last executing test programs:

11.46537068s ago: executing program 1 (id=134):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x4, 0x3, 0x8000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

11.401631335s ago: executing program 0 (id=135):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x180)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x7}}, 0x18)

11.167210709s ago: executing program 3 (id=137):
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

10.948299387s ago: executing program 3 (id=139):
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

10.538303979s ago: executing program 3 (id=140):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001540)=ANY=[], 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000001680)=0x936, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x101, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
recvmmsg(r4, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x1, 0x40000102, 0x0)

10.113533248s ago: executing program 0 (id=141):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capset(0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
keyctl$dh_compute(0x17, &(0x7f0000002800), 0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)={'sha1_mb\x00'}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))

10.098976863s ago: executing program 1 (id=142):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()

8.758950626s ago: executing program 1 (id=145):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
socket$kcm(0xa, 0x2, 0x73)
openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r1, @ANYBLOB="07b0cf"], 0x0)

8.579091717s ago: executing program 2 (id=146):
mkdir(0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x2000000)

8.163155231s ago: executing program 2 (id=149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={0x0}}, 0x20)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e00000000000000000808008247a42b2200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

6.983613782s ago: executing program 2 (id=150):
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

6.759554736s ago: executing program 2 (id=152):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x4, 0x3, 0x8000})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)

5.325907368s ago: executing program 4 (id=153):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1647ab0796d6b5da, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000540)={{@local, 0x5}, 0x1, 0x25d1, 0xffffffff, 0x1})
r6 = socket(0x1e, 0x1, 0x0)
write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r6], 0x14)

5.266709114s ago: executing program 1 (id=154):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7", 0x57}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x1}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x3)
getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000001740)=""/4096, &(0x7f0000002740)=0x1000)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5.100721454s ago: executing program 2 (id=155):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

4.996399039s ago: executing program 4 (id=156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000015c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, 0x0, 0x4000844)

4.856804342s ago: executing program 3 (id=157):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={0x0}}, 0x20)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e00000000000000000808008247a42b2200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4.84160345s ago: executing program 1 (id=158):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000540)=0x73, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/4096, 0x1000}, 0x6}], 0x1, 0x40010022, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4080)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f00000003c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x8}])
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000040)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000004c0)})

4.840603339s ago: executing program 0 (id=159):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0x6, 0x4, 0xe000, 0x0, {r1, r2/1000+60000}, {0x4, 0xc, 0xd5, 0x6, 0x77, 0x6, "00001300"}, 0x5, 0x2, {&(0x7f00000001c0)}, 0x6})
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f0000000300)=""/212, 0xd4}], 0x3, &(0x7f0000000440)=""/39, 0x27}, 0x7}, {{&(0x7f0000000580)=@alg, 0x80, &(0x7f0000001780)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/128, 0x80}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x3, &(0x7f00000017c0)=""/61, 0x3d}, 0x9}, {{&(0x7f0000001800)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/123, 0x7b}, {&(0x7f0000001900)=""/142, 0x8e}, {&(0x7f00000019c0)=""/23, 0x17}], 0x3, &(0x7f0000001a40)=""/170, 0xaa}, 0xff}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/120, 0x78}, {&(0x7f0000002b80)=""/232, 0xe8}, {&(0x7f0000002c80)=""/245, 0xf5}, {&(0x7f0000002d80)=""/60, 0x3c}, {&(0x7f0000002dc0)=""/153, 0x99}, {&(0x7f0000002e80)=""/47, 0x2f}, {&(0x7f0000002ec0)=""/212, 0xd4}], 0x8, &(0x7f0000003040)=""/255, 0xff}, 0x8000}], 0x4, 0x0, &(0x7f0000003240)={0x0, 0x3938700})

4.750943452s ago: executing program 2 (id=160):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x5, 0xfffffff8, 0x8, 0x9, 0xe, <r0=>0x0})
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4ae51}}, 0x20}}, 0x48000)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, 0x0)

4.750477382s ago: executing program 4 (id=161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={0x0}}, 0x20)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e00000000000000000808008247a42b2200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.62863661s ago: executing program 0 (id=162):
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f0000000440)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}])

3.448274961s ago: executing program 4 (id=163):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={&(0x7f0000000180)=@cgroup={0x2, 0xffffffffffffffff, 0xa}, 0x10}}, 0x20)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xfffffffe, 0x800, 0x1, 0x4, 0x2fac, 0x8, 0x800, 0x2])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r6, 0x0, 0x0)

3.398638383s ago: executing program 3 (id=164):
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0)="89607167f43c9bf764ec364ea6ee573005c2cfdd0411700f641467a5c7ca7d439d5c23dd4175d5c6b62d858c105dd6a24accf55aa96431f90360e263320fd50ef66291c719da582d1f322821bea7c68a9b2979562c14466e764b9ac2ce8d1298fe9ef99bbf60e47d6f17c35ac47ad52e22cb3d34ab29924c1dc360d9814da236", &(0x7f0000000300)=@tcp6}, 0x20)
bind$inet(0xffffffffffffffff, &(0x7f0000005dc0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

3.219003213s ago: executing program 1 (id=165):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capset(0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
keyctl$dh_compute(0x17, &(0x7f0000002800), 0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)={'sha1_mb\x00'}})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))

3.208542856s ago: executing program 3 (id=166):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa10, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001540)=ANY=[], 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000001680)=0x936, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x101, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
recvmmsg(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0x7}], 0x1, 0x40000102, 0x0)

2.1919576s ago: executing program 4 (id=167):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100000000000002)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)={'pim6reg\x00', 0x1})
ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002940)=@bpf_lsm={0x1d, 0x20, &(0x7f0000002600)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}}, @alu={0x7, 0x0, 0x7, 0x3, 0x1, 0x20}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @ringbuf_query], &(0x7f00000027c0)='syzkaller\x00', 0x7e0a, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000028c0)={0x3, 0xf, 0x58, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000002900)=[{0x3, 0x1, 0xd, 0x2}, {0x1, 0x5, 0x4, 0xb}], 0x10, 0x2}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="c11150", 0x3, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffffd, @private0, 0x3}, 0x1c)

2.113746363s ago: executing program 0 (id=168):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={0x0}}, 0x20)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e00000000000000000808008247a42b2200", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

237.475348ms ago: executing program 0 (id=169):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
readv(r1, &(0x7f0000003c80)=[{&(0x7f0000002c80)=""/4096, 0x1000}], 0x1)

0s ago: executing program 4 (id=170):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @val=@iter={&(0x7f0000000180)=@cgroup={0x2, 0xffffffffffffffff, 0xa}, 0x10}}, 0x20)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xfffffffe, 0x800, 0x1, 0x4, 0x2fac, 0x8, 0x800, 0x2])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42, 0x0, 0x0, 0x400000}, 0x28)
flock(0xffffffffffffffff, 0x0)
write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
openat$sequencer2(0xffffff9c, 0x0, 0x40, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
setresgid(0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macsec0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e00000000000000000808008247a42b2200", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts.
[   82.353023][ T5787] cgroup: Unknown subsys name 'net'
[   82.593788][ T5787] cgroup: Unknown subsys name 'cpuset'
[   82.649011][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.523585][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.863105][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.868169][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.888540][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.890020][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.890866][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.894394][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.926735][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.928002][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.947840][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.948042][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.951414][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.952608][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.955728][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.956780][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.956934][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.976097][  T859] cfg80211: failed to load regulatory.db
[   87.042783][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.052078][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.059053][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.060269][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.061254][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.106460][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.116518][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.126837][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.128835][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.130064][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.882541][ T5801] chnl_net:caif_netlink_parms(): no params data found
[   87.934034][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   88.067395][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   88.110345][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   88.135390][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   88.318033][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.319720][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.319890][ T5801] bridge_slave_0: entered allmulticast mode
[   88.322685][ T5801] bridge_slave_0: entered promiscuous mode
[   88.373163][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.373369][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.373524][ T5801] bridge_slave_1: entered allmulticast mode
[   88.375056][ T5801] bridge_slave_1: entered promiscuous mode
[   88.398672][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.398796][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.398994][ T5799] bridge_slave_0: entered allmulticast mode
[   88.402006][ T5799] bridge_slave_0: entered promiscuous mode
[   88.455203][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.455301][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.455419][ T5799] bridge_slave_1: entered allmulticast mode
[   88.456976][ T5799] bridge_slave_1: entered promiscuous mode
[   88.543924][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.544143][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.544314][ T5800] bridge_slave_0: entered allmulticast mode
[   88.546307][ T5800] bridge_slave_0: entered promiscuous mode
[   88.555359][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.592990][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.593137][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.593307][ T5818] bridge_slave_0: entered allmulticast mode
[   88.595342][ T5818] bridge_slave_0: entered promiscuous mode
[   88.596995][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.597139][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.597310][ T5800] bridge_slave_1: entered allmulticast mode
[   88.601998][ T5800] bridge_slave_1: entered promiscuous mode
[   88.607177][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.607707][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.607834][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.607995][ T5802] bridge_slave_0: entered allmulticast mode
[   88.612492][ T5802] bridge_slave_0: entered promiscuous mode
[   88.621411][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.622673][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.622824][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.622985][ T5818] bridge_slave_1: entered allmulticast mode
[   88.626776][ T5818] bridge_slave_1: entered promiscuous mode
[   88.671371][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.671496][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.671649][ T5802] bridge_slave_1: entered allmulticast mode
[   88.674300][ T5802] bridge_slave_1: entered promiscuous mode
[   88.682194][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.880874][ T5801] team0: Port device team_slave_0 added
[   88.883640][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.920183][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.922690][ T5801] team0: Port device team_slave_1 added
[   88.924906][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.929659][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.934060][ T5799] team0: Port device team_slave_0 added
[   88.936963][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.979938][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.982127][ T5799] team0: Port device team_slave_1 added
[   89.030268][ T5808] Bluetooth: hci2: command tx timeout
[   89.030392][ T5808] Bluetooth: hci0: command tx timeout
[   89.078111][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.078125][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.078140][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.083728][ T5800] team0: Port device team_slave_0 added
[   89.119473][   T60] Bluetooth: hci3: command tx timeout
[   89.119572][   T60] Bluetooth: hci1: command tx timeout
[   89.134885][ T5818] team0: Port device team_slave_0 added
[   89.135812][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.135823][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.135847][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.140970][ T5800] team0: Port device team_slave_1 added
[   89.144139][ T5802] team0: Port device team_slave_0 added
[   89.146785][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.146797][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.146819][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.167044][ T5818] team0: Port device team_slave_1 added
[   89.189432][ T5808] Bluetooth: hci4: command tx timeout
[   89.191435][ T5802] team0: Port device team_slave_1 added
[   89.192196][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.192208][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.192230][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.294769][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.294787][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.294809][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.340732][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.340749][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.340771][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.344117][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.344129][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.344151][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.369512][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.369529][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.369558][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.371799][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.371810][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.371832][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.416989][ T5801] hsr_slave_0: entered promiscuous mode
[   89.419246][ T5801] hsr_slave_1: entered promiscuous mode
[   89.422080][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.422093][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.422115][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.487036][ T5799] hsr_slave_0: entered promiscuous mode
[   89.489150][ T5799] hsr_slave_1: entered promiscuous mode
[   89.490213][ T5799] debugfs: 'hsr0' already exists in 'hsr'
[   89.490306][ T5799] Cannot create hsr debugfs directory
[   89.642246][ T5800] hsr_slave_0: entered promiscuous mode
[   89.643106][ T5800] hsr_slave_1: entered promiscuous mode
[   89.643675][ T5800] debugfs: 'hsr0' already exists in 'hsr'
[   89.643694][ T5800] Cannot create hsr debugfs directory
[   89.670880][ T5818] hsr_slave_0: entered promiscuous mode
[   89.672568][ T5818] hsr_slave_1: entered promiscuous mode
[   89.673551][ T5818] debugfs: 'hsr0' already exists in 'hsr'
[   89.673575][ T5818] Cannot create hsr debugfs directory
[   89.729573][ T5802] hsr_slave_0: entered promiscuous mode
[   89.730437][ T5802] hsr_slave_1: entered promiscuous mode
[   89.731115][ T5802] debugfs: 'hsr0' already exists in 'hsr'
[   89.731136][ T5802] Cannot create hsr debugfs directory
[   90.986139][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.046037][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.065993][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.109002][   T60] Bluetooth: hci2: command tx timeout
[   91.109104][ T5808] Bluetooth: hci0: command tx timeout
[   91.115239][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.189053][ T5808] Bluetooth: hci1: command tx timeout
[   91.189089][ T5808] Bluetooth: hci3: command tx timeout
[   91.250978][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.268572][   T60] Bluetooth: hci4: command tx timeout
[   91.300669][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.339247][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.385477][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.486328][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.537046][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.558019][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.611074][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.744940][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.791374][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.845585][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.893733][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.994825][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.010357][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.063532][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.111422][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.162150][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.230679][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[   92.271666][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.272398][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.313937][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.316240][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.316367][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.403872][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   92.443350][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.443481][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.471366][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.494711][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.494843][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.568094][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   92.622503][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.622722][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.628248][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.695914][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.696088][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.790492][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.805012][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   92.862363][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.862508][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.903501][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.909703][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.931503][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[   92.989174][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.989362][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.054934][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.056082][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.118141][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.189357][   T60] Bluetooth: hci0: command tx timeout
[   93.189393][   T60] Bluetooth: hci2: command tx timeout
[   93.269492][   T60] Bluetooth: hci1: command tx timeout
[   93.269585][ T5808] Bluetooth: hci3: command tx timeout
[   93.331799][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.352046][ T5808] Bluetooth: hci4: command tx timeout
[   93.502718][ T5801] veth0_vlan: entered promiscuous mode
[   93.579148][ T5801] veth1_vlan: entered promiscuous mode
[   93.619963][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.662729][ T5799] veth0_vlan: entered promiscuous mode
[   93.702067][ T5799] veth1_vlan: entered promiscuous mode
[   93.753617][ T5801] veth0_macvtap: entered promiscuous mode
[   93.788031][ T5801] veth1_macvtap: entered promiscuous mode
[   93.856673][ T5799] veth0_macvtap: entered promiscuous mode
[   93.858138][ T5800] veth0_vlan: entered promiscuous mode
[   93.881167][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.887949][ T5799] veth1_macvtap: entered promiscuous mode
[   93.904685][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.907048][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.930361][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.953933][ T5800] veth1_vlan: entered promiscuous mode
[   93.987586][   T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.012108][   T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.028213][   T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.050330][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.051380][   T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.132488][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.231604][  T166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.233929][  T166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.236329][  T166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.287497][  T166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.431776][ T5800] veth0_macvtap: entered promiscuous mode
[   94.499163][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.499186][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.505587][ T5818] veth0_vlan: entered promiscuous mode
[   94.513837][ T5800] veth1_macvtap: entered promiscuous mode
[   94.641803][ T5818] veth1_vlan: entered promiscuous mode
[   94.667027][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.667049][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.710284][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.743580][ T1569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.743603][ T1569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.769511][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.823300][   T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.845488][   T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.860209][   T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.860800][ T5802] veth0_vlan: entered promiscuous mode
[   94.864662][   T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.865468][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.865486][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.003181][ T5818] veth0_macvtap: entered promiscuous mode
[   95.009826][ T5802] veth1_vlan: entered promiscuous mode
[   95.075485][ T5818] veth1_macvtap: entered promiscuous mode
[   95.276920][   T60] Bluetooth: hci0: command tx timeout
[   95.276982][ T5808] Bluetooth: hci2: command tx timeout
[   95.349198][   T60] Bluetooth: hci1: command tx timeout
[   95.349247][ T5808] Bluetooth: hci3: command tx timeout
[   95.382830][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.428672][ T5808] Bluetooth: hci4: command tx timeout
[   95.453773][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.453880][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.453896][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.666123][ T5802] veth0_macvtap: entered promiscuous mode
[   95.733321][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.737055][ T5802] veth1_macvtap: entered promiscuous mode
[   96.605846][ T3465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.628143][ T3465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.680224][ T3465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.765935][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.765967][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.856693][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.935096][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.010991][  T166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.015529][  T166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.033076][  T166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.052688][  T166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.314080][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.314101][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.085386][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.085409][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.212777][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.212798][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.479974][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.479997][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.817546][ T5955] binder: BINDER_SET_CONTEXT_MGR already set
[   98.817563][ T5955] binder: 5953:5955 ioctl 4018620d 200000000040 returned -16
[   99.147863][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.541751][ T5960] binder: 5959:5960 ioctl c0306201 200000000080 returned -14
[   99.570658][ T5960] binder: 5959:5960 ioctl c0306201 0 returned -14
[   99.786735][ T5955] syz.3.10 (5955): drop_caches: 2
[  100.679836][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'.
[  100.680081][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16'.
[  101.433776][ T5960] syz.1.11 (5960): drop_caches: 2
[  101.505287][ T5977] Zero length message leads to an empty skb
[  101.888332][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.908346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.928331][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.938330][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.948323][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.958326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.968362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.978332][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.988325][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  101.998322][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  104.158673][ T1242] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.398424][ T1242] usb 5-1: Using ep0 maxpacket: 16
[  104.446694][ T1242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64
[  104.472737][ T1242] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  104.472769][ T1242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.472788][ T1242] usb 5-1: Product: syz
[  104.472802][ T1242] usb 5-1: Manufacturer: syz
[  104.472816][ T1242] usb 5-1: SerialNumber: syz
[  104.597272][ T1242] usb 5-1: config 0 descriptor??
[  104.803610][ T1242] usb 5-1: can't set config #0, error -71
[  104.871530][ T1242] usb 5-1: USB disconnect, device number 2
[  105.016332][ T5997] binder: 5996:5997 ioctl c0306201 2000000003c0 returned -14
[  105.284095][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'.
[  105.284134][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'.
[  105.408597][  T859] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.706131][  T859] usb 5-1: Using ep0 maxpacket: 16
[  105.953936][  T859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.959298][  T859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.959351][  T859] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  105.959374][  T859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.199837][  T859] usb 5-1: config 0 descriptor??
[  107.079934][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.079981][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.080006][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.080030][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.080053][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.080077][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.080101][  T859] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0
[  107.208510][  T859] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0
[  107.212329][  T859] ntrig 0003:1B96:0008.0001: Firmware version: 7.14.3.10.4 (b89f 4471)
[  107.468566][  T859] usb 5-1: USB disconnect, device number 3
[  107.494809][ T6016] fido_id[6016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  110.061116][ T6041] binder: 6040:6041 ioctl c0306201 2000000003c0 returned -14
[  110.492914][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.41'.
[  110.492957][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.41'.
[  113.048468][ T5913] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  113.124365][ T6076] binder: 6075:6076 ioctl c0306201 2000000003c0 returned -14
[  114.748430][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  114.751334][ T5913] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  114.751353][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.811356][ T5913] gspca_main: nw80x-2.14.0 probing 055f:d001
[  115.571503][ T5913] gspca_nw80x: reg_r err -71
[  115.571609][ T5913] nw80x 2-1:3.0: probe with driver nw80x failed with error -71
[  115.608766][ T5913] usb 2-1: USB disconnect, device number 2
[  115.704910][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'.
[  115.704937][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'.
[  116.268518][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  116.428650][ T5913] usb 3-1: Using ep0 maxpacket: 16
[  116.431453][ T5913] usb 3-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config
[  116.431479][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.437392][ T5913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.437423][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.437444][ T5913] usb 3-1: Product: syz
[  116.437457][ T5913] usb 3-1: Manufacturer: syz
[  116.437471][ T5913] usb 3-1: SerialNumber: syz
[  116.628490][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.729117][ T5913] usb 3-1: 0:2 : does not exist
[  116.729217][ T5913] usb 3-1: unit 14 not found!
[  116.789860][ T5878] usb 2-1: Using ep0 maxpacket: 16
[  116.794662][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64
[  116.822918][ T5878] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  116.822951][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.822971][ T5878] usb 2-1: Product: syz
[  116.822986][ T5878] usb 2-1: Manufacturer: syz
[  116.823001][ T5878] usb 2-1: SerialNumber: syz
[  116.871746][ T5808] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  116.871955][ T5808] Bluetooth: hci3: Injecting HCI hardware error event
[  116.873372][ T5808] Bluetooth: hci3: hardware error 0x00
[  116.907353][ T5878] usb 2-1: config 0 descriptor??
[  116.981293][ T5878] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  117.052046][ T5913] usb 3-1: USB disconnect, device number 2
[  117.310927][ T1588] usb 2-1: Failed to submit usb control message: -71
[  117.310967][ T1588] usb 2-1: unable to send the bmi data to the device: -71
[  117.310981][ T1588] usb 2-1: unable to get target info from device
[  117.310996][ T1588] usb 2-1: could not get target info (-71)
[  117.311179][ T1588] usb 2-1: could not probe fw (-71)
[  117.311528][ T5892] usb 2-1: USB disconnect, device number 3
[  117.689869][ T6115] binder: BINDER_SET_CONTEXT_MGR already set
[  117.689886][ T6115] binder: 6113:6115 ioctl 4018620d 200000000040 returned -16
[  117.695534][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.312034][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.462787][ T5892] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  118.462821][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.483015][ T5892] usb 5-1: config 0 descriptor??
[  118.491915][ T5892] cp210x 5-1:0.0: cp210x converter detected
[  118.880604][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.943366][ T5892] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  119.000251][ T5892] usb 5-1: cp210x converter now attached to ttyUSB0
[  119.039590][   T10] usb 2-1: Using ep0 maxpacket: 32
[  119.056411][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  119.056442][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.133973][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  119.189884][ T5808] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  119.222061][ T5892] usb 5-1: USB disconnect, device number 4
[  119.303454][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  119.450861][ T5892] cp210x 5-1:0.0: device disconnected
[  119.659712][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  119.721505][   T10] gspca_nw80x: reg_r err -71
[  119.721600][   T10] nw80x 2-1:3.0: probe with driver nw80x failed with error -71
[  119.742275][   T10] usb 2-1: USB disconnect, device number 4
[  119.831102][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  119.833389][ T5913] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.833414][ T5913] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.842761][ T5913] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.842792][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.842812][ T5913] usb 1-1: Product: syz
[  119.842826][ T5913] usb 1-1: Manufacturer: syz
[  119.842838][ T5913] usb 1-1: SerialNumber: syz
[  120.138370][ T5913] usb 1-1: 0:2 : does not exist
[  120.162063][ T5913] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  120.416389][ T5913] usb 1-1: USB disconnect, device number 2
[  120.434777][ T6166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.733779][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.758429][ T1242] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.915971][ T1242] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.915999][ T1242] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  120.916038][ T1242] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  120.916061][ T1242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.091861][ T1242] usb 2-1: config 0 descriptor??
[  121.320610][ T6188] warning: `syz.4.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  121.668813][ T5808] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  121.669026][ T5808] Bluetooth: hci1: Injecting HCI hardware error event
[  121.671667][ T5808] Bluetooth: hci1: hardware error 0x00
[  123.834734][ T5893] usb 2-1: USB disconnect, device number 5
[  124.459890][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'.
[  124.481086][ T5808] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  124.610632][ T6216] could not allocate digest TFM handle sha1_mb
[  129.108769][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  129.451826][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.451886][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  129.451931][   T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  129.451953][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.519688][   T10] usb 1-1: config 0 descriptor??
[  130.554629][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  131.327194][ T6282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.104'.
[  131.327245][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.104'.
[  131.879618][ T5892] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  131.932650][   T10] usb 1-1: USB disconnect, device number 3
[  132.042647][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.042684][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.042911][ T5892] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  132.042936][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.112349][ T5892] usb 3-1: config 0 descriptor??
[  132.623453][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.111'.
[  132.623505][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'.
[  133.170856][ T1325] ieee802154 phy0 wpan0: encryption failed: -22
[  133.170976][ T1325] ieee802154 phy1 wpan1: encryption failed: -22
[  135.535771][ T6317] Bluetooth: MGMT ver 1.23
[  136.102205][ T6320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.117'.
[  136.104414][ T6320] fuse: Bad value for 'user_id'
[  136.104433][ T6320] fuse: Bad value for 'user_id'
[  136.122834][ T6320] sctp: [Deprecated]: syz.0.117 (pid 6320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  136.122834][ T6320] Use struct sctp_sack_info instead
[  136.385143][ T5892] usbhid 3-1:0.0: can't add hid device: -71
[  136.385283][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  136.405106][ T5892] usb 3-1: USB disconnect, device number 3
[  137.020879][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.121'.
[  137.021905][ T6338] fuse: Bad value for 'user_id'
[  137.021916][ T6338] fuse: Bad value for 'user_id'
[  137.023995][ T6338] sctp: [Deprecated]: syz.4.121 (pid 6338) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.023995][ T6338] Use struct sctp_sack_info instead
[  137.260872][  T810] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  137.420455][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.420487][  T810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.420511][  T810] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  137.420524][  T810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.423770][  T810] usb 3-1: config 0 descriptor??
[  140.154083][ T6354] netlink: 4536 bytes leftover after parsing attributes in process `syz.4.124'.
[  140.740170][  T810] usbhid 3-1:0.0: can't add hid device: -71
[  140.740305][  T810] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  140.818472][  T810] usb 3-1: USB disconnect, device number 4
[  145.253725][ T6411] could not allocate digest TFM handle sha1_mb
[  145.428838][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'.
[  145.436745][ T6425] netlink: 'syz.4.147': attribute type 16 has an invalid length.
[  145.436766][ T6425] netlink: 156 bytes leftover after parsing attributes in process `syz.4.147'.
[  145.482912][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'.
[  145.521444][ T5893] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  145.708590][ T5893] usb 2-1: Using ep0 maxpacket: 16
[  145.710997][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.711022][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  145.714172][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  145.714201][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.714221][ T5893] usb 2-1: Product: syz
[  145.714235][ T5893] usb 2-1: Manufacturer: syz
[  145.714249][ T5893] usb 2-1: SerialNumber: syz
[  146.084948][ T5893] usb 2-1: 0:2 : does not exist
[  146.192511][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'.
[  146.192562][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'.
[  146.974759][ T5893] usb 2-1: USB disconnect, device number 6
[  148.387174][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.122404][ T6464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'.
[  150.122430][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'.
[  150.178053][ T6465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'.
[  150.178082][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'.
[  152.864011][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.168'.
[  152.864062][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'.
[  153.769755][ T6479] could not allocate digest TFM handle sha1_mb
[  153.910653][ T6501] ==================================================================
[  153.910672][ T6501] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740
[  153.910714][ T6501] Read of size 8 at addr ffff888028dfe920 by task syz.0.169/6501
[  153.910732][ T6501] 
[  153.910745][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  153.910769][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  153.910781][ T6501] Call Trace:
[  153.910789][ T6501]  <TASK>
[  153.910798][ T6501]  dump_stack_lvl+0xe8/0x150
[  153.910830][ T6501]  print_report+0xba/0x230
[  153.910858][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  153.910888][ T6501]  kasan_report+0x117/0x150
[  153.910911][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  153.910947][ T6501]  af_alg_pull_tsgl+0x1c6/0x740
[  153.910987][ T6501]  skcipher_recvmsg+0x5df/0x1140
[  153.911020][ T6501]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  153.911047][ T6501]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  153.911079][ T6501]  ? security_socket_recvmsg+0x7e/0x2c0
[  153.911118][ T6501]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  153.911142][ T6501]  sock_recvmsg+0x172/0x1b0
[  153.911169][ T6501]  sock_read_iter+0x25a/0x330
[  153.911198][ T6501]  ? __pfx_sock_read_iter+0x10/0x10
[  153.911229][ T6501]  ? preempt_schedule_thunk+0x16/0x30
[  153.911254][ T6501]  ? preempt_schedule_common+0x82/0xd0
[  153.911281][ T6501]  do_iter_readv_writev+0x62b/0x8d0
[  153.911303][ T6501]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  153.911327][ T6501]  ? rw_verify_area+0x2ac/0x4e0
[  153.911359][ T6501]  vfs_readv+0x292/0x850
[  153.911383][ T6501]  ? __pfx_futex_wake+0x10/0x10
[  153.911410][ T6501]  ? __pfx_vfs_readv+0x10/0x10
[  153.911433][ T6501]  ? __sys_sendmmsg+0x4b4/0x4e0
[  153.911464][ T6501]  ? __fget_files+0x2a/0x420
[  153.911493][ T6501]  ? __fget_files+0x3a6/0x420
[  153.911517][ T6501]  ? __fget_files+0x2a/0x420
[  153.911545][ T6501]  do_readv+0x15a/0x2e0
[  153.911576][ T6501]  ? __pfx_do_readv+0x10/0x10
[  153.911604][ T6501]  do_syscall_64+0x14d/0xf80
[  153.911625][ T6501]  ? trace_irq_disable+0x3b/0x150
[  153.911649][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.911670][ T6501]  ? clear_bhb_loop+0x40/0x90
[  153.911693][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.911713][ T6501] RIP: 0033:0x7fc616dfc819
[  153.911730][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.911747][ T6501] RSP: 002b:00007fc61504e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  153.911770][ T6501] RAX: ffffffffffffffda RBX: 00007fc617075fa0 RCX: 00007fc616dfc819
[  153.911785][ T6501] RDX: 0000000000000001 RSI: 0000200000003c80 RDI: 0000000000000004
[  153.911798][ T6501] RBP: 00007fc616e92c91 R08: 0000000000000000 R09: 0000000000000000
[  153.911810][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.911822][ T6501] R13: 00007fc617076038 R14: 00007fc617075fa0 R15: 00007fffdba1e278
[  153.911846][ T6501]  </TASK>
[  153.911853][ T6501] 
[  153.911858][ T6501] Allocated by task 6501:
[  153.911868][ T6501]  kasan_save_track+0x3e/0x80
[  153.911896][ T6501]  __kasan_kmalloc+0x93/0xb0
[  153.911924][ T6501]  __kmalloc_noprof+0x3e7/0x7b0
[  153.911940][ T6501]  sock_kmalloc+0xd6/0x160
[  153.911962][ T6501]  skcipher_recvmsg+0x54d/0x1140
[  153.911983][ T6501]  sock_recvmsg+0x172/0x1b0
[  153.912009][ T6501]  sock_read_iter+0x25a/0x330
[  153.912034][ T6501]  do_iter_readv_writev+0x62b/0x8d0
[  153.912052][ T6501]  vfs_readv+0x292/0x850
[  153.912072][ T6501]  do_readv+0x15a/0x2e0
[  153.912093][ T6501]  do_syscall_64+0x14d/0xf80
[  153.912115][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.912134][ T6501] 
[  153.912139][ T6501] The buggy address belongs to the object at ffff888028dfe900
[  153.912139][ T6501]  which belongs to the cache kmalloc-32 of size 32
[  153.912156][ T6501] The buggy address is located 0 bytes to the right of
[  153.912156][ T6501]  allocated 32-byte region [ffff888028dfe900, ffff888028dfe920)
[  153.912178][ T6501] 
[  153.912183][ T6501] The buggy address belongs to the physical page:
[  153.912193][ T6501] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28dfe
[  153.912212][ T6501] flags: 0x80000000000000(node=0|zone=1)
[  153.912228][ T6501] page_type: f5(slab)
[  153.912247][ T6501] raw: 0080000000000000 ffff88813fe1a780 dead000000000100 dead000000000122
[  153.912265][ T6501] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[  153.912275][ T6501] page dumped because: kasan: bad access detected
[  153.912285][ T6501] page_owner tracks the page as allocated
[  153.912292][ T6501] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1971, tgid 1971 (kworker/u8:1), ts 14212817989, free_ts 14212083756
[  153.912326][ T6501]  post_alloc_hook+0x231/0x280
[  153.912355][ T6501]  get_page_from_freelist+0x28bb/0x2950
[  153.912377][ T6501]  __alloc_frozen_pages_noprof+0x18d/0x380
[  153.912398][ T6501]  allocate_slab+0x77/0x660
[  153.912421][ T6501]  refill_objects+0x334/0x3c0
[  153.912442][ T6501]  __pcs_replace_empty_main+0x35c/0x710
[  153.912467][ T6501]  __kmalloc_cache_noprof+0x44e/0x690
[  153.912485][ T6501]  kmem_cache_free+0x159/0x6b0
[  153.912502][ T6501]  release_task+0xfee/0x16f0
[  153.912522][ T6501]  do_exit+0x1674/0x23c0
[  153.912540][ T6501]  call_usermodehelper_exec_async+0x35a/0x360
[  153.912575][ T6501]  ret_from_fork+0x51e/0xb90
[  153.912602][ T6501]  ret_from_fork_asm+0x1a/0x30
[  153.912620][ T6501] page last free pid 13 tgid 13 stack trace:
[  153.912632][ T6501]  __free_frozen_pages+0xfe3/0x1170
[  153.912649][ T6501]  __kasan_populate_vmalloc+0x1b2/0x1d0
[  153.912677][ T6501]  alloc_vmap_area+0xd73/0x14b0
[  153.912703][ T6501]  __get_vm_area_node+0x226/0x350
[  153.912731][ T6501]  __vmalloc_node_range_noprof+0x372/0x1730
[  153.912761][ T6501]  __vmalloc_node_noprof+0xc2/0x100
[  153.912791][ T6501]  dup_task_struct+0x275/0x9a0
[  153.912819][ T6501]  copy_process+0x508/0x3cd0
[  153.912846][ T6501]  kernel_clone+0x249/0x840
[  153.912874][ T6501]  user_mode_thread+0x110/0x180
[  153.912904][ T6501]  call_usermodehelper_exec_work+0x5c/0x230
[  153.912930][ T6501]  process_scheduled_works+0xb6e/0x18c0
[  153.912957][ T6501]  worker_thread+0xa53/0xfc0
[  153.912984][ T6501]  kthread+0x388/0x470
[  153.913002][ T6501]  ret_from_fork+0x51e/0xb90
[  153.913028][ T6501]  ret_from_fork_asm+0x1a/0x30
[  153.913046][ T6501] 
[  153.913051][ T6501] Memory state around the buggy address:
[  153.913062][ T6501]  ffff888028dfe800: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  153.913076][ T6501]  ffff888028dfe880: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  153.913089][ T6501] >ffff888028dfe900: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[  153.913099][ T6501]                                ^
[  153.913110][ T6501]  ffff888028dfe980: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  153.913124][ T6501]  ffff888028dfea00: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[  153.913134][ T6501] ==================================================================
[  154.052591][ T6501] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  154.052613][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz.0.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  154.052644][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  154.052655][ T6501] Call Trace:
[  154.052663][ T6501]  <TASK>
[  154.052672][ T6501]  vpanic+0x56c/0xa60
[  154.052707][ T6501]  ? __pfx_vpanic+0x10/0x10
[  154.052733][ T6501]  ? __pfx___schedule+0x10/0x10
[  154.052755][ T6501]  panic+0xc5/0xd0
[  154.052780][ T6501]  ? __pfx_panic+0x10/0x10
[  154.052807][ T6501]  ? preempt_schedule_common+0x82/0xd0
[  154.052829][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  154.052856][ T6501]  check_panic_on_warn+0x89/0xb0
[  154.052876][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  154.052906][ T6501]  end_report+0x73/0x180
[  154.052924][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  154.052949][ T6501]  kasan_report+0x128/0x150
[  154.052968][ T6501]  ? af_alg_pull_tsgl+0x1c6/0x740
[  154.052997][ T6501]  af_alg_pull_tsgl+0x1c6/0x740
[  154.053030][ T6501]  skcipher_recvmsg+0x5df/0x1140
[  154.053058][ T6501]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  154.053080][ T6501]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  154.053105][ T6501]  ? security_socket_recvmsg+0x7e/0x2c0
[  154.053133][ T6501]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  154.053153][ T6501]  sock_recvmsg+0x172/0x1b0
[  154.053180][ T6501]  sock_read_iter+0x25a/0x330
[  154.053204][ T6501]  ? __pfx_sock_read_iter+0x10/0x10
[  154.053230][ T6501]  ? preempt_schedule_thunk+0x16/0x30
[  154.053251][ T6501]  ? preempt_schedule_common+0x82/0xd0
[  154.053273][ T6501]  do_iter_readv_writev+0x62b/0x8d0
[  154.053293][ T6501]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  154.053314][ T6501]  ? rw_verify_area+0x2ac/0x4e0
[  154.053341][ T6501]  vfs_readv+0x292/0x850
[  154.053361][ T6501]  ? __pfx_futex_wake+0x10/0x10
[  154.053403][ T6501]  ? __pfx_vfs_readv+0x10/0x10
[  154.053423][ T6501]  ? __sys_sendmmsg+0x4b4/0x4e0
[  154.053451][ T6501]  ? __fget_files+0x2a/0x420
[  154.053475][ T6501]  ? __fget_files+0x3a6/0x420
[  154.053497][ T6501]  ? __fget_files+0x2a/0x420
[  154.053523][ T6501]  do_readv+0x15a/0x2e0
[  154.053546][ T6501]  ? __pfx_do_readv+0x10/0x10
[  154.053571][ T6501]  do_syscall_64+0x14d/0xf80
[  154.053592][ T6501]  ? trace_irq_disable+0x3b/0x150
[  154.053614][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.053757][ T6501]  ? clear_bhb_loop+0x40/0x90
[  154.053790][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.053813][ T6501] RIP: 0033:0x7fc616dfc819
[  154.053834][ T6501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.053853][ T6501] RSP: 002b:00007fc61504e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  154.053878][ T6501] RAX: ffffffffffffffda RBX: 00007fc617075fa0 RCX: 00007fc616dfc819
[  154.053893][ T6501] RDX: 0000000000000001 RSI: 0000200000003c80 RDI: 0000000000000004
[  154.053907][ T6501] RBP: 00007fc616e92c91 R08: 0000000000000000 R09: 0000000000000000
[  154.053920][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.053934][ T6501] R13: 00007fc617076038 R14: 00007fc617075fa0 R15: 00007fffdba1e278
[  154.053959][ T6501]  </TASK>
[  154.054115][ T6501] Kernel Offset: disabled