae/0xcc0
[  477.140459][T15274]  genl_rcv+0x28/0x40
[  477.140474][T15274]  netlink_unicast+0x5aa/0x870
[  477.140504][T15274]  ? __pfx_netlink_unicast+0x10/0x10
[  477.140539][T15274]  netlink_sendmsg+0x8b0/0xda0
[  477.140571][T15274]  ? __pfx_netlink_sendmsg+0x10/0x10
[  477.140602][T15274]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  477.140630][T15274]  ____sys_sendmsg+0xa54/0xc30
[  477.140653][T15274]  ? __pfx_____sys_sendmsg+0x10/0x10
[  477.140684][T15274]  ___sys_sendmsg+0x190/0x1e0
[  477.140707][T15274]  ? __pfx____sys_sendmsg+0x10/0x10
[  477.140758][T15274]  __sys_sendmsg+0x170/0x220
[  477.140786][T15274]  ? __pfx___sys_sendmsg+0x10/0x10
[  477.140826][T15274]  ? __pfx_ksys_write+0x10/0x10
[  477.140852][T15274]  __do_fast_syscall_32+0xde/0x660
[  477.140878][T15274]  do_fast_syscall_32+0x32/0x70
[  477.140899][T15274]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  477.140926][T15274] RIP: 0023:0xf7fb3579
[  477.140941][T15274] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  477.140957][T15274] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  477.140974][T15274] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400
[  477.140986][T15274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  477.140996][T15274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  477.141007][T15274] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  477.141017][T15274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  477.141042][T15274]  </TASK>
[  477.286859][T15276] syzkaller0: entered promiscuous mode
[  477.288619][T15276] syzkaller0: entered allmulticast mode
[  477.543079][ T5945] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  478.280499][T15313] IPv6: Can't replace route, no match found
[  478.404120][ T7127] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  478.564641][ T7127] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  478.568868][ T7127] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  478.572697][ T7127] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  478.576515][ T7127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.581640][T15308] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  478.588164][ T7127] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  478.794421][T10677] usb 9-1: USB disconnect, device number 6
[  478.813241][T15322] afs: Unknown parameter 'measure'
[  479.213662][T15331] FAULT_INJECTION: forcing a failure.
[  479.213662][T15331] name failslab, interval 1, probability 0, space 0, times 0
[  479.218709][T15331] CPU: 3 UID: 0 PID: 15331 Comm: syz.7.2380 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  479.218728][T15331] Tainted: [L]=SOFTLOCKUP
[  479.218732][T15331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  479.218739][T15331] Call Trace:
[  479.218743][T15331]  <TASK>
[  479.218748][T15331]  dump_stack_lvl+0x100/0x190
[  479.218766][T15331]  should_fail_ex.cold+0x5/0xa
[  479.218785][T15331]  should_failslab+0xc2/0x120
[  479.218801][T15331]  __kmalloc_cache_node_noprof+0x83/0x840
[  479.218817][T15331]  ? rcu_is_watching+0x12/0xc0
[  479.218828][T15331]  ? page_pool_create_percpu+0x7a/0xcd0
[  479.218843][T15331]  ? page_pool_create_percpu+0x7a/0xcd0
[  479.218855][T15331]  page_pool_create_percpu+0x7a/0xcd0
[  479.218870][T15331]  bpf_test_run_xdp_live+0x192/0x760
[  479.218887][T15331]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  479.218908][T15331]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  479.218937][T15331]  ? _copy_from_user+0x59/0xd0
[  479.218954][T15331]  ? bpf_test_init.isra.0+0x51/0x100
[  479.218971][T15331]  bpf_prog_test_run_xdp+0xd7d/0x1670
[  479.218993][T15331]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  479.219014][T15331]  ? fput+0x79/0x100
[  479.219028][T15331]  ? __bpf_prog_get+0x97/0x2a0
[  479.219045][T15331]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  479.219062][T15331]  __sys_bpf+0x1e56/0x5050
[  479.219077][T15331]  ? __pfx___sys_bpf+0x10/0x10
[  479.219090][T15331]  ? proc_fail_nth_write+0x9f/0x220
[  479.219104][T15331]  ? find_held_lock+0x2b/0x80
[  479.219118][T15331]  ? find_held_lock+0x2b/0x80
[  479.219129][T15331]  ? ksys_write+0x190/0x250
[  479.219144][T15331]  ? __mutex_unlock_slowpath+0x15c/0x790
[  479.219166][T15331]  ? fput+0x79/0x100
[  479.219181][T15331]  ? ksys_write+0x1ac/0x250
[  479.219196][T15331]  __ia32_sys_bpf+0x79/0xf0
[  479.219209][T15331]  ? lockdep_hardirqs_on+0x78/0x100
[  479.219222][T15331]  __do_fast_syscall_32+0xde/0x660
[  479.219238][T15331]  do_fast_syscall_32+0x32/0x70
[  479.219252][T15331]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  479.219266][T15331] RIP: 0023:0xf73ad579
[  479.219276][T15331] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  479.219287][T15331] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000165
[  479.219298][T15331] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000500
[  479.219305][T15331] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000
[  479.219312][T15331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  479.219319][T15331] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  479.219325][T15331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  479.219339][T15331]  </TASK>
[  480.414639][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2383'.
[  482.344940][ T5945] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  482.347871][ T5945] Bluetooth: hci0: Injecting HCI hardware error event
[  482.351509][ T5945] Bluetooth: hci0: hardware error 0x00
[  484.423769][ T5945] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  484.429093][T15383] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  484.768579][T15447] FAULT_INJECTION: forcing a failure.
[  484.768579][T15447] name failslab, interval 1, probability 0, space 0, times 0
[  484.772525][T15447] CPU: 2 UID: 0 PID: 15447 Comm: syz.4.2399 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  484.772543][T15447] Tainted: [L]=SOFTLOCKUP
[  484.772547][T15447] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  484.772553][T15447] Call Trace:
[  484.772557][T15447]  <TASK>
[  484.772562][T15447]  dump_stack_lvl+0x100/0x190
[  484.772579][T15447]  should_fail_ex.cold+0x5/0xa
[  484.772598][T15447]  should_failslab+0xc2/0x120
[  484.772618][T15447]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  484.772631][T15447]  __kmalloc_noprof+0xf6/0x9c0
[  484.772642][T15447]  ? kasan_quarantine_put+0x104/0x240
[  484.772656][T15447]  ? lockdep_hardirqs_on+0x78/0x100
[  484.772672][T15447]  ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  484.772685][T15447]  genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290
[  484.772700][T15447]  genl_family_rcv_msg_doit+0xc7/0x300
[  484.772714][T15447]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  484.772726][T15447]  ? genl_get_cmd+0x3ef/0x720
[  484.772740][T15447]  ? bpf_lsm_capable+0x9/0x10
[  484.772749][T15447]  ? security_capable+0x80/0x260
[  484.772763][T15447]  ? ns_capable+0xd2/0xf0
[  484.772777][T15447]  genl_rcv_msg+0x560/0x800
[  484.772790][T15447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.772802][T15447]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  484.772824][T15447]  netlink_rcv_skb+0x159/0x420
[  484.772842][T15447]  ? __pfx_genl_rcv_msg+0x10/0x10
[  484.772854][T15447]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  484.772878][T15447]  ? netlink_deliver_tap+0x1ae/0xcc0
[  484.772897][T15447]  genl_rcv+0x28/0x40
[  484.772907][T15447]  netlink_unicast+0x5aa/0x870
[  484.772937][T15447]  ? __pfx_netlink_unicast+0x10/0x10
[  484.772962][T15447]  netlink_sendmsg+0x8b0/0xda0
[  484.772982][T15447]  ? __pfx_netlink_sendmsg+0x10/0x10
[  484.773001][T15447]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  484.773019][T15447]  ____sys_sendmsg+0xa54/0xc30
[  484.773034][T15447]  ? __pfx_____sys_sendmsg+0x10/0x10
[  484.773048][T15447]  ? __pfx_do_swap_page+0x10/0x10
[  484.773063][T15447]  ___sys_sendmsg+0x190/0x1e0
[  484.773077][T15447]  ? __pfx____sys_sendmsg+0x10/0x10
[  484.773090][T15447]  ? ___pte_offset_map+0x179/0x310
[  484.773122][T15447]  __sys_sendmsg+0x170/0x220
[  484.773138][T15447]  ? __pfx___sys_sendmsg+0x10/0x10
[  484.773164][T15447]  __do_fast_syscall_32+0xde/0x660
[  484.773179][T15447]  do_fast_syscall_32+0x32/0x70
[  484.773193][T15447]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  484.773208][T15447] RIP: 0023:0xf740d579
[  484.773217][T15447] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  484.773228][T15447] RSP: 002b:00000000f543650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  484.773238][T15447] RAX: ffffffffffffffda RBX: 000000000000001b RCX: 0000000080000540
[  484.773245][T15447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  484.773252][T15447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  484.773258][T15447] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  484.773264][T15447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  484.773278][T15447]  </TASK>
[  486.020920][T12026] hid-generic 0005:0002:5508.001A: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  486.061495][T15504] fido_id[15504]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  486.737776][T15519] ieee802154 phy1 wpan1: encryption failed: -22
[  486.895555][T15529] netlink: 'syz.7.2409': attribute type 10 has an invalid length.
[  487.867502][T15367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  487.872844][T15367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  487.879718][T15367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  487.887590][T15367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  487.891052][T15367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  488.066052][T15536] chnl_net:caif_netlink_parms(): no params data found
[  488.165042][T15536] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.167780][T15536] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.170490][T15536] bridge_slave_0: entered allmulticast mode
[  488.173599][T15548] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7)
[  488.173679][T15536] bridge_slave_0: entered promiscuous mode
[  488.175815][T15548] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  488.179210][T15536] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.185312][T15548] vhci_hcd vhci_hcd.0: Device attached
[  488.187320][T15536] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.193806][T15536] bridge_slave_1: entered allmulticast mode
[  488.196597][T15536] bridge_slave_1: entered promiscuous mode
[  488.274666][T15536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.284641][T15536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.319555][T15536] team0: Port device team_slave_0 added
[  488.329382][T15536] team0: Port device team_slave_1 added
[  488.349558][T15536] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.351824][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.360189][T15536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.364858][T15536] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.367048][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.375751][T15536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.398178][T15536] hsr_slave_0: entered promiscuous mode
[  488.400462][T15536] hsr_slave_1: entered promiscuous mode
[  488.402589][T15536] debugfs: 'hsr0' already exists in 'hsr'
[  488.404939][T15536] Cannot create hsr debugfs directory
[  488.473785][ T6106] usb 52-1: SetAddress Request (2) to port 0
[  488.475788][ T6106] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd
[  488.532909][ T1139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.618486][T15549] vhci_hcd: connection reset by peer
[  488.621039][ T1140] vhci_hcd vhci_hcd.7: stop threads
[  488.623233][ T1140] vhci_hcd vhci_hcd.7: release socket
[  488.625693][ T1140] vhci_hcd vhci_hcd.7: disconnect device
[  488.643301][ T1139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.831162][ T1139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.019652][ T1139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  489.134532][T15530] syzkaller1: entered promiscuous mode
[  489.136387][T15530] syzkaller1: entered allmulticast mode
[  489.213248][ T1139] bridge_slave_1: left allmulticast mode
[  489.215365][ T1139] bridge_slave_1: left promiscuous mode
[  489.217321][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[  489.231214][T15576] FAULT_INJECTION: forcing a failure.
[  489.231214][T15576] name failslab, interval 1, probability 0, space 0, times 0
[  489.243628][T15576] CPU: 2 UID: 0 PID: 15576 Comm: syz.7.2413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  489.243647][T15576] Tainted: [L]=SOFTLOCKUP
[  489.243651][T15576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  489.243658][T15576] Call Trace:
[  489.243662][T15576]  <TASK>
[  489.243667][T15576]  dump_stack_lvl+0x100/0x190
[  489.243684][T15576]  should_fail_ex.cold+0x5/0xa
[  489.243701][T15576]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  489.243713][T15576]  should_failslab+0xc2/0x120
[  489.243729][T15576]  kmem_cache_alloc_noprof+0x83/0x780
[  489.243745][T15576]  ? skb_clone+0x190/0x400
[  489.243765][T15576]  ? skb_clone+0x190/0x400
[  489.243780][T15576]  skb_clone+0x190/0x400
[  489.243797][T15576]  netlink_deliver_tap+0xaed/0xcc0
[  489.243817][T15576]  netlink_dump+0x8ca/0xd30
[  489.243836][T15576]  ? __pfx_netlink_dump+0x10/0x10
[  489.243858][T15576]  ? __inet_diag_dump_start+0x3cb/0x8f0
[  489.243879][T15576]  __netlink_dump_start+0x6d6/0x990
[  489.243898][T15576]  inet_diag_rcv_msg_compat+0x275/0x2d0
[  489.243916][T15576]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  489.243934][T15576]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  489.243951][T15576]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  489.243967][T15576]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  489.243985][T15576]  ? sock_diag_rcv_msg+0x33d/0x7a0
[  489.244000][T15576]  ? sock_diag_rcv_msg+0x33d/0x7a0
[  489.244017][T15576]  sock_diag_rcv_msg+0x375/0x7a0
[  489.244034][T15576]  netlink_rcv_skb+0x159/0x420
[  489.244051][T15576]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  489.244067][T15576]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  489.244090][T15576]  ? netlink_deliver_tap+0x1ae/0xcc0
[  489.244109][T15576]  netlink_unicast+0x5aa/0x870
[  489.244129][T15576]  ? __pfx_netlink_unicast+0x10/0x10
[  489.244164][T15576]  netlink_sendmsg+0x8b0/0xda0
[  489.244185][T15576]  ? __pfx_netlink_sendmsg+0x10/0x10
[  489.244205][T15576]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  489.244222][T15576]  ____sys_sendmsg+0xa54/0xc30
[  489.244236][T15576]  ? __pfx_____sys_sendmsg+0x10/0x10
[  489.244255][T15576]  ___sys_sendmsg+0x190/0x1e0
[  489.244269][T15576]  ? __pfx____sys_sendmsg+0x10/0x10
[  489.244304][T15576]  __sys_sendmsg+0x170/0x220
[  489.244322][T15576]  ? __pfx___sys_sendmsg+0x10/0x10
[  489.244343][T15576]  ? __pfx_ksys_write+0x10/0x10
[  489.244360][T15576]  __do_fast_syscall_32+0xde/0x660
[  489.244379][T15576]  do_fast_syscall_32+0x32/0x70
[  489.244394][T15576]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  489.244408][T15576] RIP: 0023:0xf73ad579
[  489.244417][T15576] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  489.244428][T15576] RSP: 002b:00000000f53d650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  489.244440][T15576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  489.244447][T15576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  489.244453][T15576] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  489.244460][T15576] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  489.244466][T15576] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  489.244480][T15576]  </TASK>
[  489.245361][ T1139] bridge_slave_0: left allmulticast mode
[  489.295148][T15581] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2414'.
[  489.323606][ T1139] bridge_slave_0: left promiscuous mode
[  489.323733][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[  489.611013][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.617793][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.622609][ T1139] bond0 (unregistering): Released all slaves
[  489.689629][T15536] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  489.695565][T15536] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  489.700419][T15536] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  489.710447][T15536] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  489.825530][T15536] 8021q: adding VLAN 0 to HW filter on device bond0
[  489.839589][T15536] 8021q: adding VLAN 0 to HW filter on device team0
[  489.847126][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.850382][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.861514][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.864700][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.950106][T15367] Bluetooth: hci4: command tx timeout
[  490.016395][ T1139] hsr_slave_0: left promiscuous mode
[  490.018925][ T1139] hsr_slave_1: left promiscuous mode
[  490.022786][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  490.029445][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  490.035633][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  490.039639][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  490.051658][ T1139] veth1_macvtap: left promiscuous mode
[  490.054311][ T1139] veth0_macvtap: left promiscuous mode
[  490.056168][ T1139] veth1_vlan: left promiscuous mode
[  490.057912][ T1139] veth0_vlan: left promiscuous mode
[  490.439051][ T1139] team0 (unregistering): Port device team_slave_1 removed
[  490.469572][ T1139] team0 (unregistering): Port device team_slave_0 removed
[  490.800531][T15536] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.837755][T15536] veth0_vlan: entered promiscuous mode
[  490.842650][T15536] veth1_vlan: entered promiscuous mode
[  490.859201][T15536] veth0_macvtap: entered promiscuous mode
[  490.863845][T15536] veth1_macvtap: entered promiscuous mode
[  490.871680][T15536] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.878280][T15536] batman_adv: batadv0: Interface activated: batadv_slave_1
[  490.881916][T15636] comedi comedi0: Minor 2 could not be opened
[  490.884222][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  490.887551][ T1141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  490.890754][ T1141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  490.902483][ T1141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  490.968897][ T9645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.973889][ T9645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  490.992242][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  490.995364][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  491.280873][T15655] x_tables: duplicate underflow at hook 1
[  491.694399][T15671] input: syz0 as /devices/virtual/input/input43
[  491.922871][   T40] audit: type=1804 audit(1769523255.773:5473): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2421" name="/newroot/53/bus/bus" dev="overlay" ino=304 res=1 errno=0
[  491.923506][T15681] evm: overlay not supported
[  491.958845][   T40] audit: type=1804 audit(1769523255.813:5474): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2421" name="/newroot/53/bus/bus" dev="overlay" ino=304 res=1 errno=0
[  491.973034][   T40] audit: type=1800 audit(1769523255.813:5475): pid=15681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2421" name="bus" dev="overlay" ino=304 res=0 errno=0
[  492.023338][T15367] Bluetooth: hci4: command tx timeout
[  492.046682][T15685] netlink: 'syz.7.2421': attribute type 12 has an invalid length.
[  492.142344][T15688] netlink: 'syz.0.2422': attribute type 1 has an invalid length.
[  492.148118][T15688] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2422'.
[  492.158235][T15688] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2422'.
[  492.162510][T15688] netlink: 'syz.0.2422': attribute type 2 has an invalid length.
[  493.429562][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  493.437916][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  493.442899][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  493.448456][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  493.458482][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  493.476037][T15700] orangefs_mount: mount request failed with -4
[  493.543153][ T6106] usb 52-1: device descriptor read/8, error -110
[  493.728952][T15706] chnl_net:caif_netlink_parms(): no params data found
[  493.779865][   T40] audit: type=1804 audit(1769523257.633:5476): pid=15723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2426" name="/newroot/54/bus/bus" dev="overlay" ino=318 res=1 errno=0
[  493.886696][T15719] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  493.910861][ T9645] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.933679][ T6106] usb usb52-port1: attempt power cycle
[  494.020485][T15706] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.022762][T15706] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.033185][T15706] bridge_slave_0: entered allmulticast mode
[  494.040760][T15706] bridge_slave_0: entered promiscuous mode
[  494.056982][T15706] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.062717][T15706] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.073841][T15706] bridge_slave_1: entered allmulticast mode
[  494.078887][T15706] bridge_slave_1: entered promiscuous mode
[  494.103832][T15719] sr 2:0:0:0: [sr0] CDROM not ready.  Make sure there is a disc in the drive.
[  494.113071][ T5945] Bluetooth: hci4: command tx timeout
[  494.127853][ T9645] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.160399][T15706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  494.166387][T15706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  494.184802][T15706] team0: Port device team_slave_0 added
[  494.188529][T15706] team0: Port device team_slave_1 added
[  494.204261][T15706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.206619][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.216614][T15706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.244923][ T9645] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.255075][T15706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.261818][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  494.270987][T15706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.414180][ T9645] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.435383][T15706] hsr_slave_0: entered promiscuous mode
[  494.438262][T15706] hsr_slave_1: entered promiscuous mode
[  494.441075][T15706] debugfs: 'hsr0' already exists in 'hsr'
[  494.442918][T15706] Cannot create hsr debugfs directory
[  494.532718][T15736] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  494.534859][T15736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  494.545090][T15736] vhci_hcd vhci_hcd.0: Device attached
[  494.568978][T15736] ieee802154 phy1 wpan1: encryption failed: -22
[  494.593787][ T6106] usb usb52-port1: unable to enumerate USB device
[  494.642083][ T9645] bridge_slave_1: left allmulticast mode
[  494.644747][ T9645] bridge_slave_1: left promiscuous mode
[  494.647055][ T9645] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.657299][ T9645] bridge_slave_0: left allmulticast mode
[  494.659321][ T9645] bridge_slave_0: left promiscuous mode
[  494.661380][ T9645] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.830690][   T53] usb 46-1: SetAddress Request (6) to port 0
[  494.832830][   T53] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd
[  494.865162][T15747] random: crng reseeded on system resumption
[  494.947808][T15748] overlay: Unknown parameter 'default_permissions:permit_directio'
[  494.980986][T15748] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  495.107509][T15737] vhci_hcd: connection reset by peer
[  495.146413][   T12] vhci_hcd vhci_hcd.4: stop threads
[  495.168070][   T12] vhci_hcd vhci_hcd.4: release socket
[  495.212344][   T12] vhci_hcd vhci_hcd.4: disconnect device
[  495.556267][ T5945] Bluetooth: hci1: command tx timeout
[  495.626338][ T9645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  495.651669][ T9645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.739682][ T9645] bond0 (unregistering): Released all slaves
[  496.096003][T15754] comedi comedi0: dt2815: I/O port conflict (0xcff,2)
[  496.183069][ T5945] Bluetooth: hci4: command tx timeout
[  496.376367][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'.
[  497.105348][ T9645] hsr_slave_0: left promiscuous mode
[  497.108571][ T9645] hsr_slave_1: left promiscuous mode
[  497.111116][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  497.119719][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_0
[  497.124058][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.128234][ T9645] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.145346][ T9645] veth1_macvtap: left promiscuous mode
[  497.148014][ T9645] veth0_macvtap: left promiscuous mode
[  497.150519][ T9645] veth1_vlan: left promiscuous mode
[  497.152596][ T9645] veth0_vlan: left promiscuous mode
[  497.600369][ T9645] team0 (unregistering): Port device team_slave_1 removed
[  497.603063][ T9117] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  497.623330][ T5945] Bluetooth: hci1: command tx timeout
[  497.628022][ T9645] team0 (unregistering): Port device team_slave_0 removed
[  497.766062][ T9117] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  497.770742][ T9117] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  497.775519][ T9117] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  497.779316][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.797891][T15788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  497.801883][ T9117] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  498.139657][  T840] usb 5-1: USB disconnect, device number 23
[  498.420852][T15810] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2445'.
[  498.427068][T15810] comedi comedi0: Minor 20263 is invalid!
[  498.495180][T15814] program syz.4.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  498.499006][T15814] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  498.602753][T15706] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  498.615973][T15706] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  498.620098][T15706] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  498.624514][T15706] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  498.685174][T15706] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.700205][T15706] 8021q: adding VLAN 0 to HW filter on device team0
[  498.708453][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.711524][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.726422][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.729448][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.876584][T15706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.013594][T10716] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  499.040459][T15863] netlink: 'syz.0.2450': attribute type 10 has an invalid length.
[  499.056292][T15863] team0: Port device dummy0 added
[  499.079400][T15863] netlink: 'syz.0.2450': attribute type 10 has an invalid length.
[  499.095142][T15863] team0: Port device dummy0 removed
[  499.105157][T15863] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  499.127439][T15706] veth0_vlan: entered promiscuous mode
[  499.132659][T15706] veth1_vlan: entered promiscuous mode
[  499.155424][T15706] veth0_macvtap: entered promiscuous mode
[  499.163646][T15706] veth1_macvtap: entered promiscuous mode
[  499.169102][T10716] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  499.172017][T15706] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.175200][T10716] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  499.175312][T10716] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  499.182162][T10716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.191519][T15706] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.198471][ T9645] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.201832][ T9645] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.208335][T15830] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  499.213070][ T9645] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.218008][ T9645] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.221978][T10716] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  499.313672][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.316202][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.339718][T11766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.342254][T11766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.567546][T10495] usb 9-1: USB disconnect, device number 7
[  499.723032][ T5945] Bluetooth: hci1: command tx timeout
[  499.943175][   T53] usb 46-1: device descriptor read/8, error -110
[  500.344042][   T53] usb usb46-port1: attempt power cycle
[  500.493921][T15911] block device autoloading is deprecated and will be removed.
[  500.732761][T15911] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2454'.
[  500.914877][ T6581] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  500.936355][   T53] usb usb46-port1: unable to enumerate USB device
[  501.075084][ T6581] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  501.079657][ T6581] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26320, setting to 1024
[  501.091018][ T6581] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  501.103119][ T6581] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  501.105999][ T6581] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  501.108801][ T6581] usb 9-1: Manufacturer: syz
[  501.111891][ T6581] usb 9-1: config 0 descriptor??
[  501.117256][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  501.440320][T15962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2460'.
[  501.531296][ T6581] appleir 0003:05AC:8243.001B: unknown main item tag 0x0
[  501.536870][ T6581] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  501.538232][   T40] audit: type=1326 audit(1769523265.393:5477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.701857][ T7127] libceph: connect (1)[c::]:6789 error -101
[  501.705533][ T7127] libceph: mon0 (1)[c::]:6789 connect error
[  501.712900][   T40] audit: type=1326 audit(1769523265.393:5478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.722351][   T40] audit: type=1326 audit(1769523265.413:5479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.790001][   T40] audit: type=1326 audit(1769523265.413:5480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.794873][ T5945] Bluetooth: hci1: command tx timeout
[  501.863040][   T40] audit: type=1326 audit(1769523265.413:5481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.870072][   T40] audit: type=1326 audit(1769523265.413:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.878061][   T40] audit: type=1326 audit(1769523265.413:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.878091][T15970] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  501.885320][   T40] audit: type=1326 audit(1769523265.413:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.896813][   T40] audit: type=1326 audit(1769523265.413:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.906880][   T40] audit: type=1326 audit(1769523265.413:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15959 comm="syz.9.2461" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  501.993785][ T7127] libceph: connect (1)[c::]:6789 error -101
[  501.996528][ T7127] libceph: mon0 (1)[c::]:6789 connect error
[  502.204663][T15964] ceph: No mds server is up or the cluster is laggy
[  502.633559][T15983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  502.635729][T15983] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  502.638964][T15983] vhci_hcd vhci_hcd.0: Device attached
[  502.799379][T15983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  502.933278][  T840] usb 38-1: SetAddress Request (10) to port 0
[  502.935297][  T840] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd
[  503.130225][T15984] vhci_hcd: connection reset by peer
[  503.143398][ T1146] vhci_hcd vhci_hcd.0: stop threads
[  503.145211][ T1146] vhci_hcd vhci_hcd.0: release socket
[  503.147020][ T1146] vhci_hcd vhci_hcd.0: disconnect device
[  503.633595][T10514] usb 9-1: USB disconnect, device number 8
[  503.770823][T16028] overlayfs: missing 'workdir'
[  503.780824][T16030] FAULT_INJECTION: forcing a failure.
[  503.780824][T16030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  503.790914][T16030] CPU: 3 UID: 0 PID: 16030 Comm: syz.0.2472 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  503.790943][T16030] Tainted: [L]=SOFTLOCKUP
[  503.790950][T16030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  503.790960][T16030] Call Trace:
[  503.790966][T16030]  <TASK>
[  503.790974][T16030]  dump_stack_lvl+0x100/0x190
[  503.791000][T16030]  should_fail_ex.cold+0x5/0xa
[  503.791029][T16030]  _copy_from_user+0x2e/0xd0
[  503.791057][T16030]  get_compat_msghdr+0xb3/0x4b0
[  503.791083][T16030]  ? __pfx_get_compat_msghdr+0x10/0x10
[  503.791117][T16030]  ___sys_sendmsg+0x1b6/0x1e0
[  503.791140][T16030]  ? __pfx____sys_sendmsg+0x10/0x10
[  503.791192][T16030]  __sys_sendmsg+0x170/0x220
[  503.791240][T16030]  ? __pfx___sys_sendmsg+0x10/0x10
[  503.791274][T16030]  ? __pfx_ksys_write+0x10/0x10
[  503.791292][T16030]  ? fput+0x79/0x100
[  503.791320][T16030]  __do_fast_syscall_32+0xde/0x660
[  503.791347][T16030]  do_fast_syscall_32+0x32/0x70
[  503.791368][T16030]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  503.791390][T16030] RIP: 0023:0xf743d579
[  503.791404][T16030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  503.791420][T16030] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  503.791438][T16030] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  503.791449][T16030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  503.791467][T16030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  503.791478][T16030] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  503.791489][T16030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  503.791514][T16030]  </TASK>
[  503.868919][T16028] netlink: 'syz.4.2473': attribute type 10 has an invalid length.
[  503.885727][T16028] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  504.272816][T16044] FAULT_INJECTION: forcing a failure.
[  504.272816][T16044] name failslab, interval 1, probability 0, space 0, times 0
[  504.277522][T16044] CPU: 1 UID: 0 PID: 16044 Comm: syz.4.2476 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  504.277541][T16044] Tainted: [L]=SOFTLOCKUP
[  504.277545][T16044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  504.277552][T16044] Call Trace:
[  504.277556][T16044]  <TASK>
[  504.277562][T16044]  dump_stack_lvl+0x100/0x190
[  504.277592][T16044]  should_fail_ex.cold+0x5/0xa
[  504.277612][T16044]  should_failslab+0xc2/0x120
[  504.277629][T16044]  kmem_cache_alloc_noprof+0x83/0x780
[  504.277643][T16044]  ? get_close_on_exec+0x137/0x320
[  504.277657][T16044]  ? mm_alloc+0x1c/0xd0
[  504.277677][T16044]  ? mm_alloc+0x1c/0xd0
[  504.277689][T16044]  mm_alloc+0x1c/0xd0
[  504.277705][T16044]  alloc_bprm+0x2af/0x710
[  504.277718][T16044]  do_execveat_common.isra.0+0x1d0/0x5b0
[  504.277733][T16044]  __ia32_compat_sys_execveat+0xe0/0x120
[  504.277748][T16044]  __do_fast_syscall_32+0xde/0x660
[  504.277765][T16044]  do_fast_syscall_32+0x32/0x70
[  504.277779][T16044]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  504.277794][T16044] RIP: 0023:0xf740d579
[  504.277803][T16044] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  504.277816][T16044] RSP: 002b:00000000f541550c EFLAGS: 00000292 ORIG_RAX: 0000000000000166
[  504.277831][T16044] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000
[  504.277838][T16044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[  504.277845][T16044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  504.277851][T16044] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  504.277857][T16044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  504.277872][T16044]  </TASK>
[  504.993105][T10514] usb 12-1: new high-speed USB device number 15 using dummy_hcd
[  505.154882][T10514] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  505.159889][T10514] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  505.163958][T10514] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  505.167576][T10514] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.173901][T16066] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  505.179248][T10514] usb 12-1: Quirk or no altset; falling back to MIDI 1.0
[  505.559868][T10514] usb 12-1: USB disconnect, device number 15
[  505.910563][T16082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'.
[  505.934813][T16082] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2487'.
[  506.027137][ T1417] ieee802154 phy1 wpan1: encryption failed: -22
[  506.281395][T16097] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.771021][T16115] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[  506.773750][T16115] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  506.783771][T16115] vhci_hcd vhci_hcd.0: Device attached
[  506.843053][T12026] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  506.969590][T16120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2498'.
[  507.003376][T12026] usb 5-1: Using ep0 maxpacket: 8
[  507.007114][T12026] usb 5-1: unable to get BOS descriptor or descriptor too short
[  507.010712][T12026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  507.014984][T12026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  507.019126][T12026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  507.023917][T12026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  507.027018][T12026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  507.030712][T12026] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  507.034824][T12026] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  507.041345][T12026] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  507.045665][T12026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.048951][T12026] usb 5-1: Product: syz
[  507.050317][T12026] usb 5-1: Manufacturer: syz
[  507.051903][T12026] usb 5-1: SerialNumber: syz
[  507.057515][T12026] usb 5-1: config 0 descriptor??
[  507.060670][T16112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  507.064051][T16112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  507.069408][T12026] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  507.093091][T10514] usb 52-1: SetAddress Request (6) to port 0
[  507.095263][T10514] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd
[  507.223159][T12026] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  507.373501][T12026] usb 9-1: Using ep0 maxpacket: 16
[  507.381266][T12026] usb 9-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  507.388379][T12026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.391296][T12026] usb 9-1: Product: syz
[  507.392693][T12026] usb 9-1: Manufacturer: syz
[  507.395138][T12026] usb 9-1: SerialNumber: syz
[  507.398334][T12026] usb 9-1: config 0 descriptor??
[  507.403517][T12026] as10x_usb: device has been detected
[  507.405551][T12026] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  507.416960][T12026] usb 9-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  507.436566][T12026] as10x_usb: error during firmware upload part1
[  507.438830][T12026] Registered device Sky IT Digital Key (green led)
[  507.599008][T16116] vhci_hcd: connection reset by peer
[  507.604688][ T1139] vhci_hcd vhci_hcd.7: stop threads
[  507.612387][ T1139] vhci_hcd vhci_hcd.7: release socket
[  507.614429][ T1139] vhci_hcd vhci_hcd.7: disconnect device
[  507.638927][T16120] random: crng reseeded on system resumption
[  507.658609][T12026] usb 9-1: USB disconnect, device number 9
[  507.675380][T12026] Unregistered device Sky IT Digital Key (green led)
[  507.676588][T12026] as10x_usb: device has been disconnected
[  508.024249][  T840] usb 38-1: device descriptor read/8, error -110
[  508.088018][T10677] usb 5-1: USB disconnect, device number 24
[  508.344651][ T7127] hid-generic 0005:0002:5508.001C: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  508.371079][T16132] fido_id[16132]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  508.440329][  T840] usb usb38-port1: attempt power cycle
[  508.534681][T16138] ªªªªª»: renamed from hsr0 (while UP)
[  508.652070][T16146] FAULT_INJECTION: forcing a failure.
[  508.652070][T16146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  508.657433][T16146] CPU: 0 UID: 0 PID: 16146 Comm: syz.0.2504 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  508.657492][T16146] Tainted: [L]=SOFTLOCKUP
[  508.657498][T16146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  508.657509][T16146] Call Trace:
[  508.657515][T16146]  <TASK>
[  508.657522][T16146]  dump_stack_lvl+0x100/0x190
[  508.657552][T16146]  should_fail_ex.cold+0x5/0xa
[  508.657580][T16146]  _copy_from_user+0x2e/0xd0
[  508.657604][T16146]  vmemdup_user+0x6b/0xe0
[  508.657621][T16146]  path_setxattrat+0x296/0x3a0
[  508.657636][T16146]  ? __pfx_path_setxattrat+0x10/0x10
[  508.657653][T16146]  ? ksys_write+0x190/0x250
[  508.657666][T16146]  ? ksys_write+0x190/0x250
[  508.657690][T16146]  ? fput+0x79/0x100
[  508.657706][T16146]  ? ksys_write+0x1ac/0x250
[  508.657721][T16146]  __ia32_sys_lsetxattr+0xc7/0x140
[  508.657736][T16146]  ? __do_fast_syscall_32+0x97/0x660
[  508.657751][T16146]  ? lockdep_hardirqs_on+0x78/0x100
[  508.657765][T16146]  __do_fast_syscall_32+0xde/0x660
[  508.657781][T16146]  do_fast_syscall_32+0x32/0x70
[  508.657796][T16146]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  508.657812][T16146] RIP: 0023:0xf743d579
[  508.657822][T16146] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  508.657833][T16146] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 00000000000000e3
[  508.657845][T16146] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000440
[  508.657853][T16146] RDX: 0000000080000540 RSI: 0000000000000004 RDI: 0000000000000000
[  508.657860][T16146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  508.657867][T16146] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  508.657874][T16146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  508.657888][T16146]  </TASK>
[  508.962689][T16155] syz.0.2506 (16155): drop_caches: 2
[  509.034565][  T840] usb usb38-port1: unable to enumerate USB device
[  509.183077][ T5983] usb 12-1: new high-speed USB device number 16 using dummy_hcd
[  509.353019][ T5983] usb 12-1: Using ep0 maxpacket: 8
[  509.356451][ T5983] usb 12-1: config 0 has an invalid interface number: 55 but max is 0
[  509.359187][ T5983] usb 12-1: config 0 has no interface number 0
[  509.361213][ T5983] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  509.364843][ T5983] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  509.368645][ T5983] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  509.372160][ T5983] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  509.376626][ T5983] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  509.379793][ T5983] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.384197][ T5983] usb 12-1: config 0 descriptor??
[  509.395182][ T5983] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  509.818687][  T827] hid-generic 0005:0002:5508.001D: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  509.910472][T16168] fido_id[16168]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  510.853048][ T5937] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  511.004958][ T5937] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  511.007676][ T5937] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  511.011677][ T5937] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  511.014726][ T5937] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  511.017305][ T5937] usb 9-1: Manufacturer: syz
[  511.020320][ T5937] usb 9-1: config 0 descriptor??
[  511.073431][ T5937] rc_core: IR keymap rc-hauppauge not found
[  511.075453][ T5937] Registered IR keymap rc-empty
[  511.077955][ T5937] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0
[  511.082588][ T5937] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input45
[  511.254472][T16193] overlay: Unknown parameter 'default_permissions:permit_directio'
[  511.306041][T16194] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  511.307485][ T6006] usb 9-1: USB disconnect, device number 10
[  511.434404][ T7127] usb 12-1: USB disconnect, device number 16
[  511.445941][ T7127] ldusb 12-1:0.55: LD USB Device #0 now disconnected
[  512.183150][T10514] usb 52-1: device descriptor read/8, error -110
[  512.575039][T16224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2521'.
[  512.597221][T10514] usb usb52-port1: attempt power cycle
[  512.753681][T16237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2523'.
[  513.021362][   T10] hid-generic 0005:0002:5508.001E: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  513.178593][T10514] usb usb52-port1: unable to enumerate USB device
[  513.251154][T16248] Bluetooth: MGMT ver 1.23
[  513.260193][T16248] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  513.263018][T16248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  513.269575][T16248] vhci_hcd vhci_hcd.0: Device attached
[  513.445629][T16252] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2526'.
[  513.533455][ T7127] usb 46-1: SetAddress Request (10) to port 0
[  513.535460][ T7127] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd
[  513.670561][T16247] fido_id[16247]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  513.839334][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2527'.
[  514.201430][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'.
[  514.242170][T16249] vhci_hcd: connection reset by peer
[  514.245801][   T46] vhci_hcd vhci_hcd.4: stop threads
[  514.248453][   T46] vhci_hcd vhci_hcd.4: release socket
[  514.253476][   T46] vhci_hcd vhci_hcd.4: disconnect device
[  516.116839][T16286] FAULT_INJECTION: forcing a failure.
[  516.116839][T16286] name failslab, interval 1, probability 0, space 0, times 0
[  516.121097][T16286] CPU: 3 UID: 0 PID: 16286 Comm: syz.0.2533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  516.121116][T16286] Tainted: [L]=SOFTLOCKUP
[  516.121120][T16286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  516.121127][T16286] Call Trace:
[  516.121132][T16286]  <TASK>
[  516.121137][T16286]  dump_stack_lvl+0x100/0x190
[  516.121159][T16286]  should_fail_ex.cold+0x5/0xa
[  516.121179][T16286]  should_failslab+0xc2/0x120
[  516.121196][T16286]  __kmalloc_cache_noprof+0x80/0x810
[  516.121208][T16286]  ? _sta_info_move_state+0x34a/0x14d0
[  516.121224][T16286]  ? __sta_info_destroy_part2+0x272/0x540
[  516.121239][T16286]  ? ieee80211_free_sta_keys+0x3d0/0x630
[  516.121256][T16286]  ? __sta_info_destroy_part2+0x272/0x540
[  516.121272][T16286]  __sta_info_destroy_part2+0x272/0x540
[  516.121291][T16286]  __sta_info_flush+0x4f6/0x720
[  516.121310][T16286]  ? __pfx___sta_info_flush+0x10/0x10
[  516.121330][T16286]  ieee80211_ibss_disconnect+0x169/0xba0
[  516.121345][T16286]  ieee80211_ibss_leave+0x4a/0x160
[  516.121357][T16286]  cfg80211_leave_ibss+0x1a7/0x450
[  516.121372][T16286]  cfg80211_leave+0x219/0x410
[  516.121382][T16286]  ? rcu_is_watching+0x12/0xc0
[  516.121395][T16286]  cfg80211_change_iface+0x3da/0xca0
[  516.121412][T16286]  nl80211_set_interface+0x875/0xc80
[  516.121432][T16286]  ? __pfx_nl80211_set_interface+0x10/0x10
[  516.121452][T16286]  ? nl80211_pre_doit+0x30e/0xae0
[  516.121464][T16286]  ? nl80211_pre_doit+0x19a/0xae0
[  516.121479][T16286]  genl_family_rcv_msg_doit+0x214/0x300
[  516.121493][T16286]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  516.121505][T16286]  ? genl_get_cmd+0x3ef/0x720
[  516.121519][T16286]  ? bpf_lsm_capable+0x9/0x10
[  516.121529][T16286]  ? security_capable+0x80/0x260
[  516.121544][T16286]  ? ns_capable+0xd2/0xf0
[  516.121558][T16286]  genl_rcv_msg+0x560/0x800
[  516.121571][T16286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  516.121583][T16286]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  516.121596][T16286]  ? __pfx_nl80211_set_interface+0x10/0x10
[  516.121612][T16286]  ? __pfx_nl80211_post_doit+0x10/0x10
[  516.121630][T16286]  netlink_rcv_skb+0x159/0x420
[  516.121648][T16286]  ? __pfx_genl_rcv_msg+0x10/0x10
[  516.121661][T16286]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  516.121685][T16286]  ? netlink_deliver_tap+0x1ae/0xcc0
[  516.121704][T16286]  genl_rcv+0x28/0x40
[  516.121714][T16286]  netlink_unicast+0x5aa/0x870
[  516.121734][T16286]  ? __pfx_netlink_unicast+0x10/0x10
[  516.121757][T16286]  netlink_sendmsg+0x8b0/0xda0
[  516.121777][T16286]  ? __pfx_netlink_sendmsg+0x10/0x10
[  516.121796][T16286]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  516.121813][T16286]  ____sys_sendmsg+0xa54/0xc30
[  516.121828][T16286]  ? __pfx_____sys_sendmsg+0x10/0x10
[  516.121847][T16286]  ___sys_sendmsg+0x190/0x1e0
[  516.121861][T16286]  ? __pfx____sys_sendmsg+0x10/0x10
[  516.121891][T16286]  __sys_sendmsg+0x170/0x220
[  516.121908][T16286]  ? __pfx___sys_sendmsg+0x10/0x10
[  516.121942][T16286]  ? __pfx_ksys_write+0x10/0x10
[  516.121957][T16286]  ? fput+0x79/0x100
[  516.121974][T16286]  __do_fast_syscall_32+0xde/0x660
[  516.121991][T16286]  do_fast_syscall_32+0x32/0x70
[  516.122005][T16286]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  516.122019][T16286] RIP: 0023:0xf743d579
[  516.122029][T16286] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  516.122039][T16286] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  516.122051][T16286] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  516.122058][T16286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  516.122064][T16286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  516.122071][T16286] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  516.122078][T16286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  516.122092][T16286]  </TASK>
[  516.719460][T10515] hid-generic 0005:0002:5508.001F: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa
[  516.756412][T16298] fido_id[16298]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  516.847880][T16300] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2537'.
[  517.472405][T16317] openvswitch: netlink: EtherType 50a is less than min 600
[  517.482038][T16317] Bluetooth: MGMT ver 1.23
[  517.618319][T16324] netlink: 'syz.9.2548': attribute type 1 has an invalid length.
[  517.622604][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2548'.
[  517.675690][T16325] FAULT_INJECTION: forcing a failure.
[  517.675690][T16325] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.679892][T16325] CPU: 1 UID: 0 PID: 16325 Comm: syz.7.2546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  517.679921][T16325] Tainted: [L]=SOFTLOCKUP
[  517.679925][T16325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  517.679932][T16325] Call Trace:
[  517.679937][T16325]  <TASK>
[  517.679943][T16325]  dump_stack_lvl+0x100/0x190
[  517.679960][T16325]  should_fail_ex.cold+0x5/0xa
[  517.679979][T16325]  _copy_from_iter+0x1f4/0x1690
[  517.679999][T16325]  ? __alloc_skb+0x220/0x410
[  517.680014][T16325]  ? __alloc_skb+0x35d/0x410
[  517.680029][T16325]  ? __pfx__copy_from_iter+0x10/0x10
[  517.680047][T16325]  ? __pfx___might_resched+0x10/0x10
[  517.680070][T16325]  netlink_sendmsg+0x808/0xda0
[  517.680091][T16325]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.680110][T16325]  ? aa_sock_msg_perm.isra.0+0x100/0x1b0
[  517.680127][T16325]  ____sys_sendmsg+0xa54/0xc30
[  517.680141][T16325]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.680160][T16325]  ___sys_sendmsg+0x190/0x1e0
[  517.680173][T16325]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.680203][T16325]  __sys_sendmsg+0x170/0x220
[  517.680220][T16325]  ? __pfx___sys_sendmsg+0x10/0x10
[  517.680245][T16325]  __do_fast_syscall_32+0xde/0x660
[  517.680262][T16325]  do_fast_syscall_32+0x32/0x70
[  517.680276][T16325]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  517.680290][T16325] RIP: 0023:0xf73ad579
[  517.680299][T16325] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  517.680315][T16325] RSP: 002b:00000000f539450c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  517.680327][T16325] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040
[  517.680334][T16325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  517.680340][T16325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  517.680347][T16325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  517.680353][T16325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  517.680367][T16325]  </TASK>
[  518.101021][T16336] syzkaller0: entered promiscuous mode
[  518.103826][T16336] syzkaller0: entered allmulticast mode
[  518.198620][   T40] kauditd_printk_skb: 96 callbacks suppressed
[  518.198632][   T40] audit: type=1326 audit(1769523282.053:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.208043][   T40] audit: type=1326 audit(1769523282.053:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.215949][   T40] audit: type=1326 audit(1769523282.053:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.223452][   T40] audit: type=1326 audit(1769523282.053:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.231464][ T6006] libceph: connect (1)[c::]:6789 error -101
[  518.234090][ T6006] libceph: mon0 (1)[c::]:6789 connect error
[  518.236195][   T40] audit: type=1326 audit(1769523282.053:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.243606][   T40] audit: type=1326 audit(1769523282.053:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.255734][   T40] audit: type=1326 audit(1769523282.053:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.262762][   T40] audit: type=1326 audit(1769523282.053:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.272040][   T40] audit: type=1326 audit(1769523282.053:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.279151][   T40] audit: type=1326 audit(1769523282.053:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16329 comm="syz.9.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x7ffc0000
[  518.493775][ T9930] libceph: connect (1)[c::]:6789 error -101
[  518.496000][ T9930] libceph: mon0 (1)[c::]:6789 connect error
[  518.577736][T16343] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  518.580702][T16343] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  518.583265][ T7127] usb 46-1: device descriptor read/8, error -110
[  518.587817][T16343] vhci_hcd vhci_hcd.0: Device attached
[  518.668380][T16339] ceph: No mds server is up or the cluster is laggy
[  518.847085][ T6106] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  519.059278][ T7127] usb usb46-port1: attempt power cycle
[  519.321977][T16346] vhci_hcd: connection reset by peer
[  519.346903][T11766] vhci_hcd vhci_hcd.0: stop threads
[  519.349262][T11766] vhci_hcd vhci_hcd.0: release socket
[  519.358939][T11766] vhci_hcd vhci_hcd.0: disconnect device
[  519.820348][ T7127] usb usb46-port1: unable to enumerate USB device
[  520.354040][T16363] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI
[  520.357916][T16363] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  520.360639][T16363] CPU: 2 UID: 0 PID: 16363 Comm: syz.0.2559 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  520.364463][T16363] Tainted: [L]=SOFTLOCKUP
[  520.365820][T16363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  520.369053][T16363] RIP: 0010:h5_recv+0x108/0x960
[  520.370607][T16363] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 6c 18 a5 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  520.377611][T16363] RSP: 0018:ffffc9000656fb88 EFLAGS: 00010293
[  520.379558][T16363] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886131cc
[  520.382036][T16363] RDX: ffff888069d024c0 RSI: ffffffff88613214 RDI: ffff888069d024c0
[  520.384708][T16363] RBP: ffffc9000656fd18 R08: 0000000000000005 R09: 0000000000000000
[  520.387256][T16363] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  520.389741][T16363] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f
[  520.392239][T16363] FS:  0000000000000000(0000) GS:ffff8880975e3000(0063) knlGS:00000000f5445b40
[  520.395039][T16363] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  520.397113][T16363] CR2: 00000000f5424da4 CR3: 0000000061cf7000 CR4: 0000000000352ef0
[  520.399629][T16363] Call Trace:
[  520.400718][T16363]  <TASK>
[  520.401672][T16363]  ? __pfx_h5_recv+0x10/0x10
[  520.403382][T16363]  hci_uart_tty_receive+0x259/0x7e0
[  520.405034][T16363]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  520.406824][T16363]  tty_ioctl+0x909/0x1690
[  520.408270][T16363]  ? __pfx_tty_ioctl+0x10/0x10
[  520.409816][T16363]  ? do_vfs_ioctl+0x226/0x13e0
[  520.411352][T16363]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  520.412964][T16363]  ? find_held_lock+0x2b/0x80
[  520.414491][T16363]  ? hook_file_ioctl_common+0x146/0x410
[  520.416261][T16363]  ? __fget_files+0x21f/0x3d0
[  520.417847][T16363]  tty_compat_ioctl+0x2b3/0x420
[  520.419497][T16363]  ? __pfx_tty_compat_ioctl+0x10/0x10
[  520.421216][T16363]  __ia32_compat_sys_ioctl+0x2cf/0x360
[  520.423143][T16363]  __do_fast_syscall_32+0xde/0x660
[  520.424886][T16363]  do_fast_syscall_32+0x32/0x70
[  520.426425][T16363]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  520.428494][T16363] RIP: 0023:0xf743d579
[  520.429785][T16363] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00
[  520.435787][T16363] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[  520.438451][T16363] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005412
[  520.440937][T16363] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  520.443618][T16363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  520.446161][T16363] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  520.448811][T16363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  520.451427][T16363]  </TASK>
[  520.452451][T16363] Modules linked in:
[  520.454171][T16363] ---[ end trace 0000000000000000 ]---
[  520.459851][T16363] RIP: 0010:h5_recv+0x108/0x960
[  520.461605][T16363] Code: 49 c1 ef 03 4b 8d 04 37 48 89 04 24 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 6c 18 a5 f9 48 8b 04 24 <80> 38 00 0f 85 b7 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00
[  520.468766][T16363] RSP: 0018:ffffc9000656fb88 EFLAGS: 00010293
[  520.470811][T16363] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff886131cc
[  520.473625][T16363] RDX: ffff888069d024c0 RSI: ffffffff88613214 RDI: ffff888069d024c0
[  520.476242][T16363] RBP: ffffc9000656fd18 R08: 0000000000000005 R09: 0000000000000000
[  520.478877][T16363] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
[  520.481598][T16363] R13: 0000000000000001 R14: dffffc0000000000 R15: 000000000000005f
[  520.484400][T16363] FS:  0000000000000000(0000) GS:ffff8880975e3000(0063) knlGS:00000000f5445b40
[  520.487361][T16363] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  520.489563][T16363] CR2: 00000000f7226d10 CR3: 0000000061cf7000 CR4: 0000000000352ef0
[  520.492491][T16363] Kernel panic - not syncing: Fatal exception
[  520.498325][T16363] Kernel Offset: disabled
[  520.499703][T16363] Rebooting in 86400 seconds..